CTS

Cisco TrustSec (CTS) is a comprehensive security architecture that provides identity-based access control and encrypted communication across the network infrastructure. It uses Security Group Tags (SGTs) to classify and label traffic based on user identity, device type, or security posture, enabling consistent security policy enforcement regardless of network topology or IP addressing. TrustSec integrates authentication, authorization, encryption, and policy enforcement to create a secure network fabric that can adapt to changing security requirements and threat landscapes.

iosxe:
  devices:
    - name: Device1
      configuration:
        cts:
          authorization_list: TRUSTSEC-AUTHZ-LIST
          role_based_enforcement_vlans:
            ids: [10, 20, 30]
            ranges:
              - from: 100
                to: 200
              - from: 300
                to: 400
          sgt: 100
          sxp: true
          sxp_default_password: mypassword
          sxp_connection_peers_ipv4:
            - ip: 192.168.1.10
              connection_mode: speaker