Posted on March 10, 2016 5:14 pm
 |  Asked by Christopher Cupples
 |  2121 views
RESOLVED
0
0
Print Friendly, PDF & Email

How can the management interfaces on a dual-supervisor 7500 chassis be configured to permit CLI access (via SSH) from an admin server on a remote network (i.e., not on the same subnet as the management interfaces)?

I have defined a management VRF and configured a default route for it

vrf definition management
rd 101:1
ip route vrf management 0.0.0.0/0 192.168.100.1

but I am unable to place the two management interfaces into the vrf

interface Management1/1
vrf forwarding management
% VRF configuration is not supported on this interface.
ip address 192.168.100.11/24
interface Management2/1
vrf forwarding management
% VRF configuration is not supported on this interface.
ip address 192.168.100.12/24

I can, however, create a virtual management interface, place it in the VRF, and assign and IP address to it

interface Management0
vrf forwarding management
ip address 192.168.100.10/24

but that interface attaches only to the management port on the active supervisor and the standby supervisor remains inaccessible.

What I want to do is configure an IP address on each supervisor and access them through the management network. How do I do that?

1
Posted by Saurabh Sarpal
Answered on October 17, 2016 9:59 pm

As per section VRF Aware Management here, only the management active interface ( ma0 ) can be moved into a VRF. One way to access the backup supervisor would be from the active supervisor using the CLI command ”session peer-supervisor”, of course, assuming that the active is accesible.

(s1)#session peer-supervisor
Warning: Permanently added '[127.1.0.2]:3601’ (RSA) to the list of known hosts.
Last login: Mon Oct 17 14:52:17 2016 from supervisor1

WARNING – you are currently logged in to the standby supervisor.
Not all cli commands are available or supported. Configuration mode
is disabled for SSO.
s1:(s2-standby)#

 

 

Post your Answer

You must be logged in to post an answer.