ISE SXP propagation of IP-SGT info from ISE RADIUS sessions

[dvan]

Hi,

Can ISE SXP propagate IP-SGT obtained directly from ISE RADIUS sessions (eg. wired, wireless and VPN AAA)?  Assuming yes as there is an option in the ISE SXP settings however there isn't any further info in ISE 2.4 config guide and doesnt seem to work in my ISE 2.4p5 lab testing so far...

Thanks in advance,

Denis

[hslai · Accepted solution]

For it to work, ISE needs at least one SXP peer. If you have no real one, you may put a dummy entry.

See also resources at Cisco TrustSec and Segmentation