https://community.cisco.com/t5/network-access-control/trustsec-without-macsec-only-sgt-and-enforcement/m-p/3097289#M25602 <P>Yes, you can propgate SGTs via inline tagging (cts manual command) or SXP. You don't need to use MACSec. Checkout the TrustSec matrix for info on what devices support inline tagging and enforcement <A href="http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/platform-capability-matrix.pdf">http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/platform-capability-matrix.pdf</A></P> Mon, 31 Jul 2017 18:36:11 GMT Rob Ingram 2017-07-31T18:36:11Z https://community.cisco.com/t5/network-access-control/trustsec-without-macsec-only-sgt-and-enforcement/m-p/3097288#M25598 <P>Is it possible to perform SGT propagation only using cts manual with sap no-encapsulation keeping the enforcement? Ideia is on LAN Uplinks to use only SGT without any kind of macsec (authentication and/or encryption).</P> <P>Thanks,</P> <P>Nuno</P> Mon, 11 Mar 2019 07:54:15 GMT https://community.cisco.com/t5/network-access-control/trustsec-without-macsec-only-sgt-and-enforcement/m-p/3097288#M25598 nuno.santos 2019-03-11T07:54:15Z https://community.cisco.com/t5/network-access-control/trustsec-without-macsec-only-sgt-and-enforcement/m-p/3097289#M25602 <P>Yes, you can propgate SGTs via inline tagging (cts manual command) or SXP. You don't need to use MACSec. Checkout the TrustSec matrix for info on what devices support inline tagging and enforcement <A href="http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/platform-capability-matrix.pdf">http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/platform-capability-matrix.pdf</A></P> Mon, 31 Jul 2017 18:36:11 GMT https://community.cisco.com/t5/network-access-control/trustsec-without-macsec-only-sgt-and-enforcement/m-p/3097289#M25602 Rob Ingram 2017-07-31T18:36:11Z