cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
4643
Views
0
Helpful
2
Replies
Tibor Marchyn
Beginner

Catalyst 2960-X management port routing

Hi,

is there any way to define different default route (i.e. vrf) for catalyst 2960-X management port?

normally we used to have SVI for management as old switches didn't have dedicated management. Now we would like to keep it, but have also dedicated IP for emergency cases over VPN (i.e. central L3 switches crash, so we will connect over VPN to dedicated management VLAN which is directly attached on dedicated switch where are all management port from all switches just for this purpose).

ip default-gateway is normally used, but is it shared between dedicated management and SVI? cannot be specified something else there?

Thanks

2 REPLIES 2
Reza Sharifi
Hall of Fame Expert

Hi,

Yes, for the dedicated management port, you need to define a default route within the mgmt vrf.

usually, it looks something like this:

ip route vrf Mgmt-vrf 0.0.0.0 0.0.0.0 192.168.1.1

In this example, 192.168.1.1 is the IP address of the out of band management switch.

HTH

Normally c2960x switches do not support vfr and they do not have their management interface ( FastEthernet0) placed into Mgmt vrf as that is usually done for routers. Because of that "vrf" option can't be used in "ip route" command. For me  to make c2960x switch to start responding to the traffic from other network I had to add a command "ip route 0.0.0.0 0.0.0.0 x.x.x.x" (where x.x.x.x - defalut gateway for the network where switch's management interface Fa0 is).  IP routing protocol was NOT ENABLED on the switch.