10.1.9 Allow VRF to log in from remote operation terminals [SL-L3A]

Using the line vty configuration command, you can enable login to the Switch from a remote operation terminal. Set the vrf parameter of the transport input configuration command to permit access from VRFs. If this vrf parameter is not set, only access from the global network is allowed.

The figure below shows how to permit remote access to this Switch from remote operation terminals on all VRFs including the global access via the Telnet protocol.

Figure 10-8: Example of allowing all VRF, including global networks, to log in from remote operation terminals
(config)# line vty 0 2 (config-line)# transport input vrf all telnet (config-line)#

The figure below shows how to permit remote access to this Switch from remote operation terminals on a specified VRF via the Telnet protocol. The global network is excluded.

Figure 10-9: Sample configuration to allow VRF 2 to log in from a remote operation terminal
(config)# line vty 0 2 (config-line)# transport input vrf 2 telnet (config-line)#

To permit access to the Switch from a remote operation terminal using FTP, you must set the ftp-server configuration command. To permit access from VRFs, set the vrf parameter. If this vrf parameter is not set, only access from the global network is allowed.

The figure below shows how to permit remote access to this Switch from remote operation terminals on all VRFs including the global access via FTP.

Figure 10-10: Example of allowing ftp access from remote operation terminals on all VRF, including global networks
(config)# ftp-server vrf all (config)#

The figure below shows how to permit remote access to this Switch from remote operation terminals on a specified VRF via FTP. The global network is excluded.

Figure 10-11: Protocol settings for permitting ftp access from a remote operation terminal in VRF 2
(config)# ftp-server vrf 2 (config)#