You are here
DC0034 - ACI ISE TrustSec Integration (Part 3)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Datacenter
The video shows a TrustSec integration between Cisco ISE and ACI via Policy Plane. You will get to see how IP-to-SGT mappings are communicated from ISE to ACI and used to classify traffic entering ACI fabric into L3Out profile. We will perform enforcement using Contract in the ACI domain. The second half of the video covers an ability to perform enforcement in TrustSec domain.
Part 3 of this video covers enforcement in TrustSec domain
Topic:
- ISE Policy Plane Integration
- SXP, SGT, and TrustSec
- 802.1x
- SGACL
- L3Out Network Profile
- ACI Domain Enforcement
- TrustSec Domain Enforcement
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
1 comments
integration issue
we did integration, but it seems that endpoint synchronization takes time, may half an hout´r that aci sees the endpoint so it can allow it to the network, do you have any suggestion or have u had same issue?