Question

A network engineer is deploying Cisco TrustSec in an environment where several access-layer switches do not support inline SGT tagging in hardware. To propagate IP-to-SGT bindings from these switches to an upstream enforcement device, the engineer decides to use SXP. On the access switch that has learned the endpoint IP-to-SGT bindings and must send them upstream, which SXP role must be configured?

Accepted Answer

Speaker, because it advertises its IP-to-SGT bindings to the peer

Answer

Listener, because it must receive bindings from the enforcement device

Answer

Both Speaker and Listener, because SXP connections are always bidirectional

Answer

Neither; SXP is not required when inline tagging is unsupported