In this section:
This object allows you to configure a group of management IP interfaces for the default address context. Key Management Interface functionality: The VLAN interfaces on management ports follow the same redundancy model as the existing untagged management port interfaces. The management interface can have one IPv4 address and/or one IPv6 address. Unlike a packet port, the management port supports both non-VLAN and VLAN interfaces on the same management port.
Command Syntax
% set system mgmtIpInterfaceGroup <mgmtIpIntfceGrp_name> mgmtIpInterface <IP_Intfce_name> ceName <ceName> ipAddressV4 <IPv4_address> ipAddressV6 <IPv6_address> portName <mgt0 | mgt1 | mgt2 | mgt3> prefixV4 <prefix> prefixV6 <prefix> state <disabled | enabled> vlanTag <2-4094>
For management interface groups (and interfaces), the default address context is implied, and therefore the address context is not specified.
Note
If the management IP is changed and the box is not accessible, use the following workaround steps to restore the old IP used during SSH:
- Log on to the BMC.
- Navigate to the CLI mode.
- Change the IP to the old management IP used during SSH.
The management IP used during SSH is restored.
% show system mgmtIpInterfaceGroup <mgmtIpIntfceGrp_name> mgmtIpInterface <IP_Intfce_name> % delete system mgmtIpInterfaceGroup <mgmtIpIntfceGrp_name> mgmtIpInterface <mgmt_interface_#> ipAddressV4 ipAddressV6 prefixV4 prefixV6 vlanTag
The above delete command allows the deletion of an IPv4 address and prefix on the management interface only if:
- the state is set to 'disabled', and
- an IPv6 address exists.
Command Parameters
Management IP Interface Group Parameters
Parameter | Length/Range | Description |
|---|---|---|
| 1-23 | IP Interface Group name. |
| 1-23 | Management IP interface name. |
| 1-255 | Name of the computing element that hosts the port used by management IP interface. ceName identifies each node (active or standby). System name identifies the HA pair. SBC is deployed in 1:1 redundancy (active or standby).
|
| 0-32 | IPv4 address of the interface. |
| 0-128 | IPv6 address of the interface. Duplicate Address Detection procedures are performed on interfaces configured with IPv6 addresses. If a duplicate address is found in the network, a warning message is output to Linux logs at /var/log/syslog and /var/log/messages. Example message:
|
| N/A | Port used by management IP interface (either two or four mgmt ports are available depending upon if SBC is configured for HA).
|
| 0-32 | IPv4 subnet prefix of management interface. |
| 0-128 | IPv6 subnet prefix of management interface. |
| N/A | Administrative state of the management network interface.
|
vlanTag | 2-4094, arbitrary |
NOTE: Use a default value of "0" for a non-VLAN management interface. |
Command Example
To display management IP interfaces:
% show system mgmtIpInterfaceGroup
mgmtIpInterfaceGroup mgmtGroup {
mgmtIpInterface mgmtIntf1 {
ceName merc;
portName mgt0;
ipAddressV4 10.34.26.151;
prefixV4 3;
ipAddressV6 ::FFFF:10.34.26.151;
prefixV6 64; state enabled;
}
mgmtIpInterface mgmtIntf2 {
ceName merc;
portName mgt1;
ipAddressV4 0.0.0.0; prefixV4 24;
ipAddressV6 ::FFFF:0.0.0.0;
prefixV6 64;
state enabled;
}
}
To create management interfaces on two subnets in SBC HA setup:
Step 1: Add mgmtIntf2 and mgmtIntf4 to newly created mgmtGroup1
% set system mgmtIpInterfaceGroup mgmtGroup mgmtIpInterface mgmtIntf2 state disabled
% commit
% delete system mgmtIpInterfaceGroup mgmtGroup mgmtIpInterface mgmtIntf2
% commit
% set system mgmtIpInterfaceGroup mgmtGroup1
% commit
% set system mgmtIpInterfaceGroup mgmtGroup1 mgmtIpInterface
mgmtIntf2 ceName hayabusa portName mgt1 ipAddressV4
10.54.67.47 prefixV4 24 ipAddressV6 ::FFFF:10.54.67.47
prefixV6 64
% commit
% set system mgmtIpInterfaceGroup mgmtGroup1 mgmtIpInterface
mgmtIntf2 state enabled
% commit
% set system mgmtIpInterfaceGroup mgmtGroup mgmtIpInterface mgmtIntf4 state disabled
% commit
% delete system mgmtIpInterfaceGroup mgmtGroup
mgmtIpInterface mgmtIntf4
% commit
% set system mgmtIpInterfaceGroup mgmtGroup1 mgmtIpInterface
mgmtIntf4 ceName augusta portName mgt1 ipAddressV4
10.54.67.48 prefixV4 24 ipAddressV6 ::FFFF:10.54.67.48
prefixV6 64
% commit
% set system mgmtIpInterfaceGroup mgmtGroup1 mgmtIpInterface
mgmtIntf4 state enabled
% commit
% show system mgmtIpInterfaceGroup mgmtIpInterfaceGroup
mgmtGroup
{ mgmtIpInterface mgmtIntf1 {
ceName hayabusa;
portName mgt0;
ipAddressV4 10.54.66.50;
prefixV4 24;
ipAddressV6 ::FFFF:10.54.66.50;
prefixV6 64;
state enabled;
}
mgmtIpInterface mgmtIntf3 {
ceName augusta;
portName mgt0;
ipAddressV4 10.54.66.59;
prefixV4 24;
ipAddressV6 ::FFFF:10.54.66.59;
prefixV6 64;
state enabled;
}
}
mgmtIpInterfaceGroup mgmtGroup1 {
mgmtIpInterface mgmtIntf2 {
ceName hayabusa;
portName mgt1;
ipAddressV4 10.54.67.47;
prefixV4 24;
ipAddressV6 ::FFFF:10.54.67.47;
prefixV6 64;
state enabled;
}
mgmtIpInterface mgmtIntf4 {
ceName augusta;
portName mgt1;
ipAddressV4 10.54.67.48;
prefixV4 24;
ipAddressV6 ::FFFF:10.54.67.48;
prefixV6 64;
state enabled;
}
}
Step 2: Add static routes referencing the management interface:
% set system mgmtStaticRoute 0.0.0.0 0 10.54.66.1 mgmtGroup mgmtIntf1 preference 10 % set system mgmtStaticRoute 0.0.0.0 0 10.54.66.1 mgmtGroup mgmtIntf3 preference 10 % set system mgmtStaticRoute 0.0.0.0 0 10.54.67.1 mgmtGroup1 mgmtIntf2 preference 10 % set system mgmtStaticRoute 0.0.0.0 0 10.54.67.1 mgmtGroup1 mgmtIntf4 preference 10 % show table system mgmtStaticRoute IP IP DESTINATION INTERFACE INTERFACE IP ADDRESS PREFIX NEXT HOP GROUP NAME NAME PREFERENCE -------------------------------------------------------- ------------ 0.0.0.0 0 10.54.66.1 mgmtGroup mgmtIntf1 10 0.0.0.0 0 10.54.66.1 mgmtGroup mgmtIntf3 10 0.0.0.0 0 10.54.67.1 mgmtGroup1 mgmtIntf2 10 0.0.0.0 0 10.54.67.1 mgmtGroup1 mgmtIntf4 10
Step 3: Add ACL rules on mgmtGroup1:
% show table addressContext default ipAccessControlList rule SOURCE DESTINATION IP MGMT IP ADDRESS ADDRESS INTERFACE IP INTERFACE MGMT IP SOURCE IP PREFIX DESTINATION PREFIX SOURCE DESTINATION BUCKE NAME PRECEDENCE PROTOCOL GROUP INTERFACE GROUP INTERFACE ADDRESS LENGTH IP ADDRESS LENGTH PORT PORT ACTION FILL RATE SIZE mgmt2_22 200 tcp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 any 22 accept 100 10 mgmt2_80 201 tcp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 any 80 accept 100 10 mgmt4_22 300 tcp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 any 22 accept 100 10 mgmt4_80 301 tcp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 any 80 accept 100 10 mgmt2_123 103 udp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 123 any accept 4 4 mgmt2_161 202 udp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 any 161 accept 50 10 mgmt2_162 104 udp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 162 any accept 10 10 mgmt2_443 208 tcp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 any 443 accept 100 10 mgmt4_123 303 udp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 123 any accept 4 4 mgmt4_161 302 udp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 any 161 accept 50 10 mgmt4_162 304 udp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 162 any accept 10 10 mgmt4_443 308 tcp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 any 443 accept 100 10 mgmt2_1812 105 udp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 1812 any accept 4 4 mgmt2_1813 110 udp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 1813 any accept 1200 250 mgmt2_2022 206 tcp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 any 2022 accept 10 10 mgmt2_2024 209 tcp - - mgmtGroup1 mgmtIntf2 0.0.0.0 0 0.0.0.0 0 any 2024 accept 2500 250 mgmt4_1812 305 udp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 1812 any accept 4 4 mgmt4_1813 310 udp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 1813 any accept 1200 250 mgmt4_2022 306 tcp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 any 2022 accept 10 10 mgmt4_2024 309 tcp - - mgmtGroup1 mgmtIntf4 0.0.0.0 0 0.0.0.0 0 any 2024 accept 2500 250
Step 4: Create two logical management IP interfaces one for each subnet:
% set system logicalMgmtIpInterface mgmtGroup1 ipAddress
10.54.67.50
% commit
% set system logicalMgmtIpInterface AGMGM
mgmtIpInterfaceGroupName mgmtGroup1 state enabled
% commit
% set system logicalMgmtIpInterface mgmtGroup ipAddress
10.54.66.65
% commit
% set system logicalMgmtIpInterface HAMGM
mgmtIpInterfaceGroupName mgmtGroup state enabled
% commit
% show system logicalMgmtIpInterface logicalMgmtIpInterface
AGMGM {
mgmtIpInterfaceGroupName mgmtGroup1;
ipAddress 10.54.67.50;
state enabled;
}
logicalMgmtIpInterface HAMGM {
mgmtIpInterfaceGroupName mgmtGroup;
ipAddress 10.54.66.65;
state enabled; }
If one management port goes down the other logical management IP interface on the other subnet must be used. A two-subnet configuration is a more robust network design.
Overview
Content Tools