Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Endpoint connects to a Cisco switch (that supports SGT insertion/SGACL). Endpoint is correctly profiled, and CoA (SGT) is passed back, and the switch shows the correct SGT-IP binding. SGACL's are config'd to by dynamic, and when doing a "show cts r...
Endpoint connects to a Cisco switch (that supports SGT insertion/SGACL). Endpoint is correctly profiled, and CoA (SGT) is passed back, and the switch shows the correct SGT-IP binding. SGACL's are config'd to by dynamic, and when doing a "show cts ...
BTW, if the syntax of the ACE is "deny ip any any", the permissions are FALSE and nothing gets installed in the global ACL table. If you adjust the ACE syntax to "deny ip" (removing the ANY ANY), permissions correct and all is well....
Hello Jonathon,I had the matrix configured, but was referencing the wrong ACE (was referencing my dACL instead of my SGACL syntax). As soon as I corrected the ACE syntax to "deny ip", the permissions corrected, and the ACE was installed in the globa...
Hello Jonathon,I'm helping the IE switching team test out their new TrustSec code. Product name is the IE4K. Code = ie4000-universalk9-mz.152-5.1.36i.E.binAble to download the SGTs, map them fine to IP addy's, even download the appropriate SGACL, b...
