Cisco TrustSec enables organizations to secure their networks and services through identity-based access control to anyone, anywhere, anytime. The solution also offers data integrity and confidentiality services, policy-based governance, and centralized monitoring, troubleshooting, and reporting services.

Global

1. In the Global section, check the SXP Enabled check box to enable SXP.
2. Enter the Default Source IP address.
3. Enter the Reconciliation Period in seconds.
4. Enter the Retry Period in seconds.
5. Check the Set New Default Password check box to reveal password information fields.
6. From the Password Type drop-down list, choose the type.
7. Enter an appropriate password in Enter Password.
8. Click Apply.

Peer

1. In the Peer section, click Add.
2. Enter the Peer IP and Source IP.
3. From the Password drop-down list, choose the type.
4. From the Mode of Local Device drop-down list, choose the type.

5. Click Save & Apply to Device.

1. In the TrustSec tab, enter a CTS Device ID.
2. Enter a password.

3. From the CTS Authorization List drop-down, select the authorization.

4. Click Apply to save the details.

Note: You can find the available PACs in key store from the CTS PAC information section.

1. In the AP tab, click Add.
2. In the Add SXP AP window that is displayed, enter a profile name.

3. Use the slider to enable or disable the Status.

4. Enter a default password.
5. Enter the CTS listener minimum, CTS listener maximum, CTS speaker, CTS recon period, and CTS retry period in seconds.
6. In the CTS SXP Profile Connections section, click Add.
7. Enter the Peer IP.
8. From the Connection Mode drop-down, choose the mode as Listener, Speaker, or Both.
9. From the Password Type drop-down, choose the type as either None or Default.
10. Click Save.
11. Click Save & Apply to Device.