Cisco TrustSec Configuration Manual page 5

Configuring Additional Authentication Server-Related Parameters
Automatically Configuring a New or Replacement Password with the Authentication Server
Configuring SGT Exchange Protocol over TCP (SXP) and Layer 3 Transport
Cisco TrustSec SGT Exchange Protocol Feature Histories
Configuring Cisco TrustSec SXP
Configuring the Default SXP Password
Configuring the Default SXP Source IP Address
Changing the SXP Reconciliation Period
Changing the SXP Retry Period
Creating Syslogs to Capture Changes of IP Address to SGT Mapping Learned Through SXP
Verifying the SXP Connections
Configuring Layer 3 SGT Transport Between Cisco TrustSec Domains
Configuring Cisco TrustSec Reflector for Cisco TrustSec-Incapable Switching Modules
Configuring Cisco TrustSec Caching
Configuring SGACL Policies
Cisco TrustSec SGACL Feature Histories
SGACL Policy Configuration Process
Enabling SGACL Policy Enforcement Globally
Enabling SGACL Policy Enforcement Per Interface
Enabling SGACL Policy Enforcement on VLANs
OL-22192-01
Layer 3 Logical Interface to SGT Mapping (L3IF-SGT Mapping)
Feature History for L3IF-SGT Mapping
Default Settings
3-21
Configuring L3IF to SGT Mapping
Verifying L3IF to SGT Mapping
Configuration Example for L3IF to SGT Mapping on an Ingress Port
Binding Source Priorities
Enabling Cisco TrustSec SXP
Configuring an SXP Peer Connection
Enabling Cisco TrustSec Caching
Clearing the Cisco TrustSec Cache
5-1
Configuration Examples for Enabling SGACL Policy Enforcement Globally
Configuration Examples for Enabling SGACL Policy Enforcement Per Interface
Configuration Examples for Enabling SGACL Policy Enforcement on VLANs
3-21
3-21
3-21
3-22
4-1
4-2
4-2
4-2
4-4
4-4
4-5
4-5
4-6
4-9
4-9
4-10
5-1
5-2
5-2
5-3
5-3
3-20
3-22
3-23
4-1
4-6
5-2
5-3
5-3
Cisco TrustSec Configuration Guide
Contents
3-24
4-5
4-8
v