HP ProCurve Series 2810 Management And Configuration Manual page 53

• Switches "A", "B", and
"C" are connected by
ports belonging to the
management VLAN.
• Hub "X" is connected
to a switch port that
belongs to the
management VLAN. As
a result, the devices
connected to Hub X are
included in the
management VLAN.
• Other devices
connected to the
switches through ports
that are not in the
management VLAN are
excluded from
management traffic.
Figure 2-22. Example of Potential Security Breaches
Links with Ports
Configured as Members of
the Management VLAN
and other VLANs
Links Not Belonging to the
Management VLAN
System
Management
Workstation
Switch A
Hub Y
Links with Ports Belonging to the Management VLAN and other VLANs
Links Between Ports on a Hub and Ports belonging to the Management VLAN
Links Not Belonging to the Management VLAN
Links to Other Devices
In figure 2-23, Workstation 1 has management access to all three switches
through the Management VLAN, while the PCs do not. This is because config-
uring a switch to recognize a Management VLAN automatically excludes
attempts to send management traffic from any other VLAN.
Switch
A
Port A1
Port A3
Port A6
Port A7
1
Shipping
2
Port-Based Virtual LANs (Static VLANs)
Hub X
Management Workstations
Switch
Switch
B
Port B2
Port C2
Port B4
Port C3
Port B5
Port C6
Port B9
Port C8
Server
System Server
Server
(on the
DEFAULT_VLAN)
Static Virtual LANs (VLANs)
Server
Switch B
Switch C
3
C
4
Server
Marketing
2-31