Trustsec SGT inline Propagation

[dporod]

I have an SDA lab with a 9300 (Border/Control) connected to a 4331 ISR (Fusion) via a trunk port. I am trying to get the SGT tagging from the 9300 to propagate over the trunk link to the 4331. I try using the "cts manual" configuration on gi0/1/0 of the ISR but this takes the link protocol down.

Any help appreciated

[marce1000]

 Make sure that the following requirements are met:

1. Both devices must support SGT tagging and be running a version of the software that supports this feature.
2. The trunk link must be configured to allow the SGT tag to be passed through. This can usually be done by using the "switchport trunk allowed vlan" command on both sides of the trunk and specifying the SGT VLAN as one of the allowed VLANs.
3. The SGT tag must be applied to the traffic on the Cisco 9300. This can typically be done using the "sgt" command in the appropriate interface configuration mode.

If these requirements are met and you are still having issues, it may be helpful to verify the trunk configuration and check for any errors or misconfigurations. You can also try using the "debug" command to see if it provides any additional information about the problem.

 M.