HP ProCurve Series 4100GL Management And Configuration Manual page 279

Links with Ports
Configured as Members of
the Management VLAN
and other VLANs
Links Not Belonging to the
Management VLAN
System
Management
Workstation
Figure 12-20. Example of Management VLAN Control in a LAN
Table 12-2. VLAN Membership in Figure 12-20
Switch
Management VLAN (VID = 7)
Marketing VLAN (VID = 12)
Shipping Dept. VLAN (VID = 20)
DEFAULT-VLAN (VID = 1)
In figure 12-20, Workstation 1 has management access to all three switches
through the Management VLAN, while the PCs do not. This is because config­
uring a switch to recognize a Management VLAN automatically excludes
attempts to send management traffic from any other VLAN.
Switch
A
Port A1
Port A3
Port A6
Port A7
1
Shipping
2
A1 A3 A6
Y N N
N N N
N Y Y
Y Y Y
Preparation
1. Determine a VID and VLAN name suitable for your Management VLAN.
2. Determine the IP addressing for the Management VLAN (DHCP/Bootp or
Manual.
3. Plan your Management VLAN topology to use HP ProCurve switches that
support this feature. (See the list on page 12-26.) The ports belonging to
the Management VLAN should be only the following:
• Ports to which you will connect authorized management stations
(such as Port A7 in figure 12-20.)
Port-Based Virtual LANs (VLANs) and GVRP
Port-Based Virtual LANs (Static VLANs)
Switch
Switch
B
Port B2
Port C2
Port B4
Port C3
Port B5
Port C6
Port B9
Port C8
Server
System Server
Server
(on the
DEFAULT_VLAN)
A7 B2 B4 B5
Y Y Y N
N N N N
N N N N
Y Y Y Y
3
C
4
Server
Marketing
B9 C2 C3 C6
N Y N N
N N Y Y
N N N N
Y Y Y Y
C8
N
Y
N
Y
12-27