[c-nsp] NX-OS - Cisco TrustSec

[Lincoln Dale]

On 11/05/2010, at 5:31 PM, Erik Witkop wrote:
> But all the tags and policies come from the ACS. I could be wrong, but I don't think it can currently be done locally. Unless something has changed in the last 2 years or so.

we've always had the ability to do CTS crypto or CTS SGT/SGACL manually on N7K.

see <http://www.cisco.com/en/US/docs/switches/datacenter/sw/4_2/nx-os/security/configuration/guide/Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_4.2_chapter11.html#task_1232122>


cheers,

lincoln.