Anycast Gateway Security Group

pinglis — Fri, 27 Jun 2025 13:12:46 GMT

In the Anycast Gateway configuration there is the option to assign a Security Group.

My understanding is if a port has any other authentication than "None" the Security Group would be allocated by ISE.

For "None" ports I can assign a VLAN and optionally a Security Group.

Is the Security Group configured on the Anycast Gateway used as the "default" if no Security Group is configured on the "None" port?

Or does it serve some other purpose?

Re: Anycast Gateway Security Group

Andrii Oliinyk — Sat, 28 Jun 2025 19:23:54 GMT

only part of your assumptions is true(e.g. u can assign SGT even w/ NONE authentication)
in fact SGT assignment is truly optional - static (via DNAC or CLI) & dynamic (via ISE AAA) or quazi (SXP)
be encouraged to read Cisco TrustSec docs.

topic Anycast Gateway Security Group in Software-Defined Access (SD-Access)

Anycast Gateway Security Group

Re: Anycast Gateway Security Group