segmented management on 5520 running VOSS

[Chi]

Hi, has anybody gotten a 5520 running VOSS and acting as a router with two routed interfaces (VLANs with IPs) to have the segmented management VLAN be accessible from both sides of the router?  I created VLANs A and B on the 5520, assigned (public, routable) IPs to them, and then created a segmented management VLAN, and gave it an IP on the same subnet as VLAN A, with VLAN A’s IP address as it’s default route.

I can SSH to the segmented management VLAN address, but ONLY when I’m physically connected to anything on VLAN A side of the router, including devices going through another router that connects the VLAN A.  Anything on VLAN B or connected to the VLAN B side, cannot SSH to the segmented management VLAN address.

[EXTR_Paul]

just a thought….

if your network is routed, just use a CLIP for mgmt.

mgmt clip vrf GlobalRouter
ip address 172.17.49.1/32
enable

[Miguel-Angel_RO]

Chi,

From the doc:

The mgmt IP and the VLAN A IP must match if I not mistaking.

The default gateway is the one defined on your switch and not the VLAN A’s IP

Mig

[EXTR_Paul]

can you dump the config for us please?

[Chi]

Yes, I gave the VLAN A IP address as the default route for the segmented management VLAN interface.  I could only SSH to the seg mgmt IP from the VLAN A IP and other networks connected to the VLAN A side.  I could not SSH from the VLAN B IP nor any other network connected to the VLAN B side

[EXTR_Paul]

better example

mgmt vlan 192 

ip address 192.168.2.7/24

ip route 0.0.0.0/0 next-hop 192.168.2.1 weight 200

enable

exit