VLAN Configuration Command Set
Creating a Secure Management VLAN
7-32
Matrix NSA Series Configuration Guide
7.3.5
Creating a Secure Management VLAN
If the Matrix Series device is to be configured for multiple VLAN’s, it may be desirable to
configure a management-only VLAN. This allows a station connected to the management VLAN
to manage the device. It also makes management secure by preventing configuration via ports
assigned to other VLANs.
To create a secure management VLAN, you must:
1.
Create a new VLAN. (
Section 7.3.2.1
)
2.
Set the PVID for the host port and the desired switch port to the VLAN created in Step 1.
(
Section 7.3.3.2
)
3.
Add the host port and the desired switch port to the egress list for the VLAN created in Step 1.
(
Section 7.3.4.2
)
4.
Set a private community name and access policy. (
Section 5.3.2.8
)
The commands used to create a secure management VLAN are listed in
Table 7-3
and described in
the associated sections as shown. This example assumes the management station is attached to
fe.1.1 and wants untagged frames.The process described in this section would be repeated on every
device that is connected in the network to ensure that each device has a secure management VLAN.
.
NOTES:
By default at device startup, there is one VLAN configured on the Matrix
Series device. It is VLAN ID 1, the DEFAULT VLAN. The default community name,
which determines remote access for SNMP management, is set to “public” with
read-write access.
Table 7-3
Command Set for Creating a Secure Management VLAN
To do this...
Use these commands...
Create a new VLAN and confirm
settings.
set vlan create 2
(
Section 7.3.2.1
)
(Optional)
show vlan 2
(
Section 7.3.1.1
)
Set the PVIDs to the new VLAN.
set port vlan host.0.1; fe.1.1 2
(
Section 7.3.3.2
)
Add the ports to the new VLAN’s egress
list.
set vlan egress 2
host.0.1; fe.1.1 2 untagged
(
Section 7.3.4.2
)
Set a private community name and access
policy and confirm settings.
set snmp community private
(
Section 5.3.2.8
)
(Optional)
show snmp community
(
Section 5.3.2.7
)