vrf mgmtVrf help

itdaddy

hey guys,
my first time configuring a vrf mgmtVrf interface for out of band management. I do not understand. Before I port-channeled the uplinks ssh to the vrf mgmtVrf worked but once I port-channeled the new switch, access is gone? why is that ?? This switch is not connected to anything. I have a new Core + distro setup I am building and I put all 6 new switches with cat 6 on back of their ether management ports hoping to connect to them out of band and work on them but when I configured the port-channel on the 1st switch iti cut me off of the vrf mgmtVrf access? what happened?

d4nz1g

Could you explain your issue in a clearer way? Which boxes are you using? 6500?

Mitechniq

I am interested in further details as well....

Are you using the console port for OOB management? Normally I have a Terminal Access router to do OOB management, which needs no VRF configuration.

itdaddy

I have 6 switches stacked in 2s. so you have 1 core switch (2 switches) 4500x port channels 4 portchannel/uplinks to each distro stack of 3850s
imagine 4500x 2 switches stacked as core and on both sides you have 1 3850 stack of 2 distro switches and on the other 2 stack 3850 distro switches. each switch has a out of band management interface say fast1 that is a vrf MGMTVrf interface with and IP and each of their mgmt interface cat 6 cables is plugged into a access switch with proper access vlan. So i have have a distri + core + distri setup with 4 uplinks portchanneled to the core from the distri switches total 40 GB port channels. Once I port channel the switches any of them. I lose the vrf mgmtVrf access? I dont get it? This system is not even touching production. It is a new core distri setup. How can I lose the vrf mgmtVrf access when I configure port channels. .The funny thing is I can ping the interfaces from the access switch but cannot ssh anymore? confused?

itdaddy

I wish i had a terminal access router to access console. I am trying the out of band manage vrf port. It did work but when i port channelled the switch it cut off access?

itdaddy

yah think it is because i added a switchport trunk native vlan 987 command on the port channels?? which caused this ??/

itdaddy

I have 6 switches stacked in 2s. so you have 1 core switch (2 switches) 4500x port channels 4 portchannel/uplinks to each distro stack of 3850s
imagine 4500x 2 switches stacked as core and on both sides you have 1 3850 stack of 2 distro switches and on the other 2 stack 3850 distro switches. each switch has a out of band management interface say fast1 that is a vrf MGMTVrf interface with and IP and each of their mgmt interface cat 6 cables is plugged into a access switch with proper access vlan. So i have have a distri + core + distri setup with 4 uplinks portchanneled to the core from the distri switches total 40 GB port channels. Once I port channel the switches any of them. I lose the vrf mgmtVrf access? I dont get it? This system is not even touching production. It is a new core distri setup. How can I lose the vrf mgmtVrf access when I configure port channels. .The funny thing is I can ping the interfaces from the access switch but cannot ssh anymore? confused?

d4nz1g

Where are the mgmt interfaces connected? To the switch itself (like back 2 back)?

If so, there might be an issue with the mgmt vlan up to the distro/core.

Could you test from the same mgmt vlan, to exclude possible l3 issues?

itdaddy

d4nz1g

dude what a dummy I am ...i forgot the vrf mgmtVrf interface is in a seperate virtual routing table and i had to do this statement and it worked fine.

ip route vrf mgmtVrf 0.0.0.0 0.0.0.0 next-hope-gw

works perfect now...