Over 400 of free Cisco lab videos with complete step-by-step

RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 3)

The video shows you how you can implement Cisco TrustSec across a SDA IP Transit using SXP. Cisco ISE will be used as SXP Speaker to distribute SGT-to-IP mapping to Border nodes at fabric sites. We will enforce SGACL on traffic between sites and achieve similar security as in SDA transit.

Rating:

No votes yet

Difficulty Level:

Tag:

Read more about RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 3)
Log in or register to post comments

RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 2)

The video shows you how you can implement Cisco TrustSec across a SDA IP Transit using SXP. Cisco ISE will be used as SXP Speaker to distribute SGT-to-IP mapping to Border nodes at fabric sites. We will enforce SGACL on traffic between sites and achieve similar security as in SDA transit.

Rating:

No votes yet

Difficulty Level:

Tag:

Read more about RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 2)
Log in or register to post comments

RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 1)

The video shows you how you can implement Cisco TrustSec across a SDA IP Transit using SXP. Cisco ISE will be used as SXP Speaker to distribute SGT-to-IP mapping to Border nodes at fabric sites. We will enforce SGACL on traffic between sites and achieve similar security as in SDA transit.

Rating:

No votes yet

Difficulty Level:

Tag:

Read more about RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 1)
Log in or register to post comments

DC0034 - ACI ISE TrustSec Integration (Part 3)

The video shows a TrustSec integration between Cisco ISE and ACI via Policy Plane. You will get to see how IP-to-SGT mappings are communicated from ISE to ACI and used to classify traffic entering ACI fabric into L3Out profile. We will perform enforcement using Contract in the ACI domain. The second half of the video covers an ability to perform enforcement in TrustSec domain.

Rating:

No votes yet

Difficulty Level:

Tag:

Read more about DC0034 - ACI ISE TrustSec Integration (Part 3)
1 comment
Log in or register to post comments

DC0034 - ACI ISE TrustSec Integration (Part 2)

The video shows a TrustSec integration between Cisco ISE and ACI via Policy Plane. You will get to see how IP-to-SGT mappings are communicated from ISE to ACI and used to classify traffic entering ACI fabric into L3Out profile. We will perform enforcement using Contract in the ACI domain. The second half of the video covers an ability to perform enforcement in TrustSec domain.

Rating:

No votes yet

Difficulty Level:

Tag:

Read more about DC0034 - ACI ISE TrustSec Integration (Part 2)
Log in or register to post comments

DC0034 - ACI ISE TrustSec Integration (Part 1)

The video shows a TrustSec integration between Cisco ISE and ACI via Policy Plane. You will get to see how IP-to-SGT mappings are communicated from ISE to ACI and used to classify traffic entering ACI fabric into L3Out profile. We will perform enforcement using Contract in the ACI domain. The second half of the video covers an ability to perform enforcement in TrustSec domain.

Rating:

No votes yet

Difficulty Level:

Tag:

Read more about DC0034 - ACI ISE TrustSec Integration (Part 1)
Log in or register to post comments

SEC0222 - ISE 2.0 pxGrid with ASA Firepower (Part 3)

The video shows a functional integration of ASA Firepower with ISE 2.0 pxGrid service. We will have the Firepower join pxGrid using certificate-based authentication and subscribe for user contextual information. We will create and test Firepower access policies to restrict user traffic based on their AD group membership and assigned Security Group Tag.

Rating:

Average: 5 (1 vote)

Difficulty Level:

Tag:

Read more about SEC0222 - ISE 2.0 pxGrid with ASA Firepower (Part 3)
6 comments
Log in or register to post comments

SEC0222 - ISE 2.0 pxGrid with ASA Firepower (Part 2)

The video shows a functional integration of ASA Firepower with ISE 2.0 pxGrid service. We will have the Firepower join pxGrid using certificate-based authentication and subscribe for user contextual information. We will create and test Firepower access policies to restrict user traffic based on their AD group membership and assigned Security Group Tag.

Rating:

Average: 5 (2 votes)

Difficulty Level:

Tag:

Read more about SEC0222 - ISE 2.0 pxGrid with ASA Firepower (Part 2)
Log in or register to post comments

SEC0222 - ISE 2.0 pxGrid with ASA Firepower (Part 1)

The video shows a functional integration of ASA Firepower with ISE 2.0 pxGrid service. We will have the Firepower join pxGrid using certificate-based authentication and subscribe for user contextual information. We will create and test Firepower access policies to restrict user traffic based on their AD group membership and assigned Security Group Tag.

Rating:

Average: 5 (3 votes)

Difficulty Level:

Tag:

Read more about SEC0222 - ISE 2.0 pxGrid with ASA Firepower (Part 1)
13 comments
Log in or register to post comments

SEC0220 - ISE 2.0 TrustSec - SXP (Part 3)

The video demonstrates SXP capability on Cisco ISE 2.0 to relay SGT between SXP-capable network devices. We will use WLC as SXP speaker, while ASA and switch as listeners and enforcers. The switch has SGACL implemented from the previous video and the ASA will leverage SGT in its ACL. We will also look at Static SXP Mapping.

Rating:

Average: 5 (1 vote)

Difficulty Level:

Tag: