SGT-IP enforcement on a Cisco switch with a device authenticated on an Aruba WLC

[jpujol]

Hi team,

Would anyone able to confirm / invalidate the possible trustsec integration between an Aruba WLC and a Cisco switch, if ISE publishes the SGT-IP mapping to the switch thru SXP ?

expected scenario :

- device gets authenticated on the Aruba WLC thru ISE (dot1x + cert or user credentials)

- Aruba WLC sends the device IP address to ISE via radius accounting

- ISE is able to enter the SGT-IP mapping in its local store

- ISE publishes the SGT-IP entry to Cisco switches via SXP

Have you ever seen this in action ?

Thanks for any feedback,

Rgds,

Jean-Francois

[hslai]

Affirmative.

ISE 2.0+ Support for SXP is there for a use case like you described.