I have a CSS 11501 (7.50) and have configured an IP address for the management Interface. This is now reachable from local subnet, but not from WAN. Apart from the gateway given in the boot statement, do we need to specifically give a route towards management interface for us to manage the CSS from WAN ?
for example, I have:
(config-boot)# ip address 10.10.10.10
Wouldnt the default gateway here, take care of the reachability from WAN (no reachability in my case). I see the documentation says we need to add another static route through the mgmt interface such as:
(config)# ip management route 0.0.0.0/0 10.10.10.1
, for us to do SNMP, telnet, SSH from WAN ? Is it possible to add 0.0.0.0/0 on ip management command or could we just add static networks onto it? Will it affect default routing functionality of production VIP/interfaces in anyway?
It is a little funny to define static routes, even after defining the default gateway on the MGMT interface ! CSS team probably need to fix this ! I was always comparing CSS with something like a router, which has common routing table for all interfaces, which would make things tough for me to add this route ! but it turned out that CSS was behaving more like the ASA/PIX firewalls , in terms of routing.. So, the routes given in the MGMT interface did not overlap with the routes given on production interfaces ! Though it was documented, i had my own doubts , since there were highly critical servers (as always) which sits behind the CSS, and its still a blackbox for me :)
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...