Cisco Catalyst 4500 Series Software Configuration Guide

Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS
Chapter 9 Configuring Interfaces
Using the Ethernet Management Port
• Fa1 Interface and mgmtVrf, page 9-7
• SSO Model, page 9-9
• ISSU Model, page 9-9
Fa1 Interface and mgmtVrf
Caution The Ethernet management port is intended for out-of-band access only. Like the console port, the
Ethernet management port has direct access to critical resources on the switch. Connecting this port to
an in-band network might cause performance degradation and vulnerability to a denial of service attack.
Note A service-policy that is applied to the control-plane interface is not applicable to traffic incoming on the
management port.
All features that use fa1 now need to be VRF-aware.
Note You cannot configure any other interface in the same routing domain and you cannot configure a
different routing domain for the Fa1 interface.
On bootup the fa1 port assumes the following default configuration.
Images prior to Cisco IOS XE 3.4.0SG/15.1(2)SG use the old VRF definition format for management VRF as shown below.
!
ip vrf mgmtVrf
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
speed auto
duplex auto
!
Images starting from Cisco IOS XE 3.4.0SG/15.1(2)SG use the new VRF definition format for management VRF as shown
below.
!
vrf definition mgmtVrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
interface FastEthernet1
vrf forwarding mgmtVrf
speed auto
duplex auto
!
Switch# show ip vrf
Name Default RD Interfaces
mgmtVrf Fa1

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E