Cts Role-Based Sgt - Cisco Nexus 7000 Series Command Reference Manual

cts role-based sgt

cts role-based sgt
To manually configure mapping of Cisco TrustSec security group tags (SGTs) to a security group access
control list (SGACL), use the cts role-based sgt command. To remove the SGT mapping to an SGACL, use
the no form of this command.
cts role-based sgt {sgt-value| any| unknown} dgt {dgt-value| unknown} access-list list-name
no cts role-based sgt {sgt-value| any| unknown} dgt {dgt-value| unknown}
Syntax Description
sgt-value
any
unknown
dgt
dgt-value
access-list list-name
Command Default
None
Command Modes
Global configuration
Command History
Release
4.0(1)
Usage Guidelines
To use this command, you must enable the Cisco TrustSec feature using the feature cts command.
You must configure the SGACL before you can configure SGT mapping.
This command requires the Advanced Services license.
Examples This example shows how to configure SGT mapping for an SGACL:
switch# configure terminal
switch(config)# cts role-based sgt 3 dgt 10 access-list MySGACL
Cisco Nexus 7000 Series Security Command Reference
170
Source SGT value. The range is 0 to 65533.
Specifies any SGT.
Specifies an unknown SGT.
Specifies the destination SGT.
Destination SGT value. The range is 0 to 65533.
Specifies the name for the SGACL.
Modification
This command was introduced.
C Commands