网络工程 - ARP 未显示所有接口/MAC 绑定 - 吾爱随笔录

我正在玩Dot1x端口认证，接口G2/0/2连接到PC并成功认证/授权：

SW1-2960#show authentication sessions int g2/0/2 det
            Interface:  GigabitEthernet2/0/2
          MAC Address:  <hidden>
         IPv6 Address:  Unknown
         IPv4 Address:  10.13.2.12
            User-Name:  nicole
               Status:  Authorized
               Domain:  DATA
       Oper host mode:  multi-auth
     Oper control dir:  both
      Session timeout:  900s (local), Remaining: 215s
       Timeout action:  Reauthenticate
      Restart timeout:  N/A
Periodic Acct timeout:  N/A
       Session Uptime:  688s
    Common Session ID:  0A304A190000004026FD9FC8
      Acct Session ID:  0x00000020
               Handle:  0x8A000026
       Current Policy:  POLICY_Gi2/0/2

Local Policies:
        Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:
              ACS ACL:  xACSACLx-IP-TEMP_ACL-60b7be60 <From ISE>

Method status list:
      Method            State

      dot1x              Authc Success

IP 设备跟踪显示使用 ARP 绑定 IP/MAC 成功：

SW1-2960#show ip device tracking all
Global IP Device Tracking for clients = Enabled
Global IP Device Tracking Probe Count = 3
Global IP Device Tracking Probe Interval = 30
Global IP Device Tracking Probe Delay Interval = 0
-----------------------------------------------------------------------------------------------
  IP Address    MAC Address   Vlan  Interface           Probe-Timeout      State    Source
-----------------------------------------------------------------------------------------------
10.13.2.12     <Hidden>        1    GigabitEthernet2/0/2   30              ACTIVE   ARP

但是，这并未反映在 ARP 表中：

SW1-2960#show arp | i g2/0/2
SW1-2960#

可能是什么原因？

我在界面下的配置是基本的：

SW1-2960#show running-config int g2/0/2
Building configuration...

Current configuration : 404 bytes
!
interface GigabitEthernet2/0/2
 switchport mode access
 ip access-group BLOCK in
 authentication host-mode multi-auth
 authentication open
 authentication order dot1x mab
 authentication priority dot1x mab
 authentication port-control auto
 authentication periodic
 authentication timer reauthenticate 900
 authentication timer restart 2
 mab
 dot1x pae authenticator
 spanning-tree portfast edge
end

SW1-2960#

BLOCK ACL 被xACSACLx-IP-TEMP_ACL-60b7be60ISE 提供的 ACL 覆盖。

ARP 表仅显示接口 G2/0/45 的绑定：

SW1-2960#show ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  <hidden ip>              0  <hidden MAC>    ARPA   GigabitEthernet2/0/45
Internet  <hidden ip>             29  <hidden MAC>    ARPA   GigabitEthernet2/0/45
Internet  <hidden ip>            67   <hidden MAC>    ARPA   GigabitEthernet2/0/45
Internet  <hidden ip>             -   <hidden MAC>    ARPA   GigabitEthernet2/0/45
Internet  <hidden ip>             0   <hidden MAC>    ARPA   GigabitEthernet2/0/45
Internet  <hidden ip>            66   <hidden MAC>    ARPA   GigabitEthernet2/0/45
...........

SW1-2960#show running-config int g2/0/45
Building configuration...

Current configuration : 92 bytes
!
interface GigabitEthernet2/0/45
 no switchport
 ip address <Some IP address> 255.255.254.0
end

SW1-2960#

有没有办法显示所有 ARP 绑定？