CLI access

You can access the CLI by connecting to the console port, or by using SSH to connect to the switch either in band or out of band:

Console port (out-of-band connection)

Out-of-band by directly connecting to the console port of the active management module on the switch.

Management port (out-of-band connection)

Out-of-band by using SSH to connect to the switch through the switch management interface configured on the management VRF (Virtual Routing and Forwarding instance).

The management port and SSH on the management VRF (mgmt) are enabled in the switch factory default state for software version 10.02 and higher and disabled in software version 10.01 and lower. By connecting the management port of the active management module to the network and configuring the management interface, you can use SSH client software to establish one or more out-of-band connections to the management interface.

SSH through a line module port (in-band connection)

In-band by using SSH to connect to the switch on a VRF that is not the management VRF. Management traffic ingresses and egresses ports on the line modules and shares the data plane with the rest of the traffic on the network.

Traffic congestion and other issues affecting the network at large have a higher probability of impacting in-band management connections than out-of-band management connections.