Hi Hobbit,
The system separates the traffic of the service plane and management port by default. That is, unauthorized users cannot access the device through service interfaces and attackers cannot attack the management network through the service network.
Run the
management-plane isolate disable command to disable traffic isolation between the service plane and management port.