You are here
RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 1)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Routing & Switching
The video shows you how you can implement Cisco TrustSec across a SDA IP Transit using SXP. Cisco ISE will be used as SXP Speaker to distribute SGT-to-IP mapping to Border nodes at fabric sites. We will enforce SGACL on traffic between sites and achieve similar security as in SDA transit.
Part 1 of this video covers SXP configuration on Cisco ISE
Topic:
- SDA IP Transit
- Scalable Group Tag (SGT)
-
SGT Exchange Protocol (SXP)
- SGT-to-IP Mapping
- Speaker/Listener
-
ISE
- Static SGT Mapping
- CTS Configuration
- SGACL Enforcement
- SXP Domain and Filter