What alternative exists for propagating SGTs when network devices do not have hardware support for TrustSec?

What alternative exists for propagating SGTs when network devices do not have hardware
support for TrustSec?

A.
SGACL

B.
Cisco Discovery Protocol