Enabling Cisco Trustsec Sxp; Configuring An Sxp Peer Connection - Cisco IE-4000 Software Configuration Manual

Configuring SGT Exchange Protocol over TCP (SXP) and Layer 3 Transport
Configuring Cisco TrustSec SXP

Enabling Cisco TrustSec SXP

You must enable Cisco TrustSec SXP before you can configure peer connections. To enable Cisco TrustSec SXP, perform
this task:
Command
Router# configure terminal
1.
Router(config)# [no] cts sxp enable
2.
Router(config)# exit
3.

Configuring an SXP Peer Connection

You must configure the SXP peer connection on both of the devices. One device is the speaker and the other is the
listener. When using password protection, make sure to use the same password on both ends.
Note: If a default SXP source IP address is not configured and you do not configure an SXP source address in the
connection, the Cisco TrustSec software derives the SXP source IP address from existing local IP addresses. The SXP
source address might be different for each TCP connection initiated from the switch.
To configure the SXP peer connection, perform this task:
Purpose
Enters global configuration mode.
Enables SXP for Cisco TrustSec.
Exits configuration mode.
264