The MPP feature in Cisco IOS software provides the capability to restrict the interfaces on which network management packets
are allowed to enter a device. The MPP feature allows a network operator to designate one or more router interfaces as management
interfaces. Device management traffic is permitted to enter a device through these management interfaces. After MPP is enabled,
no interfaces except designated management interfaces will accept network management traffic destined to the device. Restricting
management packets to designated interfaces provides greater control over management of a device.
The MPP feature is disabled by default. When you enable the feature, you must designate one or more interfaces as management
interfaces and configure the management protocols that will be allowed on those interfaces. The feature does not provide a
default management interface. Using a single CLI command, you can configure, modify, or delete a management interface.When
you configure a management interface, no interfaces except that management interface will accept network management packets
destined to the device. When the last configured interface is deleted, the feature turns itself off.
Following are the management protocols that the MPP feature supports. These management protocols are also the only protocols
affected when MPP is enabled.
Blocks Extensible Exchange Protocol (BEEP)
SSH, v1 and v2
SNMP, all versions
Cisco IOS features enabled on management interfaces remain available when the MPP feature is enabled. Nonmanagement packets
such as routing and Address Resolution Protocol (ARP) messages for in-band management interfaces are not affected.
This feature generates a syslog for the following events:
When the feature is enabled or disabled
When a management interface fails.
For example, a failure will occur when the management interface cannot successfully receive or process packets destined for
the control plane for reasons other than resource exhaustion.