Changing The Sxp Retry Period; Creating Syslogs To Capture Changes Of Ip Address To Sgt Mapping Learned Through Sxp; Verifying The Sxp Connections - Cisco IE-4000 Software Configuration Manual

Configuring SGT Exchange Protocol over TCP (SXP) and Layer 3 Transport

Changing the SXP Retry Period

Command
Router# configure terminal
1.
Router(config)# cts sxp reconciliation
2.
period seconds
Router(config)# exit
3.
Changing the SXP Retry Period
The SXP retry period determines how often the Cisco TrustSec software retries an SXP connection. When an SXP
connection is not successfully set up, the Cisco TrustSec software makes a new attempt to set up the connection after
the SXP retry period timer expires. The default value is 120 seconds. Setting the SXP retry period to 0 seconds disables
the timer and retries are not attempted.
To change the SXP retry period, perform this task:
Command
Router# configure terminal
1.
Router(config)# cts sxp retry period
2.
seconds
Router(config)# exit
3.
Creating Syslogs to Capture Changes of IP Address to SGT
Mapping Learned Through SXP
When the cts sxp log binding-changes global configuration command is executed, SXP syslogs (sev 5 syslog) are
generated whenever a change to IP address to SGT binding occurs (add, delete, change). These changes are learned
and propagated on the SXP connection.
The default is no cts sxp log binding-changes.
To enable logging of binding changes, perform the following task:
Command
Router# configure terminal
1.
Router(config)# cts sxp log binding-changes
2.

Verifying the SXP Connections

To view the SXP connections, perform this task:
Purpose
Enters configuration mode.
Changes the SXP reconciliation timer. The default
value is 120 seconds (2 minutes). The range is from 0
to 64000.
Exits configuration mode.
Purpose
Enters configuration mode.
Changes the SXP retry timer. The default value is 120
seconds (2 minutes). The range is from 0 to 64000.
Exits configuration mode.
Purpose
Enters configuration mode.
Turns on logging for IP to SGT binding changes.
267