i try to enable trustsec on the switchports of a C1100 series router. Everything is working if i assign a static SGT mapping to a client IP. If i want to assign SGT tags dynamically via MAB i can see in the authentication session that the SGT is assigned but since the C1100 has no "ip device tracking" support the sgt mapping table shows no entry for the client IP.
Is ip device tracking always mandatory to make that work ? Would dhcp snooping alone be sufficient to get the mapping entry ?