[c-nsp] SSH from inside a VRF in 12.2SRE

[Jeff Kell]

VRF-aware management functions are a pain... you want it everywhere,
except when you get it, e.g., recent "ip helper-address" suddenly
becoming vrf-aware caused us some major issues.  Accepting VRFs at the
COPP level (e.g., "vrf-also" on vty access lists) can screw you as well.

I can see the reluctance to just accept it everywhere, but we need to
move along :)  Yes, have suffered the ssh vs telnet restrictions as well.

Also still an issue with logging host destinations (and numerous others).

Jeff

On 10/21/2012 10:29 PM, Chuck Church wrote:
> Management protocols in a VRF.  Consistently inconsistent with Cisco it
> seems..
>
> Chuck
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Skeeve Stevens
> Sent: Sunday, October 21, 2012 9:19 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] SSH from inside a VRF in 12.2SRE
>
> Hey all,
>
> The /vrf switch exists in 12.2SRE for telnet, but not for SSH.
>
> Anyone know if there is a reason for this?  It exists in 12.4 I think.
>
> ...Skeeve
> *
>
> *
> *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve at eintellego.net ;
> www.eintellego.net
>
> Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve
>
> facebook.com/eintellego ;  <http://twitter.com/networkceoau>
> linkedin.com/in/skeeve
>
> twitter.com/networkceoau ; blog: www.network-ceo.net
>
> The Experts Who The Experts Call
> Juniper - Cisco - IBM - Cloud
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>