Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 194

How to Configure a Device for Management Plane Protection
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
control-plane
Example:
RP/0/RP0/CPU0:router(config)# control-plane
RP/0/RP0/CPU0:router(config-ctrl)#
Step 3
management-plane
Example:
RP/0/RP0/CPU0:router(config-ctrl)# management-plane
RP/0/RP0/CPU0:router(config-mpp)#
Step 4
out-of-band
Example:
RP/0/RP0/CPU0:router(config-mpp)# out-of-band
RP/0/RP0/CPU0:router(config-mpp-outband)#
Step 5
vrf vrf-name
Example:
RP/0/RP0/CPU0:router(config-mpp-outband)# vrf target
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-188
configure
control-plane
management-plane
out-of-band
vrf vrf-name
interface {type instance | all}
allow {protocol | all} [peer]
address ipv6 {peer-ip-address | peer ip-address/length}
end
or
commit
show mgmt-plane [inband | out-of-band] [interface {type instance} | vrf]
Implementing Management Plane Protection on Cisco IOS XR Software
Purpose
Enters global configuration mode.
Enters control plane configuration mode.
Configures management plane protection to allow
and disallow protocols and enters management plane
protection configuration mode.
Configures out-of-band interfaces or protocols and
enters management plane protection out-of-band
configuration mode.
Configures a Virtual Private Network (VPN) routing
and forwarding (VRF) reference of an out-of-band
interface.
Use the vrf-name argument to assign a name to
•
a VRF.
OL-20382-01