Page 1 of 1

CTS support on cisco L2 switch

Posted: Sat Mar 28, 2020 6:13 pm
by Richard70
Hello,

I know that vios-L2 v20180619 has some cts capabilities (at least the commands are there in the cli) , but I don't manage to get it working.
For now this is a very simple test SW1 (Trunk port1) ----------- (Trunk port1) SW2 , but there is now tag added to frames from SW1 to SW2.
I tested with L3 ports instead of L2, same issue.
Finally I tested CSR1000v(so L3 ports), and the tag is properly added.
so the question: is this viosL2 version does really support cts, or is it just cosmetic ?
Any share experience greatly appreciated.
Thanks

Re: CTS support on cisco L2 switch

Posted: Sat Mar 28, 2020 6:37 pm
by Uldis (UD)
100% works with this image

i86bi_LinuxL2-AdvEnterpriseK9-M_152_May_2018.bin

Re: CTS support on cisco L2 switch

Posted: Sat Mar 28, 2020 11:15 pm
by Richard70
Thanks !

Re: CTS support on cisco L2 switch

Posted: Sun Mar 29, 2020 12:27 pm
by Richard70
Hi,
are you sure that cts inline tagging is working ok on this version ? I believe it is not.
cts is configurable, le switch can exchane cts pac & environment, but for me inline tagging doesn't work on L2 trunks (doesn't work on L3 ports either).
Below the basic config on each trunk port:

interface Ethernet0/0
switchport trunk encapsulation dot1q
switchport mode trunk
cts manual
policy static sgt 2 trusted

Re: CTS support on cisco L2 switch

Posted: Sun Mar 29, 2020 4:10 pm
by Uldis (UD)
This switch paired with ASA with PAC keys, worked well for me doing Secv5 task on it.
SGT gropus worked proerly on ASA after dot1x host authorization on IOL SW
Probably not all CTS things are supported on this SW...

Re: CTS support on cisco L2 switch

Posted: Sun Mar 29, 2020 9:58 pm
by Richard70
Are you using sxp between the sw and asa ?

Re: CTS support on cisco L2 switch

Posted: Mon Mar 30, 2020 1:42 am
by Uldis (UD)
yes CTS SXP peering IOL SW and ASA 9.1.6
all virtual
atached IOL SW cfg with CTS SXP

Re: CTS support on cisco L2 switch

Posted: Mon Mar 30, 2020 10:22 pm
by Richard70
Thank you.