Which IP-TAG mappings are pushed to devices by the Panorama Cisco Trustsec plugin?
682
Created On 06/19/22 21:40 PM - Last Modified 06/16/25 21:20 PM
Question
Which IP-TAG mappings are pushed to managed devices from the Cisco Trustsec plugin if the DAGs use some mappings learnt by the plugin; but not all?
Environment
- Panorama Cisco Trustsec plugin installed and configured
- Plugin's Notify group contains one or more Device groups
- Device group contains DAG (Dynamic Address group)
Answer
The Panorama will push all IP-TAG mappings to all Device groups that are part of plugin Notify group; regardless of their usage (or lack thereof) by the DAGs in that particular Device group.