I am trying to configure a router with couple VRF and I need to be able to ssh/telnet to vty through VRF interface. I haven't had this problem with other routers prior to 15.0M. Am I missing a command I don't know about to enable this?
With 12.4x, I used "access-class .... vrf-also" and that seems to have done it. The router I am working with is a 1941 with 15.0(1)M3 I don't have any firewall or anything else that could prevent logging in (That I can see) I can login through the interface on the global table, trying to get on the VRF interface gets me connection refused Here is the redacted config version 15.0 no ip source-route ip cef ! ! ip vrf Inside rd 64512:3 import map VRFDefaultMap route-target export 64512:3 route-target import 64512:2 ! ip vrf Outside rd 64512:2 route-target export 64512:2 route-target import 64512:3 ! ! ! interface GigabitEthernet0/0 ip address x.x.x.1 255.255.255.248 ip nat outside ip virtual-reassembly duplex auto speed auto ! ! interface GigabitEthernet0/1 ip vrf forwarding Inside ip address 172.17.0.1 255.255.252.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0/0 ip vrf forwarding Outside ip address y.y.y.2 255.255.255.248 ip nat outside ip virtual-reassembly no clock rate 2000000 ! ! router bgp 64512 no synchronization bgp log-neighbor-changes no auto-summary ! address-family ipv4 vrf Inside no synchronization redistribute connected redistribute static exit-address-family ! address-family ipv4 vrf Outside no synchronization redistribute connected redistribute static default-information originate exit-address-family ! ip route 0.0.0.0 0.0.0.0 x.x.x.1 ip route vrf Outside 0.0.0.0 0.0.0.0 y.y.y.1 ! ! ip prefix-list DefaultOnly seq 5 permit 0.0.0.0/0 ! route-map VRFDefaultMap permit 10 match ip address prefix-list DefaultOnly line vty 0 4 access-class MgmntACL in vrf-also exec-timeout 120 0 privilege level 15 password 7 **** login local transport input telnet ssh line vty 5 15 access-class MgmntACL in vrf-also exec-timeout 120 0 privilege level 15 password 7 **** login local transport input telnet ssh _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
