LTPS MPP operation

[pachuukuu1]

Hi,

How does MPP permit/deny logic work exactly? Lets say, I've configured something like this:

control plane

 management-plane

  inband

   interface Loopback 0

    allow SSH peer

     address 172.30.0.1

Will MPP accept only SSH management protocol via only interface loopback 0? Is there implicit deny rule? Should I add mgmt interfaces (like MgmtEth0/RSP0/CPU0/0) in out-of-band interfaces or they are available for connect anyway?

Thanks.

[Aleksandar Vidakovic]

yes, there is an implicit deny of control protocols on inband. If you run the "show lpts ifib brief" you will see what kind of control packets are allowed, on which interfaces and where are they punted. "sh lpts pifib hardware police location <location>" will show you the policers associated with each entry.

A good explanation of LPTS is available in BRKSPG-2904 from CiscoLive 2014.

regards,

Aleksandar