More and more Cisco switches have a dedicated RJ45 management interface (ie. C3750E, C3120X, etc..). Are there any best-practises on how to use/configure these ports ?
1) These interfaces typically do not participate in routing. So my default route, received through IGP, typically points to an inband production interface.
Does this mean that packets are received on the OOB interface, but are sent inband ? In a layer2 environment, does my "ip default-gateway" command need to point to OOB or inband ?
2) Is it recommended to have both an inband and out-of-band management ip address ? A loopback in L3 environments or a dedicated management VLAN in L2 environments ? How to deploy both without running into problems (see below)
3) We use TACACS authentication with verification of the source ip address. For this, we have to fix the source ip address with the "source-interface" option for telnet,ssh and tacacs. How to deploy the oob-interface in this environment ? When the OOB or production interface is lost, will we loose TACACS connectivity to the switch, because the source ip address changes and is now refused ? Do we need to add all switches into tacacs with two ip addresses: inband mgmt and outbound mgmt address ?