Cisco TrustSec Configuration Manual page 126

cts sxp
default password
0 unencrypted_pwd |
6 encrypted_key |
7 encrypted_key |
cleartext_pwd
source-ip ip4_address
enable
log binding-changes
reconciliation period seconds
retry period seconds
Defaults
sxp
log binging-changes
password
reconciliation period 120 seconds
retry period
source-ip
vrf
Command Modes
Global configuration (config)
Supported User Roles Administrator
Command History Release
12.2 (33) SXI3
12.2 (50) SG7
12.2 (53) SE2
Cisco TrustSec Configuration Guide
7-40
Configures the SXP default password. You can enter either a clear
text password (using the 0 or no option) or an encrypted password
(using the 6 or 7 option). The maximum password length is 32
characters.
(Optional) Specifies the IPv4 address of the source device. If no
address is specified, the connection will use the default source
address (if configured), or the address of the port.
Enables SGT Exchange Protocol over TCP (SXP) for Cisco
TrustSec.
Turns on logging for IP to SGT binding changes. Default is off.
Changes the SXP reconciliation timer. The range is from 0 to
64000. Default is 120 seconds (2 minutes).
Changes the SXP retry timer. The range is from 0 to 64000. Default
value is 120 seconds (2 minutes).
Disabled by default
off
none
60 seconds
Default source IP address (if configured) or the
port address
Default VRF name
Modification
This command was introduced on the Catalyst 6500 series switches.
This command was introduced on the Catalyst 4000 series switches.
This command was introduced on the Catalyst 3750(E) and 3560(E) series
switches (without log binding-changes keyword).
Chapter 7 Cisco TrustSec Command Summary
OL-22192-01