The Secure Management Vlan - HP 3500 Series Advanced Traffic Management Manual

Static Virtual LANs (VLANs)
Special VLAN Types
N o t e
1-50
The default VLAN continues to operate as a standard VLAN (except, as
■
noted above, you cannot delete it or change its VID).
■ Any ports not specifically assigned to another VLAN will remain assigned
to the Default VLAN, regardless of whether it is the Primary VLAN.
Candidates for Primary VLAN include any static, port-based VLAN currently
configured on the switch. (Protocol-Based VLANs and dynamic—GVRP-
learned—VLANs that have not been converted to a static VLAN cannot be the
Primary VLAN.) To display the current Primary VLAN, use the CLI show vlan
command.
If you configure a non-default VLAN as the Primary VLAN, you cannot delete
that VLAN unless you first select a different VLAN to serve as primary.
If you manually configure a gateway on the switch, it ignores any gateway
address received via DHCP or Bootp.
To change the Primary VLAN configuration, refer to "Changing the Primary
VLAN" on page 1-37.

The Secure Management VLAN

Configuring a secure Management VLAN creates an isolated network for
managing the HP switches that support this feature. If you configure a secure
Management VLAN, access to the VLAN and to the switch's management
functions (Menu, CLI, and WebAgent) is available only through ports config-
ured as members.
■ Multiple ports on the switch can belong to the Management VLAN. This
allows connections for multiple management stations you want to have
access to the Management VLAN, while at the same time allowing Man-
agement VLAN links between switches configured for the same Manage-
ment VLAN.
Only traffic from the Management VLAN can manage the switch, which
■
means that only the workstations and PCs connected to ports belonging
to the Management VLAN can manage and reconfigure the switch.
Figure 1-33 illustrates use of the Management VLAN feature to support man-
agement access by a group of management workstations.