thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Routing & Switching · Advanced

Scalable Group Tag (SGT)

A 16-bit Cisco TrustSec tag that identifies a group of users or devices for role-based policy regardless of IP address.

Definition

SGTs are assigned dynamically by Cisco ISE after authentication or statically by IP/VLAN. In SD-Access, SGTs are carried in the VXLAN-GPO header and enforced with SGACLs on egress. They provide micro-segmentation within a virtual network.

Example

cts role-based enforcement ; SGACL denies SGT 10 (Guests) to SGT 20 (Servers)

Exam tip

VN (VRF) = macro-segmentation; SGT = micro-segmentation.

Related terms