Cisco Catalyst 6500-E Series Manual page 12

Switch as the backbone of a unified access campus architecture

Hide thumbs Also See for Catalyst 6500-E Series:

Table of Contents

Figure 10.

Figure 10 shows how the Cisco ISE can communicate with the access layer switch to apply SGTs based on user

and device type. After the SGTs are assigned by the access layer switch, the Cisco Catalyst 6500-E with

Supervisor Engine 2T can enforce the access policies that the network administrator configures in the Cisco ISE.

If the access layer switch is unable to apply the SGTs, then the Cisco Catalyst 6500-E with Supervisor Engine 2T

has the ability to apply SGTs in the backbone based on the IP subnet, the VLAN, or the Layer 3 port in which the

user is located. Figure 11 shows examples of both the SGT imposition and SGACL enforcement capabilities.

Figure 11.

SGTs at the Access Layer

SGTs in the Unified Access Campus Backbone

Page 12 of 28

Table of Contents