Hi team,
I have a case where SGT tagging based on IP/subnet to SGT map is needed on N7K (M3 LC) without enforcement active. Traffic that needs to be tagged can enter nexus:
- via untrusted access portchannel - no SVI for this specific VLAN, packets...