SISF Device-Tracking Does Not Prevent Duplicate IP

[onibala]

I am using the new SISF with device tracking, and it does not prevent duplicate IP address.

I setup a policy for user port with the following configuration:

security-level guard

device-role node

limit address-count 1

Global: device-tracking tracking auto-source

Thank you,

Audie

[onibala]

IP Source Binding from the older IP Source Guard is still in place:

ip source binding 10.5.22.1 xxxx.xxxx.xxxx vlan 100 interface Gi1/0/22

The switch is Layer-2, and no SVI.

[onibala · Accepted solution]

Silvana Melazzini of Cisco TAC gave the solution:

Global: device-tracking logging theft

Update: Sorry..it DID not stop the Duplicate IP