Management port for ISR 4331 not working

[CiscoKSA2020]

Hi Guys

I have router ISR 4331, a new one so i made a initial configuration for it, and i configured management port give IP address and connect the SW to my network, but i couldn`t access to it through network, and also i can`t  ping the IP Add of this management port

So, any suggestion ??

[MHM Cisco World]

normally this management interface is config under VRF so you need to ping VRF ip address not ping ip address directly.
I think this is the problem.
show ip interface to see the detail about this interface.

[balaji.bandi]

Make sure you need to set up a different Gateway for the Management network to connect to your network where this was connected, if not it takes the default route table (or Global Routing table) so add a specific route for mgmt

here is the command to use to ping from router -

#ping vrf myvrf x.x.x.x

from other devices can directly - make sure check the physical port up and running.

still have an issue post the show run for reference to look.

here is the reference guide for configuring the MGMT interface and route.

https://www.cisco.com/c/en/us/td/docs/routers/access/4400/hardware/installation/guide4400-4300/C4400_isr/initconfig.html#42175

[CiscoKSA2020]

 Thanks all for your replies,

O/P of sh run

"interface GigabitEthernet0
vrf forwarding Mgmt-intf
ip address 10.133.20.55 255.255.255.128
negotiation auto"

and show ip int br

"GigabitEthernet0 10.133.20.55 YES manual up up"

and about ping, i have another same router at my network and i can ping to it normally use normal ping ... no need to use ping vrf

[MHM Cisco World]

R1-R2

i will ping from R2 to R1 management VRF there're two case 

1-from R2 I use ping only because

in R1 there is static route from this VRF to global, this make VRF use global route to connect to R2

2- from R2 I use ping vrf

in R2 there is same VRF and hence it easy connect to R1

[paul driver]

Hello

Usually the mgt port is indeed defined into a vrf however this vrf is again usually in the default vrf as such you shouldn't have to specify it when initiating a ping from it or to it.

So are you advertising that routers  mgt ip address, is it network range reachable, do you have any security policy or access list negating access.

[balaji.bandi]

You can ping if it participates in GRT.  can you post-show ip route 

and tell us what IP you trying to ping from and to ?

[CiscoKSA2020]

No, it`s not appear at routing table 

"

Router#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set"

i should make a route rule for it?  i mean it`s not like int vlan ip address

sorry but it`s my first time to work with it

[paul driver]

Hello

Mgmt-intf -  isnt the default vrf !

Post output -
sh ip route vrf Mgmt-intf | b G

[MHM Cisco World]

That why you could not ping directly, you must use VRF.

[CiscoKSA2020]

Router#sh ip route vrf Mgmt-intf | b G
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.133.20.0/25 is directly connected, GigabitEthernet0
L 10.133.20.55/32 is directly connected, GigabitEthernet0

[MHM Cisco World]

Show ip route, do you see the ip of g0  interface?

[paul driver]

Hello
I take it gig0 is then the mgt port by default for that rtr with the vrf called Mgmt-intf ? Anyway for now keep interface gig0 in the vrf and test connectivity by giving the rtr a default route for its vrf.

ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.133.20.x

[MHM Cisco World]

Cisco/VRF/Bidirectional

See my Facebook page this video it will help you

my page MHM Cisco World

Cisco/VRF/Bidirectional

[CiscoKSA2020]

Hi guys

sorry for my late reply i was really busy

unfortunately it`s not working until now, i tried to made "no  vrf forwarding Mgmt-intf " but not accepted , told me can`t delete it

what i am think now, that i will make "no ip address" under this management port, and will make "ip address" x.x.x.x" under int vlan and i will se if it work

Thanks guys for your replies