You are here
RS0195 - DNAC 2.1 Multi-Site IP Transit with SXP (Part 2)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Routing & Switching
Video Download:
Title: RS0195 - Video Download $14.00
The video shows you how you can implement Cisco TrustSec across a SDA IP Transit using SXP. Cisco ISE will be used as SXP Speaker to distribute SGT-to-IP mapping to Border nodes at fabric sites. We will enforce SGACL on traffic between sites and achieve similar security as in SDA transit.
Part 2 of this video covers SXP configuration Border nodes and validation
Topic:
- SDA IP Transit
- Scalable Group Tag (SGT)
-
SGT Exchange Protocol (SXP)
- SGT-to-IP Mapping
- Speaker/Listener
-
ISE
- Static SGT Mapping
- CTS Configuration
- SGACL Enforcement
- SXP Domain and Filter
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.