Control, Data, and Management Planes

Updated

September 4, 2026

Control, Data, and Management Planes

Separate how the network decides, how it forwards, and how you operate it. This split keeps troubleshooting honest from first lab to fabric design.

Learning goals

  • Define data, control, and management planes with examples
  • Classify failures into the right plane
  • Pick evidence (tables vs protocols vs access path) per plane
  • Connect planes to tools used in this book

Data plane

Forwards user and transit packets using programmed tables.

Examples Evidence
Ethernet FDB / MAC table bridge fdb, switch MAC table
IP FIB / routes used for forward ip route get, CEF/FIB show
ACL counters / nft hits Counters increment on matches
Queues / drops Interface drop stats

Failures: blackhole route, wrong next hop, MTU drop, ACL drop, congestion.

Control plane

Builds and maintains the information data plane uses.

Examples Evidence
ARP/ND ip neigh
OSPF/BGP adjacencies protocol show commands
MAC learning dynamic FDB entries
Route computation RIB entries, SPF/BGP path choice

Failures: adjacency down, authentication mismatch, policy filter, CPU overload, CoPP drops.

Management plane

How humans and automation configure and observe devices.

Examples Evidence
SSH, HTTPS API, NETCONF Reachability to mgmt VRF/IP
Telemetry, syslog, SNMP Streams arrive at collectors
Console / OOB Still works when in-band dies

Failures: ACL on vty, expired credentials, mgmt routing broken, “network down” that is only mgmt path down.

Management, control, and data planes

Planes

Interaction

Management  →  configures  →  Control
Control     →  programs    →  Data
Data        →  forwards       user packets

A BGP session (control) programs the FIB (data). You establish BGP over TCP (data plane for the control session—meta but real).

Troubleshooting order (habit)

  1. Management: Can I access the device?
  2. Data: Does ping/curl of interest work? What does ip route get say?
  3. Control: Are neighbors up? Are routes present in the RIB?
  4. Reconcile: RIB has route but FIB/policy drops?

Lab habit

When something fails, write one sentence: “I think this is a data / control / management plane fault because …; I will prove it with ….”

Checkpoint

SSH to a router fails, but the router still forwards traffic between two lab hosts. Which plane is most likely broken for you, and which is still working?

Next

Depth continues in Ethernet & MAC Learning. Host and Containerlab skills remain in Lab platform.