https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871815#M547809 <P>We're trying to configure trustSec on&nbsp; IE4000.</P><P>version 15.2(4)EA5</P><P>IP services license</P><P>SDM profile - routing</P><P>&nbsp;</P><P>After "cts role-based enforcement" command is executed we're getting notification:<BR />"Command rejected: Platform does not allow the cli configuration"<BR /><BR /></P><P>Is anything more needed to run cts role-based enforcement?&nbsp;</P> Fri, 21 Feb 2020 19:06:56 GMT Michal Rzepecki 2020-02-21T19:06:56Z https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871815#M547809 <P>We're trying to configure trustSec on&nbsp; IE4000.</P><P>version 15.2(4)EA5</P><P>IP services license</P><P>SDM profile - routing</P><P>&nbsp;</P><P>After "cts role-based enforcement" command is executed we're getting notification:<BR />"Command rejected: Platform does not allow the cli configuration"<BR /><BR /></P><P>Is anything more needed to run cts role-based enforcement?&nbsp;</P> Fri, 21 Feb 2020 19:06:56 GMT https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871815#M547809 Michal Rzepecki 2020-02-21T19:06:56Z https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871848#M547810 Can you confirm that the feature is enabled? I know on nexus 7700 series gear you have to enable the feature via: #feature cts Wed, 12 Jun 2019 15:09:57 GMT https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871848#M547810 Mike.Cifelli 2019-06-12T15:09:57Z https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871872#M547811 <P>There is no such command in IOS.</P> Wed, 12 Jun 2019 15:52:11 GMT https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3871872#M547811 Michal Rzepecki 2019-06-12T15:52:11Z https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3873674#M547812 <P>A reload is required when changing the template (and it has to be set to routing as stated in the case)</P> Sun, 16 Jun 2019 07:48:27 GMT https://community.cisco.com/t5/network-access-control/ie4000-quot-command-rejected-platform-does-not-allow-the-cli/m-p/3873674#M547812 ldanny 2019-06-16T07:48:27Z