Symptom
Cat3k/9300/9400- 16.6.x
Note-
It is NOT a hardware failure, just an error message to indicate that policy failed to be attached to interface.
If ARP gleaning is diasbled in DT trunk policy (which is used to disable tracking on trunk interfaces), interface configuration fails to accept the command "device-tracking attach-policy "
!
But if the policy is already attached (ARP gleaning enabled) and then policy is modified to NOT glean ARP, it continues working fine.
F340.26.11-3800-1(config)#int te1/0/1
F340.26.11-3800-1(config-if)#device-tracking attach-policy disable_ipdt
% Hardware failure
!
Policy disable_ipdt configuration:
trusted-port
security-level guard
device-role node
NOT gleaning from Neighbor Discovery
NOT gleaning from DHCP
NOT gleaning from ARP <<<<<<<<<<<<<<<<<
gleaning from DHCP4
NOT gleaning from protocol unkn
!
Conditions
This is seen only when "protocol ARP" gleaning is set to be disabled.
it is enabled by default so customers won't see this issue, if ARP gleaning is not disabled manually.
Policy disable_ipdt configuration:
trusted-port
security-level guard
device-role node
NOT gleaning from Neighbor Discovery
NOT gleaning from DHCP
NOT gleaning from ARP <<<<<<<<<<<<<<<<< only when this is set to be disabled
Workaround
Workaround-
"Enable protocol ARP", attach the policy to required interfaces and then disable protocol ARP again.
F340.26.11-3800-1(config)#device-tracking policy disable_ipdt
F340.26.11-3800-1(config-device-tracking)#protocol arp
!
F340.26.11-3800-1(config)#interface te1/0/1
F340.26.11-3800-1(config-if)#device-tracking attach-policy disable_ipdt
!
F340.26.11-3800-1(config)#device-tracking policy disable_ipdt
F340.26.11-3800-1(config-device-tracking)#no protocol arp
!
Further Problem Description
If the condition matches, issue might be seen after reload as well.
follow the workaround after reload, to attach the policy again.
Until the sofwtare fix is available, you may also choose to configure an EEM script on switch to automate that process after reload. Please contact TAC for any assistance needed with the EEM.
