IPTD Part2

July 16, 2025 / Balaji Bandi / 0 Comments

Scale and performance

The SISF table can scale up to 100,000 entries per switch. SISF also offers optimization, which is tracked for cases where multiple IP addresses can be linked to a single MAC address to reduce the number of used entries. Such examples are on uplink interfaces where multiple IP addresses can be behind the same MAC address.

Now we going to configure and validate IPDT feature :

Switch(config)#ip device tracking

Starting from Release 16.3, the CLI syntax for SISF has removed the “ip”:

  Switch(config)# device-tracking policy reachable-lifetime

  Switch(config)# device-tracking policy retry-interval

  Switch(config)# device-tracking policy <policy-name>

In SD-Access

  • Device-Tracking process on Fabric Devices responsible for snooping ARP/ND packets and rewriting Destination Address to Unicast Address based learned from LISP
  • Device-tracking learns and tracks IP endpoints
  • Device-tracking shows 0000.0000.00fd when an IP address is in the process of being resolved. Interface shows where packet that originated the request is located
  • For resolved entries it shows them as RMT entries.
  • Entries have short live time to show inside device-tracking
  • Only in used when flood arp-nd is not enabled

#show device-tracking ?

capture-policy Message capture policy
counters Interface counters
database Show device-tracking database
events Display recent events history
features Registered device-tracking security features
messages Display recent messages history
policies Configured policies
policy Display a policy for feature device-tracking

#show device-tracking database

Binding Table has 215 entries, 157 dynamic (limit 200000) <==== shows how many entries and Limit
Codes: L – Local, S – Static, ND – Neighbor Discovery, ARP – Address Resolution Protocol, DH4 – IPv4 DHCP, DH6 – IPv6 DHCP, PKT – Other Packet, API – API created
Preflevel flags (prlvl):
0001:MAC and LLA match 0002:Orig trunk 0004:Orig access
0008:Orig trusted trunk 0010:Orig trusted access 0020:DHCP assigned
0040:Cga authenticated 0080:Cert authenticated 0100:Statically assigned

Happy Labbinggggggggggggggggggggg!

1 2 3 4 … 203