While specific hardware support varies by model and software version, the following Cisco switches are explicitly highlighted in the sources for their TrustSec capabilities:
Catalyst 9000 Series: The Catalyst 9300 and 9500 are identified as switches capable of native SGT tagging and SGT propagation. The Catalyst 9300 also supports downlink MACsec.
Nexus Series: Supported Nexus 7000 models allow for manual SGT configuration at the interface level, though some Nexus models may have limited TrustSec feature support.
General Support: All Cisco Secure Access–supported switches generally support the assignment of SGTs (classification).
