Brocade Fabric OS FCIP Administrator's Guide v7.1.0 (53-1002748-01, March 2013)

64 Fabric OS FCIP Administrator’s Guide
53-1002748-01
Inband management
3
route add 192.168.5.0 netmask 255.255.255.0 gw 192.168.3.250
2. Access the 7800 switches through the external inband management interfaces.
telnet 192.168.1.10
VLAN tagging support
To add VLAN tag entries to the VLAN tag table for inband management interfaces, use the --mgmt
or -m option with the portcfg vlantag command. Complete the following steps:
1. Configure an IP addresses and route for an Inband Management interface using the following
command format.
portcfg mgmtif [slot/]gePort [create|delete] ipAddress netmask mtu
2. Add the VLAN tag entry for the management interface using the following command format.
portcfg vlantag [slot/]gePort[add|delete] ipAddress vlan_id L2COS --mgmt
IP forwarding support
IP forwarding is supported over inband management to allow communication to the remote switch
through the WAN connection. This is done by enabling IP forwarding to allow IP packets arriving at
the CP interface to be forwarded through the inband management interface to the remote side. To
prevent network routing and actual bridging of the LAN side of the network to the WAN side of the
network, the ipfilter command’s forwarding rules will default to deny any forwarding traffic. To allow
forwarding, new ipfilter command rules must be added to specific destinations. This will prevent
any unintended network traffic from being forwarded from the LAN side to the WAN side of the
network. Refer to “Using ipfilter” on page 65.
Figure 17 shows an example network where the management station is located on the LAN side of
7800 L1. Using inband management, the station can also communicate with 7800 R1.
FIGURE 17 Inband management with IPv4 forwarding
Mgmt Station
10.1.1.1
7800 L1
10.1.1.10
7800 R1
10.1.2.20
192.168.3.10
192.168.3.20
VPN Access
192.168.3.0
Subnet