Cisco Catalyst 4500 Series - Applying a Protocol Filter to the Device Sensor Output

49-120
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 49 Configuring 802.1X Port-Based Authentication
Configuring Device Sensor
Applying a Protocol Filter to the Device Sensor Output
Beginning in privileged EXEC mode, follow these steps to apply a CDP, LLDP, or DHCP filter to the sensor output. The output
is session notifications to internal sensor clients and accounting requests to the RADIUS server.
Note Only one filter list can be included or excluded at a time.
Tracking TLV Changes
By default, client notifications and accounting events are generated only when an incoming packet includes a TLV that has not
previously been received within a given session.
To enable client notifications and accounting events for TLV changes, follow these steps, beginning in privileged EXCEC
mode:
Step 3
option {name option-name | number
option-number}
Switch(config-sensor-dhcplist)# option
number 50
Adds individual DHCP options to the option list. You can delete the
entire option list without removing options individually from the list
by using the no device-sensor filter-list dhcp list option-list-name
command.
Step 4
end
Switch(config)# end
Returns to privileged EXEC mode.
Command Purpose
Step 1
configure terminal
Switch# configure terminal
Enters global configuration mode.
Step 2
device-sensor filter-spec {cdp | dhcp
| lldp} {exclude {all | list
list-name} | include list list-name}
Switch(config)# device-sensor
filter-spec cdp include list list1
Applies a specific protocol filter containing a list of protocol TLV
fields or DHCP options to the Device Sensor output.
• cdp--Applies a CDP TLV filter list to the device sensor output.
• lldp--Applies an LLDP TLV filter list to the device sensor output.
• dhcp--Applies a DHCP option filter list to the device sensor
output.
• exclude--Specifies the TLVs that must be excluded from the
device sensor output.
• include--Specifies the TLVs that must be included from the
device sensor output.
• all--Disables all notifications for the associated protocol.
• list list-name--Specifies the protocol TLV filter list name.
Step 3
end
Switch(config)# end
Returns to privileged EXEC mode.
Command Purpose