Fa1 Interface and mgmtVrf, page 9-7
•
SSO Model, page 9-9
•
ISSU Model, page 9-9
•
Fa1 Interface and mgmtVrf
Caution
The Ethernet management port is intended for out-of-band access only. Like the console port, the
Ethernet management port has direct access to critical resources on the switch. Connecting this port to
an in-band network might cause performance degradation and vulnerability to a denial of service attack.
A service-policy that is applied to the control-plane interface is not applicable to traffic incoming on the
Note
management port.
All features that use fa1 now need to be VRF-aware.
You cannot configure any other interface in the same routing domain and you cannot configure a
Note
different routing domain for the Fa1 interface.
On bootup the fa1 port assumes the following default configuration.
Images prior to Cisco IOS XE 3.4.0SG/15.1(2)SG use the old VRF definition format for management VRF as shown below.
!
ip vrf mgmtVrf
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
speed auto
duplex auto
!
Images starting from Cisco IOS XE 3.4.0SG/15.1(2)SG use the new VRF definition format for management VRF as shown
below.
!
vrf definition mgmtVrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
interface FastEthernet1
vrf forwarding mgmtVrf
speed auto
duplex auto
!
Switch# show ip vrf
Name
mgmtVrf
Chapter 9
Configuring Interfaces
Default RD
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS
Interfaces
Fa1
Using the Ethernet Management Port