cancel
Showing results for 
Search instead for 
Did you mean: 

need help VDX 6740 in-band management configure

need help VDX 6740 in-band management configure

mbze430
New Contributor II

Having a bit of trouble configuring the VDX 6740 so I can access the management cli via ssh from anywhere (in-band).

My management VLAN is 100 and I figure I try to forward from the port-channel port since it's the trunk port

Here are the parts of the running-config I think is relevant:

 

interface Ve 100
ip route 10.0.253.1/24 172.30.0.1
no shutdown

rbridge-id 1
ip route 0.0.0.0/0 172.30.0.1
switch-attributes chassis-name VDX6740T-1G
switch-attributes host-name sw0
vrf mgmt-vrf
address-family ipv4 unicast
ip route 0.0.0.0/0 172.30.0.1
!
address-family ipv6 unicast
!
!
interface Management 1/0
no tcp burstrate
ip icmp echo-reply
no ip address dhcp
ip address 172.30.0.6/16
ipv6 icmpv6 echo-reply
no ipv6 address autoconfig
no ipv6 address dhcp
vrf forwarding mgmt-vrf
no shutdown

interface Port-channel 1
vlag ignore-split
speed 40000
mtu 9216
description Port Channel for Trunk to DX010
switchport
switchport mode trunk
switchport trunk allowed vlan all
switchport trunk allowed vlan remove 1
no switchport trunk tag native-vlan
switchport trunk native-vlan 4000
no spanning-tree shutdown
no shutdown

What am I missing?  A few commands in the 7.4.0 CLI reference doesn't work either.

ex: "To disable a management VRF previously cŸnfig´r~| on a VE interface:
switch(config)# int ve 100
switch(conf-Ve-100)# no vrf forwarding mgmt-vrf"

when in the path of "conf-Ve-100" assuming the above is true, there is no option to "vrf forwarding mgmt-vrf"

Here are the only available command in "conf-Ve":

sw0(config-Ve-1)#help

Possible completions:

attach Configure attachments

describe Display transparent command information

do Run an operational-mode command

exit Exit from current mode

help Provide help information

ip The Internet Protocol (IP).

ipv6 The Internet Protocol version 6(IPv6).

no Negate a command or set its defaults

pwd Display current mode path

shutdown Shutdown the selected interface

top Exit to top level and optionally run command

sw0(config-Ve-1)# ip ?

Possible completions:

fabric-virtual-gateway IP fabric virtual gateway

 

any help to get this in-band working would be great.

 

 

1 ACCEPTED SOLUTION

Try this:

 

conf t
rb 1
vrf mgmt-vrf
address-family ipv4 unicast
ip route 0.0.0.0/0 10.0.254.1

 

Michael Morey
Principal Technical Support Engineer
Extreme Networks

View solution in original post

7 REPLIES 7

Try this:

 

conf t
rb 1
vrf mgmt-vrf
address-family ipv4 unicast
ip route 0.0.0.0/0 10.0.254.1

 

Michael Morey
Principal Technical Support Engineer
Extreme Networks

That was it!  Thank you so much!  Still learning those commands in NOS!

Currently, I have connected exactly as the diagram, as shown below, to gain access to the management console.  (I just assumed eth0 = interface management 1/0 = front port on the diagram (RJ-45 under the micro-usb serial port)).

What I am trying to accomplished is to remove the wire #2 in the diagram, and be able to access the management console from anywhere (in-band).  I figured SVI/Ve was the more practical way, I am open to another way, as long I can free up the ports.

Originally have set the interface management port to 172.30.0.6/16 which is our main vlan (1000).  I am still able to access it that way.  Since I am using the 6740 as a leaf all the ports are assigned to VLAN 1000 Access mode.  There are a few on other VLAN, but mainly VLAN 1000.  The cable going from the interface management 1/0 is going into te1/0/8 and that's assigned to VLAN1000.

As of right now, I can access it either through 172.30.0.6 or 10.0.254.6.  But as soon as I unplug the cable from interface management 1/0, I am not able to get to the management console.  When I said I removed the cable from eth0 (my previous post), I meant from Interface Management 1/0.

I also have fe1/0/49 & fe1/0/50 in a portchannel uplink to a core switch that holds all the SVI database, if this is a viable option to use.   I have te1/0/48 that is a downlink trunk port to another switch both portchannel and  te1/0/48 is set to accept all vlans, so both of them are members of vlan 100. image.png

GTM-P2G8KFN