System information

12-191
Cisco SN 5428-2 Storage Router Software Configuration Guide
78-15471-01
Chapter 12 Command Line Interface Reference
interface ge? ip-address
In-band management is performed via a Telnet or Secure Shell (SSH) session, or via the web-based GUI.
Only one IP address per logical interface can be configured for in-band management. Telnet, SSH, HTTP
and SSL access is restricted, by default, on all Gigabit Ethernet interfaces. Use the no restrict CLI
command to allow access to the storage router using the desired protocol via the specified Gigabit
Ethernet interface.
If the secondary keyword is used, both Gigabit Ethernet interfaces must be connected to the same
network segment. If you configure a Gigabit Ethernet IP address with a secondary interface, all Gigabit
Ethernet IP addresses on the same subnet must also be configured with the same secondary interface.
If you are using the Gigabit Ethernet interface IP address in configuration of external servers, such as
RADIUS, TACACS+ or SNMP, that will access the storage router via this interface, reboot the storage
router after configuring the Gigabit Ethernet IP address and saving the change to the system bootable
configuration. This assures that the IP address is the first address associated with the specified interface.
Note The IP address used for management of the SN 5428-2 Storage Router cannot be used as a Gigabit
Ethernet IP address associated with a SCSI routing instance (serverif); the IP address must not already
be in use on the storage router.
Examples The following example configures the IP address 10.1.0.244/24 on ge1 for management of the storage
router, and enables the ge1 interface for Telnet access.
[SN5428-2B]# interface ge1 ip-address 10.1.0.244/24
[SN5428-2B]# no restrict ge1 telnet
The following example configures two IP addresses on unique logical interfaces for storage router
management. The IP address 10.1.0.160/255.255.255.128 is specified as part of VLAN 100 on ge2; the
IP address 10.1.0.168/255.255.255.128 is also on ge2 but is not part of a VLAN. The interface ge2 is
enabled for SSH access.
[SN5428-2B]# interface ge2 vlan 100 ip-address 10.1.0.160/255.255.255.128
[SN5428-2B]# interface ge2 ip-address 10.1.0.168/255.255.255.128
[SN5428-2B]# no restrict ge2 ssh
The following example configures the IP address 10.1.0.230/24 on ge2 for storage router management.
If the ge2 interface is unavailable, the ge1 interface will be used. Both ge1 and ge2 are enabled for HTTP
access.
[SN5428-2B]# interface ge2 ip-address 10.1.0.230/24 secondary ge1
[SN5428-2B]# no restrict ge2 http
[SN5428-2B]# no restrict ge1 http
The following example removes the IP address configured for storage router management from ge1, and
restricts SSL access to the interface:
[SN5428-2B]# no interface ge1 ip-address
[SN5428-2B]# restrict ge1 ssl
The following example configures the IP address 10.1.0.212/24 on ge2 for management of the storage
router, saves the changes to the bootable configuration, and then performs a fast reboot. This assures that
the IP address will be the first address associated with the ge2 interface, and allows the IP address to be
used by external servers (such as RADIUS or TACACS+) to communicate with the storage router.
[SN5428-2B]# interface ge2 ip-address 10.1.0.212/24
*[SN5428-2B]# save all bootconfig
[SN5428-2B]# reboot fast