Asr 5000 System Administration Guide, Staros Release 21.1 - Cisco ASR 5000 Administration Manual

The Quick Setup Wizard
Ques.
14, 17,
18
19
20
21–23

ASR 5000 System Administration Guide, StarOS Release 21.1

20
Task
Configure a single SPIO out-of-band
management interface for out-of-band system
management.
Configure a default gateway for the interface.
Enable remote access.
Enable SSH remote access protocols for
accessing the system.
Description/Notes
Traffic on the management LAN is not transferred
over the same media as user data and control
signaling.
For security reasons, it is recommended that
management functions be maintained on a separate
network from user data and control signaling.
The port nomenclature varies based on the medium
being used to access the network – Ethernet or fiber.
SPIO1 represents either the Ethernet 1 or SFP 1
interface on the SPIO. SPIO1 is the default.
SPIO2 represents either the Ethernet 2 or SFP 2
interface on the SPIO.
Use the RJ-45 interfaces to connect the system to the
management network with CAT3 or CAT5 Ethernet
cable. Use the SFP interfaces to connect the system
to the management network with 1000Base-SX
optical fiber cable. The default is rj-45.
Configure an IP address and subnet mask for the
interface.
Enter an IP address.
Enter yes to allow remote access to this system.
Instructions for configuring the second management
interface can be found in the System Settings chapter.
Secure Shell (SSH) uses TCP port number 22 by
default, if enabled.
In Release 19.0 and prior releases, SSH V1 and/or
V2 are supported. If SSH is enabled, you can also
enable SSH File Transfer Protocol (SFTP) server
functionality.
In Release 19.2 and higher, you can specify the SSH
key size. The SSH v2-RSA key generation uses that
key size value.
Note: For maximum security, use only SSH v2.
In Release 19.2 and higher, only SSH v2 is supported.
Secure File Transfer Protocol (SFTP) uses TCP port
number 22 by default, if enabled [subsystem sftp].
Getting Started