Hi all;
I recall sharing a post several months ago regarding the "Default Route SGT" operation in Cisco ISE, as shown below:
https://community.cisco.com/t5/network-access-control/default-route-sgt/td-p/5022705
Recently, I decided to dedicate some time to revisiting TrustSec operations. To do this, I set up a lab environment using Cisco ISE 3.3 Patch 5 and a C8000v router running version 17.15.1a. I configured SXP between the devices, and they are communicating normally via SXP as expected:
Then, I created a new SGT on ISE with the following parameters:
The final step was to create the default route SGT on the router with the following configuration parameters:
As you can see above, the Listener part of the SXP connection from the current neighborship to ISE becomes down.
From ISE perspective:
Now my question is, why creating the default route SGT drops SXP connection (at least from the Listening perspective)?
Thanks
