Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 197

Implementing Management Plane Protection on Cisco IOS XR Software
Configuration Examples for Implementing Management Plane
Protection
This section provides the following configuration example:
•
Configuring Management Plane Protection: Example
The following example shows how to configure inband and out-of-band interfaces for a specific IP
address under MPP:
configure
control-plane
management-plane
inband
!
!
out-of-band
!
!
!
show mgmt-plane
Management Plane Protection
inband interfaces
----------------------
interface - GigabitEthernet0_6_0_0
interface - GigabitEthernet0_6_0_1
OL-20382-01
Configuring Management Plane Protection: Example, page SC-191
interface all
allow SSH
!
interface GigabitEthernet 0/6/0/0
allow all
allow SSH
allow Telnet peer
address ipv4 10.1.0.0/16
!
interface GigabitEthernet 0/6/0/1
allow Telnet peer
address ipv4 10.1.0.0/16
!
!
vrf my_out_of_band
interface GigabitEthernet 0/6/0/2
allow TFTP peer
address ipv6 33::33
!
!
ssh configured -
All peers allowed
telnet configured -
peer v4 allowed - 10.1.0.0/16
all configured -
All peers allowed
telnet configured -
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
Configuration Examples for Implementing Management Plane Protection
SC-191