NSF OOB Routing
  

Newbie828757 Posted Feb-03-2025 14:52

Hi Guys, I configured NSF Sangfor NGFW  OOB Interface but has a routing issue. Is it possible to make an inband subinterface as a gateway for oob interface? we have a layer 2 connection between the mgmt interface and trunk interface on sangfor through  a physical switch.
mgmt interface IP: 192.168.1.230/24. vlan ID:2
Inband interface aggr.2.2 IP: 192.168.1.254/24 vlan ID:2
but it doesn't work! I can't access mgmt GUI outside of vlan2.
accidentally I found a temporary solution, when I ping an IP through CLI and set mgmgt interface as source everything goes fine!
#ping 1.1.1.1 interface eth0
ilham Lv2Posted Feb-06-2025 11:14
  
OOB and Inband should be different segmentation, your NSF Management port should connect to OOB Switch
it separate traffic beetwen Data & management. this is for best practice.
and if you want put together OOB interface and In band, you cant make it with vlan interface also know as SVI (Switch virtual Interface).