Cisco Nexus 7000 Series - Policy

policy
To manually configure a Cisco TrustSec authentication policy on an interface with either a Cisco TrustSec
device identifier or security group tag (SGT), use the policy command. To revert to the default, use the no
form of this command.
policy {dynamic identity device-id| static sgt sgt-value [trusted]}
no policy {dynamic| static}
Syntax Description
Specifies a dynamic policy using a Cisco TrustSec
device identifier.
dynamic identity
Cisco TrustSec device identifier. The device identifier
is case sensitive.
device-id
Specifies a static policy using an SGT.static sgt
Cisco TrustSec SGT. The sgt-value is either a decimal
value or a hexadecimal value in the format 0xhhhh.
The decimal range is from 2 to 65519, and the
hexadecimal range is from 0x2 to 0xffef.
sgt-value
(Optional) Specifies that the traffic coming on the
interface with the SGT should not have its tag
overridden.
trusted
Command Default
None
Command Modes
Cisco TrustSec manual configuration
Command History
ModificationRelease
Modified the sgt-value argument to accept decimal values.6.2(2)
Removed the keywords and options following dynamic and static in the no
form of this command.
4.0(3)
This command was introduced.4.0(1)
Usage Guidelines
To use this command, you must enable the Cisco TrustSec feature using the feature cts command.
Cisco Nexus 7000 Series Security Command Reference
590
P Commands
policy