Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 187

Implementing Management Plane Protection on
Cisco IOS XR Software
The Management Plane Protection (MPP) feature in Cisco IOS XR software provides the capability to
restrict the interfaces on which network management packets are allowed to enter a device. The MPP
feature allows a network operator to designate one or more router interfaces as management interfaces.
Device management traffic may enter a device only through these management interfaces. After MPP is
enabled, no interfaces except designated management interfaces accept network management traffic
destined to the device. Restricting management packets to designated interfaces provides greater control
over management of a device, providing more security for that device.
For information on MPP commands, see the Management Plane Protection Commands on Cisco IOS XR
Software module in Cisco IOS XR System Security Configuration Guide.
Feature History for Implementing Management Plane Protection on Cisco CRS-1
Release
Release 3.5.0
Release 3.6.0
Release 3.7.0
Release 3.8.0
Release 3.9.0
OL-20382-01
Modification
This feature was introduced on the Cisco CRS-1.
The following enhancements were added:
Out-of-band management interface support for applications.
•
Peer-filtering for specific peers or a range of peers for the specified
•
application.
The following enhancements were added:
The information describing the MPP feature was expanded.
•
New information was added about how logical and management plane
•
interfaces filter packets based on the ingress physical interface.
No modification.
No modification.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-181