Configuring Service-Port Interfaces

Service-Port Interfaces

The service-port interface controls communications through and is statically mapped by the system to the service port. The service port can be used for out-of-band management.

The service port can obtain an IPv4 address using DHCP, or it can be assigned a static IPv4 address, but a default gateway cannot be assigned to the service-port interface. Static IPv4 routes can be defined through the controller for remote network access to the service port.

If the service port is in use, the management interface must be on a different supernet from the service-port interface.

Similarly, the service port can be statically assigned an IPv6 address or select an IPv6 address using Stateless Address Auto-Configuration (SLAAC). The default gateway cannot be assigned to the service-port interface. Static IPv6 routes can be defined through the controller for remote network access to the service port.


Note
This is the only SLAAC interface on the controller, all other interfaces must be statically assigned (just like for IPv4).

Note
User does not require IPv6 static routes to reach service port from the same network, but IPv6 routes requires to access service port from different network. The IPv6 static routes should be as same as IPv4.

The service-port interface supports the following protocols:

  • SSH and Telnet

  • HTTP and HTTPS

  • SNMP

  • FTP, TFTP, and SFTP

  • Syslog

  • ICMP (ping)

  • NTP


Note

TACACS+ and RADIUS are not supported through the service port.

This section contains the following subsections:

Restrictions on Configuring Service-Port Interfaces

  • Only Cisco Flex 7510 and Cisco 5508 WLCs have a physical service-port interface that is reachable from the external network.

  • You must not use the service-port for continuous SNMP polling and management functions except when the management interface of the controller is unreachable.

Configuring Service-Port Interfaces Using IPv4 (GUI)

Procedure

Step 1

Choose Controller > Interfaces to open the Interfaces page.

Step 2

Click the service-port link to open the Interfaces > Edit page.

Step 3

Enter the Service-Port Interface parameters:

Note 
The service-port interface uses the controller’s factory-set service-port MAC address.

  • DHCP protocol (enabled)

  • DHCP protocol (disabled) and IP address and IP netmask

Step 4

Click Save Configuration to save your changes.

Step 5

If you made any changes to the management or virtual interface, reboot the controller so that your changes take effect.

Configuring Service-Port Interfaces Using IPv4 (CLI)

Procedure

Step 1

To view the current service-port interface settings, enter this command:

show interface detailed service-port
Note 

The service-port interface uses the controller’s factory-set service-port MAC address.

Step 2

Enter these commands to define the service-port interface:

  • To configure the DHCP server, enter this command:

    config interface dhcp service-port enable

  • To disable the DHCP server, enter this command:

    config interface dhcp service-port disable

  • To configure the IPv4 address, enter this command:

    config interface address service-port ip-addr ip-netmask

The service port is used for out-of-band management of the controller. If the management workstation is in a remote subnet, you may need to add a IPv4 route on the controller in order to manage the controller from that remote workstation. To do so, enter this command:

config route add network-ip-addr ip-netmask gateway

To remove the IPv4 route on the controller, enter this command:

config route delete ip_address

Caution 

Communication through the management interface might not work as expected if subnet that is added to static route overlaps with other infrastructure or devices.

Step 3

Enter the save config command to save your changes.

Step 4

Enter the show interface detailed service-port command to verify that your changes have been saved.

Configuring Service-Port Interface Using IPv6 (GUI)

Procedure

Step 1

Choose Controller > Interfaces to open the Interfaces page.

Step 2

Click the service-port link to open the Interfaces > Edit page.

Step 3

Enter the Service-Port Interface parameters:

Note 
The service-port interface uses the controller’s factory-set service-port MAC address. Service Port can be statically assigned an address or select an address using SLAAC.

  • SLACC(enabled)

  • SLACC (disabled) and Primary Address and Prefix Length

Step 4

Click Save Configuration to save your changes.

Step 5

If you made any changes to the management or virtual interface, reboot the controller so that your changes take effect.

Configuring Service-Port Interfaces Using IPv6 (CLI)

Procedure

Step 1

To view the current service-port interface settings, enter this command:

show interface detailed service-port
Note 

The service-port interface uses the controller’s factory-set service-port MAC address.

Step 2

Enter these commands to define the service-port interface:

  • To configure the service port using SLACC , enter this command:

    config ipv6 interface slacc service-port enable

  • To disable the service port from using SLACC, enter this command:

    config ipv6 interface slacc service-port disable

  • To configure the IPv6 address, enter this command:

    config ipv6 interface address service-port iipv6_address prefix-length

Step 3

The service port is used for out-of-band management of the controller. If the management workstation is in a remote subnet, you may need to add a route on the controller in order to manage the controller from that remote workstation. To do so, enter this command:

config ipv6 route add network_ipv6_addr prefix-len ipv6_gw_addr

Step 4

To remove the IPv6 route on the controller, enter this command:

config ipv6 route delete network _ipv6 addr

Step 5

Enter the save config command to save your changes.

Step 6

Enter the show interface detailed service-port command to verify that your changes have been saved.