Cisco Catalyst 6500-E Series User Manual

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 12 of 28
Figure 10. SGTs at the Access Layer
Figure 10 shows how the Cisco ISE can communicate with the access layer switch to apply SGTs based on user
and device type. After the SGTs are assigned by the access layer switch, the Cisco Catalyst 6500-E with
Supervisor Engine 2T can enforce the access policies that the network administrator configures in the Cisco ISE.
If the access layer switch is unable to apply the SGTs, then the Cisco Catalyst 6500-E with Supervisor Engine 2T
has the ability to apply SGTs in the backbone based on the IP subnet, the VLAN, or the Layer 3 port in which the
user is located. Figure 11 shows examples of both the SGT imposition and SGACL enforcement capabilities.
Figure 11. SGTs in the Unified Access Campus Backbone

Cisco Catalyst 6500-E Series Specifications

General

Brand	Cisco
Model	Catalyst 6500-E Series
Category	Switch
Language	English