Introduction Cisco TrustSec changes the game by letting us write security policies based on identity (SGT) instead of network constructs like IP or VLAN.The Policy Matrix is the central brain: a two-dimensional grid where rows = source SGT, columns = destination SGT, and each cell […]
Introduction Scalable Group Tags (SGTs) are the foundation of Cisco TrustSec—labels that identify “who” a packet belongs to, decoupled from IP or VLAN. The Scalable Group Tag eXchange Protocol (SXP) is the control-plane that ships IP↔SGT bindings from where they’re learned (typically access edges) to […]
Introduction Cisco TrustSec (CTS) is a next-generation access control framework that goes beyond traditional IP-based segmentation. Instead of relying on static VLANs and ACLs, it leverages Security Group Tags (SGTs) to dynamically classify traffic, enforce policies consistently across the enterprise, and scale security for modern […]
![[Day 25] Cisco ISE Mastery Training: Dynamic VLAN Assignment in Wired Networks](https://networkjourney.com/wp-content/uploads/2025/08/Day-25-Cisco-ISE-Mastery-Training-Dynamic-VLAN-Assignment-in-Wired-Networks.png)
Introduction Dynamic VLAN Assignment (DVA) is a cornerstone capability in Cisco Identity Services Engine (ISE) deployments for wired networks. In traditional environments, VLANs are statically configured on switch ports — meaning every port is tied to a single network segment regardless of who plugs in. […]
Introduction In enterprise networks, controlling who gets access to the wired LAN is as important as controlling wireless access. Cisco ISE provides multiple authentication methods — 802.1X, MAC Authentication Bypass (MAB), and WebAuth — to ensure every device is authenticated, whether it supports 802.1X or […]
![[Day 14] Cisco ISE Mastery Training: Setting Up a Test Switch for Authentication](https://networkjourney.com/wp-content/uploads/2025/08/Day-14-Cisco-ISE-Mastery-Training-Setting-Up-a-Test-Switch-for-Authentication.png)
Introduction In Cisco ISE deployments, a Test Switch is your lab’s workhorse. Before rolling NAC (802.1X/MAB) into production, you need a safe environment to test authentication policies, VLAN assignments, and posture checks.This session walks you through configuring a switch from scratch to talk to ISE, […]
