ZyXEL Communications MSC1024G Series User Manual page 662

Chapter 28 ip Commands
28.2.9.1 Configuring Management VLAN Example
After the following example configuration, you must connect through the third
Ethernet port (uplink port 1) in order to perform inband management. You must
connect through a VLAN aware device that is using the proper VLAN ID in
order to perform management.
Another option would be to set the PVID of the third Ethernet port to 3, but this is not
recommended since all Ethernet frames received on the port without a VLAN tag would be
considered part of VLAN 3.
By default, the DSL ports are members of the management VLAN (VID 1). The following
procedure shows you how to configure a tagged VLAN that limits management access to just
one Ethernet port.
Use the out-of-band management port or console port to configure the system
if you misconfigure the management VLAN and lock yourself out from
performing in-band management.
It is highly recommended that you use the sys reboot <seconds>
command before using any command that may lock yourself out from
performing device management. Use the sys reboot cancel command to
cancel the scheduled rebooting before time is up when you are sure that you
had the correct configuration.
1 Use the
managing the system (the "management" or "CPU" VLAN).
ras> vlan set 3 up1 fix tag
ras> vlan enable 3
2 Use the
ras> ip set inband 192.168.1.2 3
662
command to configure a VLAN ID (VID 3 in this example) for
vlan set
command to set VID 3 as the management VLAN.
ip set
MSC1000G/1024G/1224G Series User's Guide