CML SISF-Based Device Tracking configuration

diegom21735 — Wed, 13 Jan 2021 17:09:06 GMT

Hi, I'm trying to test SISF configuration on CML, the configuration follows the guidelines found in here:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-12/configuration_guide/sec/b_1612_sec_9300_cg/configuring_sisf_based_device_tracking.html

Unfortunatly when trying to attach the policy to the interface an error occurs:

SW-1(config)#device-tracking policy DT_trunk_policy
SW-1(config-device-tracking)#trusted-port
SW-1(config-device-tracking)# device-role switch

SW-1(config-device-tracking)#int gi 0/0
SW-1(config-if)#switchport trunk encapsulation dot1q
SW-1(config-if)#switchport mode trunk
SW-1(config-if)#device-tracking attach-policy DT_trunk_policy
Hardware failure <----- ERROR
SW-1(config)#

The policy appears to be created:

SW-1#show device-tracking policy DT_trunk_policy
Policy DT_trunk_policy configuration:
trusted-port
security-level guard
device-role switch
gleaning from Neighbor Discovery
gleaning from DHCP
NOT gleaning from ARP
NOT gleaning from DHCP4
NOT gleaning from protocol unkn
Policy DT_trunk_policy is applied on the following targets:
Target Type Policy Feature Target range

SW-1#
SW-1#show device-tracking policies interface gigabitEthernet 0/0
Target Type Policy Feature Target range
SW-1#

I would like to understand if this is a CML limitation or if I'm making a mistake somewhere.

Thanks for the attention

topic CML SISF-Based Device Tracking configuration in DevNet Sandbox

CML SISF-Based Device Tracking configuration