Enabling Management VRF

Procedure

Step1 Enable IP routing function before using VRF function.

set ip routing enable <true | false>

Step2 Enable management VRF.

set system management-vrf enable <true | false>

Step3 (Optional) Set static IP addresses for management interface eth0.

set system management-ethernet eth0 ip-address {IPv4 | IPv6} <ip_address>

NOTE:

If the static IP address is not assigned, the system will try to dynamically obtain the management port IP address from the DHCP server which is also the factory setting.

Step4 Set the gateway address for management interface eth0.

set system management-ethernet eth0 ip-gateway {IPv4 | IPv6}<ip_address>

Step5 Configure to run the management services in the management VRF.

When management VRF is enabled, the management services (including 802.1X / OVSDB management protocol / SNMP trap / sFlow / syslog / NTP / TACACS+/RADIUS) are still running in default VRF by default. If Eth0 is used for management services, the management services need to be moved into the management VRF manually by using relevant CLI commands.

set system syslog vrf <mgmt-vrf | default>

set system ntp vrf <mgmt-vrf | default>

set system aaa radius vrf <mgmt-vrf | default>

set system tacacs-plus radius vrf <mgmt-vrf | default>

set protocols snmp trap-group vrf <mgmt-vrf | default>

set protocols sflow collector <ip-address> vrf <mgmt-vrf | default>

set protocols dot1x aaa vrf <mgmt-vrf | default>

set protocols ovsdb controller <controller-name> vrf <mgmt-vrf | default>