Cts Role-Based Sgt-Map - Cisco Nexus 7000 Series Command Reference Manual

C Commands

cts role-based sgt-map

To manually configure the Cisco TrustSec security group tag (SGT) mapping to IP addresses, use the cts
role-based sgt-map command. To remove an SGT, use the no form of this command.
cts role-based sgt-map ipv4-address sgt-value
no cts role-based sgt-map ipv4-address
Syntax Description
ipv4-address
sgt-value
Command Default
None
Command Modes
Global configuration VLAN configuration VRF configuration
Command History
Release
4.0(1)
Usage Guidelines
To use this command, you must enable the Cisco TrustSec feature using the feature cts command.
You can use only IPv4 addressing with Cisco TrustSec.
This command requires the Advanced Services license.
Examples This example shows how to configure mapping for a Cisco TrustSec SGT:
switch# configure terminal
switch(config)# cts role-based sgt-map 10.10.1.1 3
switch(config-rbacl)#
This example shows how to remove a Cisco TrustSec SGT mapping:
switch# configure terminal
switch(config)# no ccts role-based sgt-map 10.10.1.1
Related Commands
Command
feature cts
show cts role-based sgt-map
IPv4 address. The format is A.B.C.D
SGT value. The range is 0 to 65533.
Modification
This command was introduced.
Description
Enables the Cisco TrustSec feature.
Displays the Cisco TrustSec SGT mapping.
Cisco Nexus 7000 Series Security Command Reference
cts role-based sgt-map
145