Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 191

Implementing Management Plane Protection on Cisco IOS XR Software
•
Configuring a Device for Management Plane Protection for an Inband Interface
Perform this task to configure a device that you have just added to your network or a device already
operating in your network. This task shows how to configure MPP as an inband interface in which Telnet
is allowed to access the router only through a specific interface.
Perform the following additional tasks to configure an inband MPP interface in non-default VRF.
•
•
•
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
control-plane
Example:
RP/0/RP0/CPU0:router(config)# control-plane
RP/0/RP0/CPU0:router(config-ctrl)#
Step 3
management-plane
Example:
RP/0/RP0/CPU0:router(config-ctrl)# management-plane
RP/0/RP0/CPU0:router(config-mpp)#
OL-20382-01
Configuring a Device for Management Plane Protection for an Out-of-band Interface, page SC-187
Configure the interface under the non-default inband VRF.
Configure the global inband VRF.
In the case of Telnet, configure the Telnet VRF server for the inband VRF.
configure
control-plane
management-plane
inband
interface {type instance | all}
allow {protocol | all} [peer]
address ipv4 {peer-ip-address | peer ip-address/length}
end
or
commit
show mgmt-plane [inband | out-of-band] [interface {type instance}]
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
How to Configure a Device for Management Plane Protection
Purpose
Enters global configuration mode.
Enters control plane configuration mode.
Configures management plane protection to allow
and disallow protocols and enters management plane
protection configuration mode.
SC-185