Access via RSP mgmt eth interfaces

william jackson · ‎07-05-2013

Hi

I have created the following on a asr9k 4.3.1:

I connected both the RSP0 and RSP1's mgmt 0 Ethernet ports to a seperate L2 switch for Out of band management.

entered the following commands on the asr:

vrf MANRing

description Management network

!

interface MgmtEth0/RSP0/CPU0/0

vrf MANRing

ipv4 address 172.16.16.1 255.255.255.0

!

interface MgmtEth0/RSP1/CPU0/0

vrf MANRing

ipv4 address 172.16.16.2 255.255.255.0

!

ipv4 virtual address vrf MANRing 172.16.16.11 255.255.255.0

from a machine that is connected to the management switch I can ping all of the address successfully.

when I try to ssh to any of the IP's on the router. I always get a message:

"the remote system refused the connection"

my terminal lines have an access list controlling the access but the logging doesnt show anything.

I cant find out where I need to look to allow SSH?

Is this even possible inside a VRF?

thanks

william jackson · ‎07-05-2013

Ok I managed to realise what was the error:

web searching revealed that this is error message is because the SSH is not listening.

so....

I needed to also make sure that the ACL allowed access under the vty-pool and also enter the command:

ssh server vrf MANRing ipv4 access-list

and bingo.