Have ASR 1000X, it's configured with g0 using vrf Mgmt-intf and works. Just don't know if there is a way to directly access the router through the interface facing the Internet with an access-list on the interface. Thanks for the inputs
Never done it before and not sure if it possible, but I think to make it work you need to make a couple of changes.
So, lets assume that interface gi0/1 connects to Internet. This interface in your global routing table and g0 is in its own vrf. So, in order for gi0/1 to communicate with g0 you need to leak the global routing table to vrf Mgmt-intf (which defeats the purpose of putting management interface in its own vrf). Also if you are using private IP for your g0, and now you want to access it from outside you need to configure NAT. After all, I am not sure if it is good idea to expose the management port of you device to the Internet.
Listen: https://smarturl.it/CCRS9E25 Follow us: twitter.com/ciscochampions
With applications and users everywhere, the networks are now, more than ever, being tasked with delivering consistent protection while providing an exceptional user exper...
Listen: https://smarturl.it/CCRS9E24 Follow us: https://twitter.com/CiscoChampion
Cisco Radio Aware Routing addresses several of the challenges faced when merging IP routing and radio communications in mobile networks, especially those exhibiti...
Listen: https://smarturl.it/CCRS9E23 Follow us: https://twitter.com/CiscoChampion The Wi-Fi 6E Catalyst 9136 access point takes advantage of the 6-GHz band to produce a network that is more reliable and secure, with higher throughput, more ...
When moving from OSPFv2 to OSPFv3, there are many changes in the format of the LSAs Type, but the most known changes are: IP prefix informations are no longer carried in Type-1 LSA and Type-2 LSA, new LSAs Type 8 and 9 are added to carry these prefixes.