The Secure Management Vlan - HP ProCurve Switch 6120G/XG Management Manual

Static Virtual LANs (VLANs)
Special VLAN Types
N o t e
2-46
Any ports not specifically assigned to another VLAN will remain assigned
■
to the Default VLAN, regardless of whether it is the Primary VLAN.
Candidates for Primary VLAN include any static, port-based VLAN currently
configured on the switch. (Protocol-Based VLANs and dynamic—GVRP-
learned—VLANs that have not been converted to a static VLAN cannot be the
Primary VLAN.) To display the current Primary VLAN, use the CLI show vlan
command.
If you configure a non-default VLAN as the Primary VLAN, you cannot delete
that VLAN unless you first select a different VLAN to serve as primary.
If you manually configure a gateway on the switch, it ignores any gateway
address received via DHCP or Bootp.
To change the Primary VLAN configuration, refer to "Changing the Primary
VLAN" on page 2-34.

The Secure Management VLAN

Configuring a secure Management VLAN creates an isolated network for
managing the ProCurve switches that support this feature. If you configure a
secure Management VLAN, access to the VLAN and to the switch's manage-
ment functions (Menu, CLI, and web browser interface) is available only
through ports configured as members.
Multiple ports on the switch can belong to the Management VLAN. This
■
allows connections for multiple management stations you want to have
access to the Management VLAN, while at the same time allowing Man-
agement VLAN links between switches configured for the same Manage-
ment VLAN.
■ Only traffic from the Management VLAN can manage the switch, which
means that only the workstations and PCs connected to ports belonging
to the Management VLAN can manage and reconfigure the switch.
Figure 2-29 illustrates use of the Management VLAN feature to support man-
agement access by a group of management workstations.