Cisco IOS XR User Manual

Implementing Management Plane Protection on Cisco IOS XR Software
How to Configure a Device for Management Plane Protection
SC-230
Cisco IOS XR System Security Configuration Guide
Configuring a Device for Management Plane Protection
Perform this task to configure a device that you have just added to your network or a device already
operating in your network. This task shows how to configure MPP in which SSH is allowed to access the
router only through the POS 0/5/0/0 interface.
SUMMARY STEPS
1. configure
2. control-plane
3. management-plane
4. inband
5. interface {type instance | all}
6. allow {protocol | all}
7. end
or
commit
8. show mgmt-plane [interface {type instance}]
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
control-plane
Example:
RP/0/RP0/CPU0:router(config)# control-plane
RP/0/RP0/CPU0:router(config-ctrl)#
Enters the control plane configuration mode.
Step 3
management-plane
Example:
RP/0/RP0/CPU0:router(config-ctrl)# management-plane
RP/0/RP0/CPU0:router(config-mpp)#
Configures management plane protection to allow
and disallow protocols and enters management plane
protection configuration mode.
Step 4
inband
Example:
RP/0/RP0/CPU0:router(config-mpp)# inband
RP/0/RP0/CPU0:router(config-mpp-inband)#
Configures an inband interface and enters
management plane protection inband configuration
mode.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.