View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0217 - ISE 2.0 TrustSec - SGT Assignment (Part 1)

Average: 5 (2 votes)
Difficulty Level: 
Lab Document: 
<Please login to see the content>
Video Download: 
Title: SEC0217 - Video Download $11.00
Purchase SEC0217 - Video Download $11.00
The video shows you how to create and assign Security Group Tag (SGT) to endpoints on Cisco ISE 2.0. We will configure dynamic SGT assignment as part of a successful 802.1X authentication as well as static assignment for devices or resources that do not participate in 802.1X. At the end of this lab, all entities that either need access or be accessed within a TrustSec domain will have SGT assigned.
Part 1 of this video covers SGT creation, mapping and assignment
  • SGT Creation (Manual, System Assigned, Auto)
  • SGT Group Mapping
  • SGT-to-IP Mapping
  • SGT Assignment (Dynamic and Static)
  • Authorization Policy
  • 802.1X Authentication

About Author

Metha Cheiwanichakorn, CCIE#23585 (RS, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at, Metha enjoys learning and challenges himself with new Cisco technologies.


Can you please provide me that which switch model number is supporting all TrustSec command ? i.e . cts, aaa , etc

Please check the link below for Trustsec supported switch

I have only one switch in my network . can i setup TrustSec domain and setup network segmentation with single switch in network ?

Yes you can. That switch can do both classification and enforcement. You just need to make sure the switch model can do all of the above.

Thanks for reply.

Yes my switch model can do all of the above configuration but I am not able configure and not able to understand how to configure same thing with single switch.

If you provide me any article or any link that can guide the me same thing . i will really appreciate if you provide me anything regarding this .

You can watch our TrustSec videos SEC0216-221 for step-by-step configuration. Although we use two switches in the lab but you can accomplish everything on a single switch.

Waiting for your reply.