Configuring an mVLAN to Implement Integrated Management
Context
Management VLAN (mVLAN) configuration allows users to use the VLANIF interface of the mVLAN to log in to the management switch to centrally manage devices. To use a network management system to manage multiple devices, create a VLANIF interface on each device and configure a management IP address for the VLANIF interface. You can then log in to a device and manage it using its management IP address. If a user-side interface is added to the VLAN, users connected to the interface can also log in to the device. This brings security risks to the device.
After a VLAN is configured as an mVLAN, no access interface or dot1q-tunnel interface can be added to the VLAN. An access interface or a dot1q-tunnel interface is connected to users. The mVLAN forbids users connected to access and dot1q-tunnel interfaces to log in to the device, improving device performance.
Pre-configuration Tasks
Before creating a VLANIF interface, complete the following tasks:
Create a VLAN.
Associate the VLAN with the physical interface.
Procedure
- Run system-view
The system view is displayed.
- Run vlan vlan-id
The VLAN view is displayed.
If a device is configured with multiple VLANs, configuring names for these VLANs is recommended:
Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.
- Run management-vlan
An mVLAN is configured.
After an mVLAN is configured, an interface added to the mVLAN must be a trunk or hybrid interface.
VLAN 1 cannot be configured as an mVLAN.
- Run quit
The VLAN view is quit.
- Run interface vlanif vlan-id
A VLANIF interface is created and the VLANIF interface view is displayed.
- Run ip address ip-address { mask | mask-length } [ sub ]
The IP address of the VLANIF interface is configured.
After assigning an IP address to the VLANIF interface, you can run the stelnet command to log in to a management switch to manage attached devices.
- Run commit
The configuration is committed.
