Cisco Nexus 7000 Series - Cts Role-Based Sgt

cts role-based sgt
To manually configure mapping of Cisco TrustSec security group tags (SGTs) to a security group access
control list (SGACL), use the cts role-based sgt command. To remove the SGT mapping to an SGACL, use
the no form of this command.
cts role-based sgt {sgt-value| any| unknown} dgt {dgt-value| unknown} access-list list-name
no cts role-based sgt {sgt-value| any| unknown} dgt {dgt-value| unknown}
Syntax Description
Source SGT value. The range is 0 to 65533.
sgt-value
Specifies any SGT.any
Specifies an unknown SGT.unknown
Specifies the destination SGT.dgt
Destination SGT value. The range is 0 to 65533.
dgt-value
Specifies the name for the SGACL.
access-list list-name
Command Default
None
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
To use this command, you must enable the Cisco TrustSec feature using the feature cts command.
You must configure the SGACL before you can configure SGT mapping.
This command requires the Advanced Services license.
Examples
This example shows how to configure SGT mapping for an SGACL:
switch# configure terminal
switch(config)# cts role-based sgt 3 dgt 10 access-list MySGACL
Cisco Nexus 7000 Series Security Command Reference
170
C Commands
cts role-based sgt