Cisco TrustSec User Manual

3-14
Cisco TrustSec Configuration Guide
OL-22192-02
Chapter 3 Configuring Identities, Connections, and SGTs
Manually Configuring IP-Address-to-SGT Mapping
Step 4
[no] cts role-based sgt-map
ipv6_address::prefix sgt number
Example:
switch(config)# cts role-based sgt-map
2020::/64 sgt 1234
(IPv6) Specifies a subnet in colon hexadecimal
notation. Use the [no] form of the command to
unconfigure the Subnet to SGT mapping.
The number of bindings specified in Step 2 should
match or exceed the number of host addresses in the
subnet (excluding network and broadcast
addresses). The sgt number keyword specifies the
Security Group Tag to be bound to every host
address in the specified subnet.
• ipv6_address—Specifies IPv6 network address
in colon hexadecimal notation.
• prefix—(0 to128). Specifies the number of bits
in the network address.
• sgt number—(0 to 65,535). Specifies the
Security Group Tag (SGT) number.
Step 5
exit
Example:
switch(config)# exit
switch#
Exits global configuration mode.
Step 6
s how running-config | include search_string
Example:
switch# show running-config | include sgt 1234
switch# show running-config | include network-map
Verifies that the cts role-based sgt-map and the
cts sxp mapping network-map commands are in
the running configuration.
Step 7
copy running-config startup-config
Example:
switch# copy running-config startup-config
Copies the running configuration to the startup
configuration.
Command Purpose

Cisco TrustSec Specifications

General

Brand	Cisco
Model	TrustSec
Category	Switch
Language	English