Cisco TrustSec

CHAPTER
3-1
Cisco TrustSec Configuration Guide
OL-22192-02
3
Configuring Identities, Connections, and SGTs
Revised: October 7, 2013, OL-22192-02
This section includes the following topics:
• Cisco TrustSec Identity Configuration Feature Histories, page 3-1
• Configuring Credentials and AAA for a Cisco TrustSec Seed Device, page 3-2
• Configuring Credentials and AAA for a Cisco TrustSec Non-Seed Device, page 3-3
• Enabling Cisco TrustSec Authentication and MACsec in 802.1X Mode on an Uplink Port, page 3-5
• Configuring Cisco TrustSec and MACsec in Manual Mode on an Uplink Port, page 3-6
• Regenerating SAP Key on an Interface, page 3-9
• Verifying the Cisco TrustSec Interface Configuration, page 3-9
• Manually Configuring a Device SGT, page 3-11
• Manually Configuring IP-Address-to-SGT Mapping, page 3-12
• Manually Configuring a Device SGT, page 3-11
• Configuring Additional Authentication Server-Related Parameters, page 3-23
• Automatically Configuring a New or Replacement Password with the Authentication Server,
page 3-24
Cisco TrustSec Identity Configuration Feature Histories
For a list of supported TrustSec features per platform and the minimum required IOS release, see
the Cisco TrustSec Platform Support Matrix at the following URL:
http://www.cisco.com/en/US/solutions/ns170/ns896/ns1051/trustsec_matrix.html
Otherwise, see product release notes for detailed feature introduction information.