Do we have any hardware limitation for IP-SGT mapping number?

[raghchan]

Is there any guide available for hardware 3650 , ASA5525X & CAT9300 stating IP-SGT mapping limitation.

On ISE side we have a 150000 limitation per SXP node. Do we have something same on Hardware side as well while hardware is downloading the IP-SGT mapping.

For ISE i checked the below doc

ISE Performance & Scale

[ldanny]

I have moved your query to the TrustSec community TrustSec

[jeaves@cisco.com · Accepted solution]

Hi Raghav,

the IP-SGT mapping limits per platform are documented at the bottom of the TrustSec system bulletin, the latest being version 6.3:

https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/software-system-bulletin.pdf

12k for the 3650

10k for the 9300

You'll get up to about 400k on the ASA 5525x

Regards, Jonothan.