cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

384
Views
10
Helpful
2
Replies
Highlighted
Contributor

Access-session Template Monitor Command and IP Device Tracking

I am deploying 802.1x and the command access-session template monitor was in a best practices configuration I came across.  I placed this command on a C3560CX 8 port switch and it caused the switch to turn on IP Device Tracking on the trunk port immediately.  A show ip device tracking before entering the access-session template monitor command, showed a couple of devices. Afterwards, the show ip device tracking command displayed hundreds within seconds. Has anybody ran across this? Can anybody explain this? 

I entered commands in 1 at a time and ran the show ip device tracking all command after each one so I know that command caused the issue.  I can even remove that command, and the show ip device tracking all removes all of the entries immediately.

I look forward to any response.

Please rate helpful posts.

 

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Advisor

Re: Access-session Template Monitor Command and IP Device Tracking

Hi.


device tracking is required for dot1x to work especially with dacls. If you
have it enabled on trunk then there are many devices behind the trunk which
are learnt through device tracking.
2 REPLIES 2
Contributor

Re: Access-session Template Monitor Command and IP Device Tracking

Hi, in some of guides there was best practice command on trunk port:

ip device tracking maximum 0 

VIP Advisor

Re: Access-session Template Monitor Command and IP Device Tracking

Hi.


device tracking is required for dot1x to work especially with dacls. If you
have it enabled on trunk then there are many devices behind the trunk which
are learnt through device tracking.