Use of access-class 20 in vrf-also

[mahesh18]

Hi Everyone,

Need to  know the reason of command

access-class 20 in vrf-also  under  line vty 0 4.

line vty 0 4

access-class 20 in vrf-also

I checked current device it has  no VRF  config.

Only  config i found is  on 4500 is

ip vrf mgmtVrf

interface FastEthernet1

ip vrf forwarding mgmtVrf

But this Management interface Fa1  is shutdown.

Do we need access-class 20 in vrf-also under this setup?

Regards

Mahesh

[Reza Sharifi · Accepted solution]

Hi Mahesh,

That access list is there so you can limit access coming from a specific vrf.  In this case it is the management vrf.  If interface fa1 is shut, there is no vrf and everything is in global routing table, then you don't need that access list.

HTH

Reza

[mahesh18]

Hi Reza,

Many thanks again for confirming my thoughts.

Best regards

MAhesh