OOBM from C2960 to C9300

[M.Sultan]

Hello guys,

i want to enable ssh on management port of C2960 and connect that port to gig 1/0/10 core switch,

C2960 MGMT-VRF interface

#interface gig0/0
#no shut
#vrf forwarding mgmt-vrf
#ip address 192.168.10.10 255.255.255.0
#ip route 0.0.0.0 0.0.0.0 192.168.10.1 (Core IP SVI)

------------------SSH----------------------------

#hostname SW-C2960
#ip domain-name test.com
#crypto key generate rsa 2048
#ip ssh version 2
#line vty 0 4
#transport input ssh
#login local
#username admin password test123

---------------------------------------------

I think do not need to define vlan on the management int as long as its on L3, do i need to put the core interface gig1/0/10 access mode or trunk or what ? i need a bit clear configuration command and idea.

Thank you.

[marce1000]

            >... do i need to put the core interface gig1/0/10 access mode or trunk or what ? 
                                  - Access mode will be sufficient ,

 M.

[M.Sultan]

and #switchport access vlan 90/mgmt ?

[marce1000]

 - Depends what the vlan  number is on the core , for accessing the mgmt port of these devices ,

 M.

[M.Sultan]

#vlan 850
#name mgmt
#exit

#interface vlan 850
#no shut
#ip add 192.168.240.1/24
#exit

Now from C2960 MGMT Interface is connected to CORE interface gig 1/0/10.

what configuration is needed on core interfa

[balaji.bandi · Accepted solution]

Cat 9300 is your core and ort connected to interface gig1/0/10 - then this should be access VLAN for MGMT where the VLAN has same IP as gateway 192.168.10.1

You also need to mentioned source as mgmt-vrf for this to work.

Also your VRF routing - 

ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 192.168.10.1

[M.Sultan]

so the interface gig1/0/10 on the core should have this config ?

#int gig1/0/10

#switchport access vlan 850 (MGMT SVI VLAN)

#exit

? or what ?

[balaji.bandi · Accepted solution]

correct -

interface gig 1/0/10

switchport mode access

switchport access vlan 850.

no shutdown.

you should able to ping 192.168.10.10 using SVI VLAN 850 

[M.Sultan]

Right Thanks. if i connect it to an ACCESS switch rather CORE so what will the port config on Access switch please ?

[balaji.bandi]

Depends on requirement inbound or outoff band management.

Inland you can use VLAN SVI and configure IP. (if you already have connection to Access switch that is connected to Core using Layer2 or port-channel connection.)

out of band you already have configuration which you posted in the OP

inband :

vlan 850

name MGMT

interface  vlan 850
ip address 192.168.10.10 255.255.255.0
ip route 0.0.0.0 0.0.0.0 192.168.10.1  (if the switch acting as Layer 3) if layer 2 you can have default-gateway command.

(make sure VLAN 850 allowed in the trunk)

CORE--(layer 2 trunk)--Access--(Layer2 Trunk)-Another  access switch (which you looking to configuration)