Cisco Nexus 7000 Series - Page 617

After using this command, you must enable and disable the interface using the shutdown/no shutdown
command sequence for the configuration to take effect.
This command requires the Advanced Services license.
Examples
This example shows how to manually configure a dynamic Cisco TrustSec policy on an interface:
switch# configure terminal
switch(config)# interface ethernet 2/3
switch(config-if)# cts manual
switch(config-if-cts-manual)# policy dynamic identity DeviceB
switch(config-if-cts-manual)# exit
switch(config-if)# shutdown
switch(config-if)# no shutdown
This example shows how to remove a manually configured dynamic Cisco TrustSec policy from an interface:
switch# configure terminal
switch(config)# interface ethernet 2/3
switch(config-if)# cts manual
switch(config-if-cts-manual)# no policy dynamic identity DeviceB
switch(config-if-cts-manual)# exit
switch(config-if)# shutdown
switch(config-if)# no shutdown
This example shows how to manually configure a static Cisco TrustSec policy on an interface:
switch# configure terminal
switch(config)# interface ethernet 2/4
switch(config-if)# cts manual
switch(config-if-cts-manual)# policy static sgt 0x100
switch(config-if-cts-manual)# exit
switch(config-if)# shutdown
switch(config-if)# no shutdown
This example shows how to remove a manually configured static Cisco TrustSec policy on an interface:
switch# configure terminal
switch(config)# interface ethernet 2/4
switch(config-if)# cts manual
switch(config-if-cts-manual)# no policy static sgt 0x100
switch(config-if-cts-manual)# exit
switch(config-if)# shutdown
switch(config-if)# no shutdown
Related Commands
DescriptionCommand
Enters Cisco TrustSec manual configuration mode
for an interface.
cts manual
Enables the Cisco TrustSec feature.feature cts
Displays the Cisco TrustSec configuration for
interfaces.
show cts interface
Cisco Nexus 7000 Series Security Command Reference
591
P Commands
policy