ISE IOS 16.X Configuration Example

[Jefkelle]

Looking for IOS 16.x configuration example.  Specifically looking at device tracking.  Do you create two policies?  One for Access port and or VLAN, and one for trunk ports (to disable)?  Do you apply tracking policy to interface and or VLAN?

[kthiruve]

Hi Jeffery,

It is good to apply policy in interface with protocol dhcpv4/v6 and tracking enabled.

Trusted port takes preference. Other options are used as needed.

Reason is that we need to track multiple devices connected to the port if it is multi-host.

That said, please check with the switching team for best practices if you should use VLAN over interface and relative advantage etc.

Thanks

Krishnan