Mangement interface g0/0 isolation

[M.Sultan]

Hello guys-

I have a perimeter c9300 24p switch- it has a management interface g0/0 at back panel its assigned to mgmt-vrf.

I want to remove the int g0/0 from mgmt-VRF and assign it to a specific vlan- because its the perimeter switch connected to ISP i want to isolate management interface from the rest of the traffic.

what solution could be possible ?

Regards

[marce1000 · Accepted solution]

 - No need to because that is already established by gi0/0 being allocated to a separate mgmt-VRF ; (traffic is isolated per default)

 M.

[balaji.bandi · Accepted solution]

Gig0/0 is specifically used for Managment purpose, you can not use this interface for Data traffc.

Interface GigabitEthernet0/0
description XXXXXXXX Management VLANxxxxx
vrf forwarding Mgmt-vrf
ip address x.x.x.x  255.255.255.0   ( you can connect to different OOB switch with VLAN)
negotiation auto
end

more information can be find here :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-10/configuration_guide/int_hw/b_1610_int_and_hw_9300_cg/configuring_ethernet_management_port.html