Configuring Cisco Trustsec Caching; Enabling Cisco Trustsec Caching - Cisco IE-4000 Software Configuration Manual

Configuring SGT Exchange Protocol over TCP (SXP) and Layer 3 Transport

Configuring Cisco TrustSec Caching

Command
Router# show cts sxp connections
1.
[brief]
This example shows how to view the SXP connections:
Router# show cts sxp connections
SXP
Default Password : Set
Default Source IP: 10.10.1.1
Connection retry open period: 10 secs
Reconcile period: 120 secs
Retry open timer is not running
----------------------------------------------
Peer IP
Source IP
Conn status
Conn Version
Connection mode
Connection inst# : 1
TCP conn fd
TCP conn password: default SXP password
Duration since last state change: 0:00:21:25 (dd:hr:mm:sec)
Total num of SXP Connections = 1
Configuring Cisco TrustSec Caching
Feature Name
TrustSec Caching

Enabling Cisco TrustSec Caching

For quick recovery from brief outages, you can enable caching of authentication, authorization, and policy information for
Cisco TrustSec connections. Caching allows Cisco TrustSec devices to use unexpired security information to restore
links after an outage without requiring a full reauthentication of the Cisco TrustSec domain. The Cisco TrustSec devices
will cache security information in DRAM. If non-volatile (NV) storage is also enabled, the DRAM cache information will
also be stored to the NV memory. The contents of NV memory populate DRAM during a reboot.
Note: During extended outages, the Cisco TrustSec cache information is likely to become outdated.
To enable Cisco TrustSec caching, perform this task:
: Enabled
: 10.20.2.2
: 10.10.1.1
: On
: 2
: SXP Listener
: 1
Releases
12.2(50) SY
Purpose
Displays SXP status and connections.
Feature Information
This feature was introduced on the Catalyst 6500 series
switches.
268