cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1736
Views
0
Helpful
2
Replies

3650 managment interface reachable without default route

Mike Assel
Level 4
Level 4

I have a 3650 where remote access to the management interface is working and I can't figure out why. I configured an IP address on the management interface, but with no default route or default gateway configured, I'm able to access the switch from a remote subnet. I don't see why this is working. Can anyone educate me?

 

Running Config

Current configuration : 8830 bytes
!
! Last configuration change at 12:34:43 UTC Tue Jul 16 2019 by cisco
!
version 16.9
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service call-home
no platform punt-keepalive disable-kernel-core
!
hostname 3560-2
!
!
vrf definition Mgmt-vrf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
enable secret 5 $1$pz4F$eB1bizmoP1kV1bNgPItsH0
!
no aaa new-model
switch 1 provision ws-c3650-24pdm
!
!
!
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
  no destination transport-method email
!
!
!
!
!
!
ip dhcp pool webuidhcp
!
!
!
login on-success log
ipv6 unicast-routing
!
!
!
!
!
vtp mode off
!
!
license boot level ipbasek9
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
!
redundancy
 mode sso
!
!
!
!
!
transceiver type all
 monitoring
!
vlan 11
 name DANTE
!
vlan 13
 name AVB
!
vlan 22
 name EXTERITY
!
!
!
! 
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
 vrf forwarding Mgmt-vrf
 ip address 10.1.150.6 255.255.255.0
 speed 1000
 negotiation auto
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client request vendor
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface Vlan1
 no ip address
 shutdown
!
iox
ip forward-protocol nd
ip http server
ip http secure-server
ip http client source-interface GigabitEthernet0/0
ip tftp source-interface GigabitEthernet0/0
!
!
!
!
!
control-plane
 service-policy input system-cpp-policy
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login local
 length 0
line vty 5 15
 login
!
!
!
!
!
!
!
app-hosting appid guestshell
 app-vnic management guest-interface 0
end
1 Accepted Solution

Accepted Solutions

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

Sounds like the router on the management subnet is configured to perform proxy-ARP:

 

https://www.cisco.com/c/en/us/support/docs/ip/dynamic-address-allocation-resolution/13718-5.html

 

cheers,

Seb.

View solution in original post

2 Replies 2

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

Sounds like the router on the management subnet is configured to perform proxy-ARP:

 

https://www.cisco.com/c/en/us/support/docs/ip/dynamic-address-allocation-resolution/13718-5.html

 

cheers,

Seb.

balaji.bandi
Hall of Fame
Hall of Fame

Management Interface configured as L3 configuration, can you give example ? what is the remote address example IP ?

can you also let us know where is this remote IP address located in the network ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help