The Secure Management Vlan - HP ProCurve 5300xl Series Management Manual

Static Virtual LANs (VLANs)
Special VLAN Types
N o t e
2-44
Candidates for Primary VLAN include any static, port-based VLAN currently
configured on the switch. (Protocol-Based VLANs and dynamic—GVRP­
learned—VLANs that have not been converted to a static VLAN cannot be the
Primary VLAN.) To display the current Primary VLAN, use the CLI show vlan
command.
If you configure a non-default VLAN as the Primary VLAN, you cannot delete
that VLAN unless you first select a different VLAN to serve as primary.
If you manually configure a gateway on the switch, it ignores any gateway
address received via DHCP or Bootp.
To change the Primary VLAN configuration, refer to "Changing the Primary
VLAN" on page 2-31.

The Secure Management VLAN

Configuring a secure Management VLAN creates an isolated network for
managing the HP ProCurve switches that support this feature. (As of January,
2005, the Secure Management VLAN feature is available on these HP ProCurve
switches:
■ Switch 6108
Series 6400cl switches
■
■ Series 5300xl switches
■ Series 4100gl switches
If you configure a Secure Management VLAN, access to the VLAN and to the
switch's management functions (Menu, CLI, and web browser interface) is
available only through ports configured as members.
Multiple ports on the switch can belong to the Management VLAN. This
■
allows connections for multiple management stations you want to have
access to the Management VLAN, while at the same time allowing Man­
agement VLAN links between switches configured for the same Manage­
ment VLAN.
■ Only traffic from the Management VLAN can manage the switch, which
means that only the workstations and PCs connected to ports belonging
to the Management VLAN can manage and reconfigure the switch.
Figure 2-27 illustrates use of the Management VLAN feature to support man­
agement access by a group of management workstations.
■ Series 3400cl switches
Series 2800 switches
■
■ Series 2600 switches