Cisco IOS XR

Implementing Management Plane Protection on Cisco IOS XR Software
Configuration Examples for Implementing Management Plane Protection
SC-232
Cisco IOS XR System Security Configuration Guide
Configuration Examples for Implementing Management Plane
Protection
This section provides the following configuration example:
• Configuring Management Plane Protection: Example, page SC-232
Configuring Management Plane Protection: Example
The following example shows how to configure inband interfaces under MPP:
configure
control-plane
management-plane
inband
interface POS0/5/0/0
allow SSH
!
interface POS0/5/0/1
Step 7
end
or
commit
Example:
RP/0/RP0/CPU0:router(config-mpp-inband-POS0_5_0_0)#
end
or
RP/0/RP0/CPU0:router(config-mpp-inband-POS0_5_0_0)#
commit
Saves configuration changes.
• When you issue the end command, the system
prompts you to commit changes:
Uncommitted changes found, commit them
before exiting(yes/no/cancel)?
[cancel]:
– Entering yes saves configuration changes to
the running configuration file, exits the
configuration session, and returns the
router to EXEC mode.
– Entering no exits the configuration session
and returns the router to EXEC mode
without committing the configuration
changes.
– Entering cancel leaves the router in the
current configuration session without
exiting or committing the configuration
changes.
• Use the commit command to save the
configuration changes to the running
configuration file and remain within the
configuration session.
Step 8
show mgmt-plane [interface { type instance }]
Example:
RP/0/RP0/CPU0:router# show mgmt-plane interface POS
0/5/0/0
Displays information about the management plane,
such as type of interface and protocols enabled on
the interface.
• (Optional) Use the interface keyword to display
the details for a specific interface.
Command or Action Purpose