Enabling Management VRF

Procedure

Step1 Enable IP routing function before using VRF function.

set ip routing enable <true | false>

Step2 Enable management VRF.

set system management-vrf enable <true | false>

Step3 (Optional) Set static IP addresses for management interface eth0.

set system management-ethernet eth0 ip-address {IPv4 | IPv6} <ip_address>

NOTE:

If the static IP address is not assigned, the system will try to dynamically obtain the management port IP address from the DHCP server which is also the factory setting.

Step4 Set the gateway address for management interface eth0.

set system management-ethernet eth0 ip-gateway {IPv4 | IPv6}<ip_address>

Step5 Configure to run the management services in the management VRF.

When management VRF is enabled, the management services (including 802.1X / OVSDB management protocol / SNMP trap / sFlow / syslog / NTP / TACACS+/RADIUS) are still running in default VRF by default. If Eth0 is used for management services, the management services need to be moved into the management VRF manually by using relevant CLI commands.

set system syslog vrf <mgmt-vrf | default>

set system ntp vrf <mgmt-vrf | default>

set system aaa radius vrf <mgmt-vrf | default>

set system tacacs-plus radius vrf <mgmt-vrf | default>

set protocols snmp trap-group vrf <mgmt-vrf | default>

set protocols sflow collector <ip-address> vrf <mgmt-vrf | default>

set protocols dot1x aaa vrf <mgmt-vrf | default>

set protocols ovsdb controller <controller-name> vrf <mgmt-vrf | default>

Step6 You can use the run show system management-ethernet eth0 command to view the information of the management interface.

Once management VRF is enabled, a VRF with fixed name mgmt-vrf is created automatically by the system, and the Eth0 management interface is automatically moved from the default VRF to the management VRF.

admin@Xorplus# run show system management-ethernet eth0
eth0	Hwaddr: e0:07:1b:c9:20:9a	State: UP
	Master: mgmt-vrf
	Gateway  : 10.10.51.1
	Inet addr: 
	           10.10.51.166/24
	           fe80::e207:1bff:fec9:209a/64
    Traffic statistics
	Input Packets......................4685
	Input Bytes........................305542
	Output Packets.....................109
	Output Bytes.......................8566