Fa1 Interface And Mgmtvrf - Cisco Catalyst 4500 series Administration Manual

Chapter 8 Configuring Interfaces
Figure 8-2
The specific implementation of Ethernet management port depends on the redundancy model you are
applying.
For details on configuring SSO and ISSU, refer to
Redundancy Using RPR and SSO on Supervisor Engine 6-E and Supervisor Engine 6L-E"
Chapter 6, "Configuring the Cisco IOS In-Service Software Upgrade
Sections include:
•
•
•

Fa1 Interface and mgmtVrf

Caution The Ethernet management port is intended for out-of-band access only. Like the console port, the
Ethernet management port has direct access to critical resources on the switch. Connecting this port to
an in-band network might cause performance degradation and vulnerability to a denial of service attack.
All features that use fa1 now need to be VRF-aware.
You cannot configure any other interface in the same routing domain and you cannot configure a
Note
different routing domain for the Fa1 interface.
On bootup the fa1 port assumes the following default configuration.
Images prior to Cisco IOS XE 3.4.0SG/15.1(2)SG use the old VRF definition format for management
VRF as shown below.
!
ip vrf mgmtVrf
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
speed auto
duplex auto
!
OL-30933-01
Network with Routing Protocols Enabled
Ethernet
management
Switch
port
Network
ports
Network
cloud
Fa1 Interface and mgmtVrf, page 8-7
SSO Model, page 8-9
ISSU Model, page 8-10
Out-of-bound
network
Chapter 10, "Configuring Supervisor Engine
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
Using the Ethernet Management Port
PC
and
Process".
8-7