Posted on March 10, 2016 5:14 pm
 |  Asked by Christopher Cupples
Print Friendly, PDF & Email

How can the management interfaces on a dual-supervisor 7500 chassis be configured to permit CLI access (via SSH) from an admin server on a remote network (i.e., not on the same subnet as the management interfaces)?

I have defined a management VRF and configured a default route for it

vrf definition management
rd 101:1
ip route vrf management

but I am unable to place the two management interfaces into the vrf

interface Management1/1
vrf forwarding management
% VRF configuration is not supported on this interface.
ip address
interface Management2/1
vrf forwarding management
% VRF configuration is not supported on this interface.
ip address

I can, however, create a virtual management interface, place it in the VRF, and assign and IP address to it

interface Management0
vrf forwarding management
ip address

but that interface attaches only to the management port on the active supervisor and the standby supervisor remains inaccessible.

What I want to do is configure an IP address on each supervisor and access them through the management network. How do I do that?

Posted by Saurabh Sarpal
Answered on October 17, 2016 9:59 pm

As per section VRF Aware Management here, only the management active interface ( ma0 ) can be moved into a VRF. One way to access the backup supervisor would be from the active supervisor using the CLI command ”session peer-supervisor”, of course, assuming that the active is accesible.

(s1)#session peer-supervisor
Warning: Permanently added '[]:3601’ (RSA) to the list of known hosts.
Last login: Mon Oct 17 14:52:17 2016 from supervisor1

WARNING – you are currently logged in to the standby supervisor.
Not all cli commands are available or supported. Configuration mode
is disabled for SSO.



Post your Answer

You must be logged in to post an answer.