Cisco TrustSec Configuration Manual page 4

Contents
Configuring the Cisco TrustSec Solution
Configuration Overview
Additional Documentation
Configuring Identities, Connections, and SGTs
Cisco TrustSec Identity Configuration Feature Histories
Configuring Credentials and AAA for a Cisco TrustSec Seed Device
Configuring Credentials and AAA for a Cisco TrustSec Non-Seed Device
Enabling Cisco TrustSec Authentication and MACsec in 802.1X Mode on an Uplink Port
Configuring Cisco TrustSec and MACsec in Manual Mode on an Uplink Port
Regenerating SAP Key on an Interface
Verifying the Cisco TrustSec Interface Configuration
Manually Configuring a Device SGT
Manually Configuring IP-Address-to-SGT Mapping
Cisco TrustSec Configuration Guide
iv
2-1
Cisco TrustSec Configuration How-to Documents
Supported Hardware and Software
Prerequisites for Cisco TrustSec
Cisco TrustSec Guidelines and Limitations
Default Settings
2-3
2-3
Release-Specific Documents
Platform-Specific Documents
Cisco IOS TrustSec Documentation Set
Configuration Examples for Seed Device
Configuration Examples for Non-Seed Device
Configuration Examples for 802.1X on Uplink Port
Configuration Examples for Manual Mode and MACsec on an Uplink Port
Configuration Examples for Manually Configuring a Device SGT
Subnet to SGT Mapping
3-12
Default Settings
3-12
Configuring Subnet to SGT Mapping
Verifying Subnet to SGT Mapping Configuration
Configuration Examples for Subnet to SGT Mapping
VLAN to SGT Mapping
3-16
Default Settings
3-17
Configuring VLAN to SGT Mapping
Verifying VLAN to SGT Mapping
Configuration Example for VLAN to SGT Mapping for a Single Host Over an Access Link
2-1
2-1
2-2
2-2
2-3
2-3
2-4
2-5
3-1
3-1
3-3
3-4
3-6
3-9
3-9
3-11
3-12
3-12
3-15
3-17
3-19
3-2
3-3
3-5
3-6
3-8
3-11
3-15
3-19
OL-22192-01