Network segmentation - switch level

[carl_townshend]

Hi All

I am looking at doing segmentation for my corporate and OT/IOT devices etc.

Is it trustsec and Cisco ISE that does this?

We have mainly 2960X switches at the edge, can these do SGACLs ? if not would the access need to be blocked further down the network on a device that can do the enforcement?

Cheers

[Reza Sharifi]

Hi Carl,

It appears that SGACL is only supported on the 3850 and 3650 series switches.

see table-1 in this link:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_010100.html

HTH

[carl_townshend]

Does this mean we could not do it at the edge ?

[Reza Sharifi · Accepted solution]

It appears to be so. It is not supported on the 2960x series.

HTH