Splitting DTI and management traffic using the CLI

Use the commands in this section to split DTI and management traffic. The following topologies are supported:

Central Management System appliance and managed appliance in same subnet

To configure split traffic when the devices are in the same subnet:

Go to CLI configuration mode:

cm-hostname > enable
cm-hostname # configure terminal

Enable the interface that should have Internet access for DTI traffic:
```
cm-hostname (config) # no interface <interface> shutdown 
```
where <interface> is the name of the interface (for example, ether4).
Configure the interface for DTI traffic:
```
cm-hostname (config) # interface <interface> ip address <ipAddress> <mask>
```
where <interface> is the interface name, <ipAddress> is the interface IP address, and <mask> is the network mask. The network mask can be specified in a dotted decimal format (such as 255.255.255.0) or in a mask length format (such as /24).

Remove the existing default gateway route:

cm-hostname (config) # no ip default-gateway

Configure the default gateway to the interface for DTI traffic:
```
cm-hostname (config) # ip default-gateway <ipAddress> <interface> 
```
where <ipAddress> is the IP address and <interface> is the name of the interface for DTI traffic.

Verify the default gateway configuration:

cm-hostname (config) # show ip default-gateway

Verify the IP route:
```
cm-hostname (config) # show ip route
```
Save your changes:
```
cm-hostname (config) # write memory
```

Example

In this example, the current settings are shown, DTI traffic is configured to go through the ether4 interface, and the configuration is verified.

cm-hostname (config) # show ip default-gateway
Active default gateways:
   172.16.1.1 (interface: ether1)
cm-hostname (config) # show ip route
Destination     Mask              Gateway          Interface      Source
default         0.0.0.0           172.16.1.1       ether1         static
172.16.0.0      255.240.0.0       0.0.0.0          ether1         interface

cm-hostname (config) # no interface ether4 shutdown
cm-hostname (config) # interface ether4 ip address 10.13.66.12 255.255.255.0
cm-hostname (config) # no ip default-gateway
cm-hostname (config) # ip default-gateway 10.13.66.1 ether4

cm-hostname (config) # show ip default-gateway
Active default gateways:
   10.13.66.1 (interface: ether4)
cm-hostname (config) # show ip route
Destination     Mask              Gateway          Interface      Source
default         0.0.0.0           10.13.66.1       ether4         static
10.13.66.1      255.255.255.0     0.0.0.0          ether4         interface
172.16.0.0      255.240.0.0       0.0.0.0          ether1         interface

Central Management System appliance and managed appliance in different subnets

When the Central Management System appliance and the managed appliance are in different subnets, there is an additional step to configure a static route for the managed appliance to connect to the Central Management System appliance.

To configure split traffic when the devices are in different subnets:

Go to CLI configuration mode:

cm-hostname > enable
cm-hostname # configure terminal

Enable the interface that should have Internet access for DTI traffic:
```
cm-hostname (config) # no interface <interface> shutdown
```
where <interface> is the name of the interface (for example, ether4).
Configure the IP address and netmask of the interface for DTI traffic:
```
cm-hostname (config) # interface <interface> ip address <ipAddress> <mask>
```
where <interface> is the name of the interface, <ipAddress> is the IP address of that interface, and <mask> is the network mask. The network mask can be specified in a dotted decimal format (such as 255.255.255.0) or in a mask length format (such as /24).

Remove the static default gateway:

cm-hostname (config) # no ip default-gateway

Reconfigure the default gateway to the interface for DTI traffic:
```
cm-hostname (config) # ip default-gateway <ipAddress> <mask>
```
where <ipAddress> is the IP address and <interface> is the name of the interface for DTI traffic.
Add a static route for the Central Management System platform to send management traffic to the managed appliance over the ether1 interface:
```
cm-hostname (config) # ip route <ipAddress> <mask> ether1
```
where <ipAddress> is an IP address in the same subnet as the managed appliance and <mask> is the network mask.

Verify the default gateway configuration:

cm-hostname (config) # show ip default-gateway

Verify the IP route:
```
cm-hostname (config) # show ip route
```
Save your changes:
```
cm-hostname (config) # write memory
```

Example

In this example, the current settings are shown, DTI traffic is configured to go through the ether4 interface, a new static route is configured for management traffic, and then the configuration is verified.

cm-hostname (config) # show ip default-gateway
Active default gateways:
   172.16.1.1 (interface: ether1)
cm-hostname (config) # show ip route
Destination     Mask              Gateway          Interface      Source
default         0.0.0.0           172.16.1.1       ether1         static
172.16.0.0      255.240.0.0       0.0.0.0          ether1         interface

cm-hostname (config) # no interface ether4 shutdown
cm-hostname (config) # interface ether4 ip address 10.13.66.12 255.255.255.0
cm-hostname (config) # no ip default-gateway
cm-hostname (config) # ip default-gateway 10.13.66.1 ether4
cm-hostname (config) # ip route 172.17.74.0 255.255.255.0 ether1

cm-hostname (config) # show ip default-gateway
Active default gateways:
   10.13.66.1 (interface: ether4)
cm-hostname (config) # show ip route
Destination     Mask              Gateway          Interface      Source
default         0.0.0.0           10.13.66.1       ether4         static
10.13.66.1      255.255.255.0     0.0.0.0          ether4         interface
172.16.0.0      255.240.0.0       0.0.0.0          ether1         interface
172.17.74.0     255.255.255.0     0.0.0.0          ether1         static