02-10-2017 08:52 PM - edited 03-11-2019 12:27 AM
L3IF trustSec Interface-to-SGT Mapping, is it possible to receive multiple SGT on the ports that is facing the WAN ?
Sample topology
Site-A WAN-Cloud Site-B
3750x ---------- ASR-1 ---------------------MPLSoGRE---------------ASR2--------------------3750x
On the above topology. In Site-A, we have five SGT 10,20,30,40 and 50 that we like to propagate across the MPLS WAN to Site-B. My question is; what is the best way to get these SGT from Site-A to Site-B over the MPLS WAN link. Please any pointers will be greatly appreciated. Please also see attached topology.
Solved! Go to Solution.
02-21-2017 09:09 AM
There is no way to carry the SGT with MPLS over GRE at the moment. the easiest way to accomodate this would to use SXP to communicate IP/SGT between the ASRs.
02-21-2017 09:09 AM
There is no way to carry the SGT with MPLS over GRE at the moment. the easiest way to accomodate this would to use SXP to communicate IP/SGT between the ASRs.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide