ASR 9010 Management Interface

ccarreto · ‎10-06-2016

Hi,

I'm looking for a way to manage an ASR 9K via inband and outband.

Via inband is easy. But how does an configuration looks like for outband?

I tried the following:

vrf MGMT
 address-family ipv4 unicast

interface MgmtEth0/RSP0/CPU0/0
 vrf MGMT
 ipv4 address 10.1.1.53 255.255.255.0
!
interface MgmtEth0/RSP0/CPU0/1
 shutdown
!
interface MgmtEth0/RSP1/CPU0/0
 vrf MGMT
 ipv4 address 10.1.1.54 255.255.255.0
!
interface MgmtEth0/RSP1/CPU0/1
 shutdown
!

ipv4 virtual address vrf MGMT 10.1.1.52/24

router static
 vrf MGMT
  address-family ipv4 unicast
   0.0.0.0/0 10.1.1.1
  !
 !
!

telnet vrf MGMT ipv4 server max-servers 5
telnet vrf default ipv4 server max-servers 10
telnet ipv4 client source-interface Loopback0

I can connect to 10.1.1.53 or 54, but not to 10.1.1.52.

Any help?

Regards, Celio

Thomas Beaver · ‎10-28-2016

You would probably be better off putting a new Loopback into the VRF and using that as the primary management interface. Using a Loopback such as Lo1 and putting it into the VRF could also assist with monitoring.

A good design would have BGP binding to Lo0 for routing, and all management traffic including Telnet, SSH, SNMP, etc. going through the Lo1 / VRF.

Aleksandar Vidakovic · ‎10-28-2016

Hi Celio,

SystemFailure0x5a has a good proposal.

You could also try this:

"ipv4 virtual address"

http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-3/interfaces/configuration/guide2/b-interfaces-cg53x-asr9k/Configuring_Virtual_Loopback_and_Null_Interfaces.html

Jacobo Schneider · ‎10-28-2016

Hello,

A doubt I have had is the purpose of the second management interface on each RP. All configurations I have seen that interface is shutdown.

Does this interface can be used in the same subnet to provide further redundancy, or it has to be in a different subnet and can have a second ip virtual address in that subnet.

Regards

Jacobo

Thomas Beaver · ‎10-28-2016

Yes, no problem with that. You can configure both management interfaces in the same subnet if you want. Just make sure each interface has a unique IP address. Also make sure to read my comment below.