V-283829

Discussion

Using dedicated paths, the OOBM backbone connects the OOBM gateway routers located at the edge of the managed network and at the NOC. Dedicated links can be deployed using provisioned circuits or MPLS layer 2 and layer 3 VPN services or implementing a secured path with gateway-to-gateway IPsec tunnels. The tunnel mode ensures the management traffic will be logically separated from any other traffic traversing the same path.

Check Content

This requirement is not applicable for the DODIN Backbone.

Review the network topology diagram to determine connectivity between the managed network and the NOC.

Review the OOBM gateway router configuration to validate the path and interface that the management traffic traverses.

Verify that only the routes and interfaces belonging to the management VPRN are present, as shown in the example below: 

- show router 30 route-table

Route Table (Service: 30)

Dest Prefix[Flags]                            Type    Proto     Age        Pref
      Next Hop[Interface Name]                                    Metric
-------------------------------------------------------------------------------
172.150.x.0/30                              Remote  BGP VPN   00h00m50s  170
       4.4.4.x (tunneled:RSVP:1)                                    30
172.200.x.0/30                              Local   Local     00h00m54s  0
       management-network                                                     0
-------------------------------------------------------------------------------
No. of Routes: 2

- show router 30 interface

Interface Table (Service: 30)

Interface-Name                   Adm       Opr(v4/v6)  Mode    Port/SapId
   IP-Address                                                  PfxState
-------------------------------------------------------------------------------
"management-network"                         Up        Up/Down     VPRN    1/1/c3/1
   172.200.x.x/30                                            n/a
-------------------------------------------------------------------------------
Interfaces : 1

If management traffic is not transported between the managed network and the NOC via dedicated circuit, MPLS/VPN service, or IPsec tunnel, this is a finding.