ASR 1001 mgmt interface ip address

[ncfb-awarsame]

I don't have an out-band mgmt Network and want to use the manament interface.  can mgmt interface and a production interface be in the same subnet?

I have ASR 1001 router that is hosting my internet. it sits outside the firewall and I want to use management interface.

thank you

[Collin Clark]

Put the management interface into a vrf and that should work.

[ncfb-awarsame]

yes, that worked- thanks Collin.

but I can still ssh to the router on the production interfaces.  I entered "ip ssh source-interface" command pointing to the management interface. And it did not stop the router from accepting ssh on the production interface.

any idea?