topic Management port question in General Topics

Management port question

jsachs — Sat, 21 Feb 2015 06:21:32 GMT

Why a separate management port if I can also logon from the trusted port? Is there a setting so I can prevent anyone from logging in via the trusted port so that they must use the Management port? Does the MP offer some special settings not available on the other ports?

Re: Management port question

bat — Sat, 21 Feb 2015 06:45:20 GMT

Dataplane can be down in some situations that is the reason there is a segregation between dataplane and management plane so even during high traffic you can easily access the device through management plane.

You can disable services under management-profile applied to that interface to restrict access ( or not use a management-profile at all)

Re: Management port question

jsachs — Sat, 21 Feb 2015 06:59:32 GMT

Excellent response and explanation. Thank you

Re: Management port question

HULK — Sat, 21 Feb 2015 07:05:04 GMT

add to it ++

Once you will configure HA ( High Availability) active/passive setup, then data-plane interfaces will be not accessible. In that situation, you can only access the management port to manage the Passive FW and also to download/install dynamic-updates.

Thanks