Cts L3 Spi (Global) - Cisco Nexus 7000 Series Command Reference Manual

C Commands

cts l3 spi (global)

To enable Layer 3 Cisco TrustSec and map a security parameter index (SPI) and subnet for the device, use
the cts l3 spi command. To remove the mapping to an IPv4 subnet, use the no form of this command.
ctsl3 spi A.B.C.D / length
no ctsl3 spi A.B.C.D / length
Syntax Description
spi-number
A.B.C.D/length
Command Default
None
Command Modes
Global configuration
Command History
Release
4.0(1)
Usage Guidelines
To use this command, you must enable the Cisco TrustSec feature using the feature cts command.
You can use only IPv4 addressing with Cisco TrustSec.
This command requires the Advanced Services license.
Examples This example shows how to configure Layer 3 Cisco TrustSec global mapping for an SPI and subnet:
switch# config t
switch(config)# cts l3 spi 3 10.10.1.1/23
This example shows how to remove Layer 3 global mapping for a subnet:
switch# config t
switch(config)# no cts l3 spi 10.10.1.1/23
Related Commands
Command
feature cts
SPI for the device. The range is from 0 to 429496729.
IPv4 subnet.
Modification
This command was introduced.
Description
Enables the Cisco TrustSec feature.
Cisco Nexus 7000 Series Security Command Reference
cts l3 spi (global)
121