topic Re: SGT-IP enforcement on a Cisco switch with a device authenticated on an Aruba WLC in Network Access Control https://community.cisco.com/t5/network-access-control/sgt-ip-enforcement-on-a-cisco-switch-with-a-device-authenticated/m-p/3425532#M493803 <HTML><HEAD></HEAD><BODY><P>Affirmative.</P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/release_notes/ise20_rn.html#pgfId-591284">ISE 2.0+ Support for SXP</A><SPAN style="font-size: 10pt;"> is there for a use case like you described.</SPAN></P></BODY></HTML> Sat, 19 May 2018 15:17:41 GMT hslai 2018-05-19T15:17:41Z SGT-IP enforcement on a Cisco switch with a device authenticated on an Aruba WLC https://community.cisco.com/t5/network-access-control/sgt-ip-enforcement-on-a-cisco-switch-with-a-device-authenticated/m-p/3425531#M493800 <HTML><HEAD></HEAD><BODY><P>Hi team, </P><P></P><P>Would anyone able to confirm / invalidate the possible trustsec integration between an Aruba WLC and a Cisco switch, if ISE publishes the SGT-IP mapping to the switch thru SXP ? </P><P></P><P>expected scenario :</P><P></P><P>- device gets authenticated on the Aruba WLC thru ISE (dot1x + cert or user credentials)</P><P>- Aruba WLC sends the device IP address to ISE via radius accounting </P><P>- ISE is able to enter the SGT-IP mapping in its local store</P><P>- ISE publishes the SGT-IP entry to Cisco switches via SXP </P><P></P><P><IMG alt="Screen Shot 2018-05-18 at 18.06.12.png" class="image-1 jive-image" src="/legacyfs/online/fusion/117149_Screen Shot 2018-05-18 at 18.06.12.png" style="height: 447px; width: 620px;" /></P><P></P><P>Have you ever seen this in action ? </P><P></P><P>Thanks for any feedback, </P><P></P><P>Rgds, </P><P></P><P>Jean-Francois</P></BODY></HTML> Mon, 11 Mar 2019 08:37:41 GMT https://community.cisco.com/t5/network-access-control/sgt-ip-enforcement-on-a-cisco-switch-with-a-device-authenticated/m-p/3425531#M493800 jpujol 2019-03-11T08:37:41Z Re: SGT-IP enforcement on a Cisco switch with a device authenticated on an Aruba WLC https://community.cisco.com/t5/network-access-control/sgt-ip-enforcement-on-a-cisco-switch-with-a-device-authenticated/m-p/3425532#M493803 <HTML><HEAD></HEAD><BODY><P>Affirmative.</P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/release_notes/ise20_rn.html#pgfId-591284">ISE 2.0+ Support for SXP</A><SPAN style="font-size: 10pt;"> is there for a use case like you described.</SPAN></P></BODY></HTML> Sat, 19 May 2018 15:17:41 GMT https://community.cisco.com/t5/network-access-control/sgt-ip-enforcement-on-a-cisco-switch-with-a-device-authenticated/m-p/3425532#M493803 hslai 2018-05-19T15:17:41Z