Cisco CRS-1 - Carrier Routing System Router - Page 197

Implementing Management Plane Protection on Cisco IOS XR Software
Configuration Examples for Implementing Management Plane Protection
SC-191
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Configuration Examples for Implementing Management Plane
Protection
This section provides the following configuration example:
• Configuring Management Plane Protection: Example, page SC-191
Configuring Management Plane Protection: Example
The following example shows how to configure inband and out-of-band interfaces for a specific IP
address under MPP:
configure
control-plane
management-plane
inband
interface all
allow SSH
!
interface GigabitEthernet 0/6/0/0
allow all
allow SSH
allow Telnet peer
address ipv4 10.1.0.0/16
!
!
interface GigabitEthernet 0/6/0/1
allow Telnet peer
address ipv4 10.1.0.0/16
!
!
!
out-of-band
vrf my_out_of_band
interface GigabitEthernet 0/6/0/2
allow TFTP peer
address ipv6 33::33
!
!
!
!
!
show mgmt-plane
Management Plane Protection
inband interfaces
----------------------
interface - GigabitEthernet0_6_0_0
ssh configured -
All peers allowed
telnet configured -
peer v4 allowed - 10.1.0.0/16
all configured -
All peers allowed
interface - GigabitEthernet0_6_0_1
telnet configured -