HP Procurve 2650 Management And Configuration Manual page 265

Links with Ports
Configured as Members of
the Management VLAN
and other VLANs
Links Not Belonging to the
Management VLAN
System
Management
Workstation
Figure 11-21. Example of Management VLAN Control in a LAN
Table 11-2. VLAN Membership in Figure 11-21
Switch
Management VLAN (VID = 7)
Marketing VLAN (VID = 12)
Shipping Dept. VLAN (VID = 20)
DEFAULT-VLAN (VID = 1)
In figure 11-21, Workstation 1 has management access to all three switches
through the Management VLAN, while the PCs do not. This is because config-
uring a switch to recognize a Management VLAN automatically excludes
attempts to send management traffic from any other VLAN.
Switch
A
Port A1
Port A3
Port A6
Port A7
1
Shipping
2
A1 A3 A6
Y N N
N N N
N Y Y
Y Y Y
Preparation
1. Determine a VID and VLAN name suitable for your Management VLAN.
2. Determine the IP addressing for the Management VLAN (DHCP/Bootp or
Manual.
3. Plan your Management VLAN topology to use HP Procurve switches that
support this feature. This includes the HP Procurve Series 5300XL, Series
4100GL, Switches 2650 and 6108.
The ports belonging to the Management VLAN should be only the follow-
ing:
Port-Based Virtual LANs (VLANs) and GVRP
Port-Based Virtual LANs (Static VLANs)
Switch
B
Port B2
Port C2
Port B4
Port C3
Port B5
Port C6
Port B9
Port C8
Server
System Server
Server
(on the
DEFAULT_VLAN)
A7 B2 B4 B5
Y Y Y N
N N N N
N N N N
Y Y Y Y
Switch
C
Server
Marketing
B9 C2 C3 C6
N Y N N
N N Y
N N N N
Y Y Y
3
4
C8
N
Y Y
N
Y Y
11-27