HP 6400cl, Management Manual, Page: 75 / 664

Static Virtual LANs (VLANs)
Special VLAN Types
N o t e
The Secure Management VLAN must be a static, port-based VLAN with a
manually configured IP address and subnet mask. (The switch does not allow
the Management VLAN to acquire IP addressing through DHCP/Bootp.)
Links with Ports Belonging to the Management VLAN and other VLANs
Links Between Ports on a Hub and Ports belonging to the Management
VLAN
Links
Not
Belonging to the Management VLAN
Links to Other Devices
Hub Y
Switch A
Hub X
Switch B
Server
Switch C
Management Workstations
• Switches “A”, “B”, and
“C” are connected by
ports belonging to the
management VLAN.
• Hub “X” is connected
to a switch port that
belongs to the
management VLAN. As
a result, the devices
connected to Hub X are
included in the
management VLAN.
• Other devices
connected to the
switches through ports
that are not in the
management VLAN are
excluded from
management traffic.
Figure 2-27. Example of Potential Security Breaches
In figure 2-28, Workstation 1 has management access to all three switches
through the Management VLAN, while the PCs do not. This is because config­
uring a switch to recognize a Management VLAN automatically excludes
attempts to send management traffic from any other VLAN.
2-45