In-band management

You can use the following command to add an in-band management IP address to an individual cluster unit interface that is also connected to a network and processing traffic. The in-band management IP address is an alternative to the reserved HA management interface feature and does not require reserving an interface just for management access.

config system interface

edit port1

set management-ip 172.20.121.155/24

end

The management IP address is accessible from the network that the cluster interface is connected to. This setting is not synchronized so each cluster unit can have their own in-band management IP addresses. You can add a management IP address to one or more interfaces of each cluster unit.

The in-band management IP address should be on the same subnet as the interface you are adding it to, but cannot be on the same subnet as other interface IP addresses.

You can connect to the in-band management IP address using the interface's administrative access settings. The in-band management IP only supports the following subset of administrative access settings: ping, Telnet, HTTP, HTTPS, and SNMP.

For example, use the following command to add an in-band management IP address and allow access using HTTPS, SSH and SNMP:

config system interface

edit port23

set management-ip 172.25.12.5/24

set allowaccess https ssh snmp

end

How packets are sent differs between primary and secondary units when sending packets from an interface with management-ip configured. For a primary unit, an interface with management-ip configured can send packets to destinations based on routing information. For a secondary unit, an interface with management-ip configured can only send packets to destinations that have the same management-ip segment.