cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
401
Views
0
Helpful
1
Replies

Tying device-tracking policy to a source template?

ruhearn
Cisco Employee
Cisco Employee

Hello, 

 

I was reviewing the IBNS 2.0 guide: https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515

 

which states:

 

The device-tracking policy is effective only when applying the policy to switchport using the following command:

interface GigabitEthernet x/y/z

  device-tracking attach-policy POLICY_NAME

 

Has it ever or is it going to be possible in the future to tie the device-tracking policy into a source template that is used on an interface to optimize the 802.1x configuration on a port? 

 

Thanks!

 

@hariholla @howon 

1 Reply 1

Mike.Cifelli
VIP Alumni
VIP Alumni
Good question. I can tell you that even in the SDA cutting-edge world DNAC provisions the two separately on interfaces for on-boarding of user devices. Interfaces have a source template that contains 8021x configs, etc. & a device-tracking policy applied. I actually like how they are separated and to be honest I do not see any actual benefits of tying the two together. HTH!