CSS: Mgt port for management vs normal port for Maqnagement

[s.srivas]

What are the pros and cons of using the ethenet management port for managing a CSS and using a normal ethernet port for managing a CSS.

Is any functionality of CSS depends on Management ethernet port? Is connecting via local lan still an issue/requirement?

[Gilles Dufour · Accepted solution]

you can use whatever port.

People usually wants to use a management port that is *separated* from the rest of the device so that if a regular port gets hacked and somebody gain access to the device, you can't access the management network.

To obtain this separation between regular port and the management port, a lot of restriction have been created on the management port.

You can't configure a default route on the management port, you can't have routes overlapping between management port and regular ports, ...

Therefore, personally, I prefer not to use the management port. The chance that somebody gain access to the CSS via a regular port is almost null so it does not justify the pain to use the management port.

Regards,

Gilles.

[s.srivas]

Thank you Gilles. Ver usefull information. I've come accross both implementations and this information is very usefull.