Security Group Tagging without ISE - one which device?

kevinm123 — Fri, 21 Feb 2020 13:14:02 GMT

If I have a TrustSec domain set up, and want to utilise IP-SGT mappings by using the "cts role-based sgt-map {ip} sgt <sgt-id-number>" commands - on what device do these commands need to get executed?

I have been researching this a lot in Cisco documentation but cannot find a clear answer. I am either referred to configuring ISE (which I don't have), or using the command (eg. http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/ident-conn_config.html#wp1055308). However, no document I have found actually tells me on which device this should be executed? Can it be on any switch in the TrustSec domain? Must it be on a seed device? On the authentication server? (this is especially relevant when the access switch to which the host that I'm applying the SGT to, is not part of the TrustSec domain itself).

Any ideas what I am missing?

Please referCisco TrustSec-

mohanak — Thu, 17 Jul 2014 11:02:18 GMT

Please refer

Cisco TrustSec- Facilitated Infrastructure

Cisco TrustSec uniquely builds upon your existing identity-aware infrastructure by enforcing these policies in a scalable manner with the innovative Cisco Security Group Access (SGA) and Device Sensors. It also helps to ensure complete data confidentiality using ubiquitous encryption between network devices with MAC sec encryption

http://www.cisco.com/c/en/us/solutions/enterprise-networks/trustsec/trustsec_matrix.html

topic Please referCisco TrustSec- in Network Security

Security Group Tagging without ISE - one which device?

Please referCisco TrustSec-

Cisco TrustSec- Facilitated Infrastructure