Thank you! JT
On Sun, May 29, 2011 at 9:51 AM, Kingsley Charles < [email protected]> wrote: > "ip device tracking" is used by switch track existence of a host in > switches per l2 interface. This command is used with L2 IP NAC, which won't > work without it. > > > Snippet from > http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/catos/8.x/configuration/guide/host_age.html > > Understanding How Host Aging is Tracked > > Layer 2 authentication features, 802.1x, and MAC authentication bypass > install entries into the CAM table to ensure packet switching in the > hardware. The CAM entries are static and it cannot be ensured that they are > current. The entries age with the hardware if they are not removed by the > authentication feature at the end of the session. If a host leaves before > the authentication session expires or if the authentication manager is not > notified about removing the CAM entry, the stale entry remains in the > hardware switching table. Even the Layer 3 protocols, LAN port IP and > Web-based proxy authentication have no method to age out the CAM entry if > the host leaves before the session expires. > > The IP device-tracking feature, which is included in the authentication > manager, tracks the existence of the host and removes aged entries in the > CAM table. The device-tracking feature ensures that the hardware entries and > authentication sessions get aged out. As a result of aging, the hosts are > removed from the EARL. > > > With regards > Kings > > > On Sun, May 29, 2011 at 8:49 PM, Bruno <[email protected]> wrote: > >> Which command is that? >> I do not have it >> >> SW2(config-if)#ip verify source ? >> port-security port security >> <cr> >> >> >> >> >> On Sun, May 29, 2011 at 10:17 AM, Jim Terry <[email protected]> wrote: >> >>> Hi all, >>> >>> Here is my question but in more detail: >>> >>> What does this do: >>> >>> Switch(config)# ip device tracking >>> Switch(config)# *interface gigabitethernet 0/3 >>> *Switch(config-if)# switchport mode access >>> Switch(config-if)# switchport access vlan 10 >>> Switch(config-if)# ip device tracking maximum 5 >>> Switch(config-if)# ip verify source tracking >>> Switch(config-if)# end >>> I dont understand what device tracking does. >>> >>> Thanks, >>> >>> JT >>> >>> >>> >>> On Sat, May 28, 2011 at 10:27 AM, Kingsley Charles < >>> [email protected]> wrote: >>> >>>> Can you elaborate your question. >>>> >>>> With regards >>>> Kings >>>> >>>> On Sat, May 28, 2011 at 7:29 PM, Jim Terry <[email protected]>wrote: >>>> >>>>> Hi all, >>>>> >>>>> I am looking at the 3560 config guide and on the section for IPSG it >>>>> talks about a static host(the section that has IP device tracking). I >>>>> know >>>>> it is different than adding a binding to a non dhcp host but I still dont >>>>> understand the concept. >>>>> >>>>> Can anyone enlighten me? >>>>> >>>>> JT >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> For more information regarding industry leading CCIE Lab training, >>>>> please visit www.ipexpert.com >>>>> >>>>> Are you a CCNP or CCIE and looking for a job? Check out >>>>> www.PlatinumPlacement.com <http://www.platinumplacement.com/> >>>>> >>>> >>>> >>> >>> _______________________________________________ >>> For more information regarding industry leading CCIE Lab training, please >>> visit www.ipexpert.com >>> >>> Are you a CCNP or CCIE and looking for a job? Check out >>> www.PlatinumPlacement.com <http://www.platinumplacement.com/> >>> >> >> >> >> -- >> Bruno Fagioli (by Jaunty Jackalope) >> Cisco Security Professional >> > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
