Cisco Catalyst 4500 Series - Fa1 Interface and Mgmtvrf

Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS
Chapter 9 Configuring Interfaces
Using the Ethernet Management Port
• Fa1 Interface and mgmtVrf, page 9-7
• SSO Model, page 9-9
• ISSU Model, page 9-9
Fa1 Interface and mgmtVrf
Caution The Ethernet management port is intended for out-of-band access only. Like the console port, the
Ethernet management port has direct access to critical resources on the switch. Connecting this port to
an in-band network might cause performance degradation and vulnerability to a denial of service attack.
Note A service-policy that is applied to the control-plane interface is not applicable to traffic incoming on the
management port.
All features that use fa1 now need to be VRF-aware.
Note You cannot configure any other interface in the same routing domain and you cannot configure a
different routing domain for the Fa1 interface.
On bootup the fa1 port assumes the following default configuration.
Images prior to Cisco IOS XE 3.4.0SG/15.1(2)SG use the old VRF definition format for management VRF as shown below.
!
ip vrf mgmtVrf
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
speed auto
duplex auto
!
Images starting from Cisco IOS XE 3.4.0SG/15.1(2)SG use the new VRF definition format for management VRF as shown
below.
!
vrf definition mgmtVrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
interface FastEthernet1
vrf forwarding mgmtVrf
speed auto
duplex auto
!
Switch# show ip vrf
Name Default RD Interfaces
mgmtVrf Fa1