Cisco Systems 4500 Fa1 Interface and mgmtVrf

6-7
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 6 Configuring Interfaces Using the Ethernet Management Port
Figure 6-2 Network with Routing Protocols Enabled
The specific implementation of Ethernet management port depends on the redundancy model you are
applying.
For details on configuring SSO and ISSU, refer to Chapter 8, “Configuring Supervisor Engine
Redundancy Using RPR and SSO” and Chapter 5, “Configuring the Cisco IOS In-Service Software
Upgrade Process”.
Fa1 Interface and mgmtVrf
Caution The Ethernet management port is intended for out-of-band access only. Like the console port, the
Ethernet management port has direct access to critical resources on the switch. Connecting this port to
an in-band network might cause performance degradation and vulnerability to a denial of service attack.
All features that use fa1 now need to be VRF-aware.
Note You cannot configure any other interface in the same routing domain and you cannot configure a
different routing domain for the Fa1 interface.
On bootup the fa1 port assumes the following default configuration:
ip unicast-routing
ip vrf mgmtVrf
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
speed auto
duplex auto
Switch# show ip vrf
Name Default RD Interfaces
mgmtVrf Fa1
Because the management port is placed in mgmtVrf, you should be aware of the VRF aware commands
required for the following tasks:
• Ping, page 6-8
• TraceRoute, page 6-8
208921
Switch PC
Network
cloud
Out-of-bound
network
Ethernet
management
port
Network
ports