Cisco trustsec ASA sub-interface

Chi Fai Leung — Mon, 11 Mar 2019 07:05:28 GMT

Tested the Trustsec on ASA, that could not apply when the ASA defined the sub-interface to connect the PortChannel of Switch? Anyone tested and got the same of result?

Hello,

Ryan Wolfe — Mon, 19 Sep 2016 17:13:13 GMT

Hello,

Are you referring to applying inline tagging on an ASA subinterface?

If so, I do not believe inline SGT tagging is supported on logical interfaces (such as sub-interfaces).

This documentation seems to support this: https://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/aaa-trustsec.html#93713

Please look under the Layer 2 Imposition section:

Layer 2 SGT Imposition

Supported only on physical interfaces, VLAN interfaces, port channel interfaces, and redundant interfaces.
Not supported on logical interfaces or virtual interfaces, such as BVI.

HTH,

Ryan

topic Hello, in Network Access Control

Cisco trustsec ASA sub-interface

Hello,