set system management-vrf enable

The set system management-vrf enable command is used to enable or disable management VRF.

Command Syntax

set system management-vrf enable <true | false>

Parameter

Parameter

Description

enable <true | false>

Enables or disables management VRF. The value could be true or false.

true: enables management VRF.
false: disables management VRF.

By default, management VRF is disabled.

Usage Guidelines

By default, PICOS starts up with only default VRF, management VRF function is disabled. To enhance the security of the management network, and prevent attacks by illegal users, users can use this command to enable management VRF. Once management VRF is enabled, a VRF with fixed name mgmt-vrf is created by the system, Eth0 management interface is automatically moved from the default VRF to the management VRF.

Management VRF is dedicated to transmit the management traffic. Other VRFs are used to transmit the data traffic, thus separating the management traffic from the data traffic effectively.

Example

Enable management VRF.

admin@Xorplus# set system management-vrf enable true
admin@Xorplus# commit