Dell PowerConnect 7000 Series Instrukcje układania w stos - Strona 13
Przeglądaj online lub pobierz pdf Instrukcje układania w stos dla Przełącznik Dell PowerConnect 7000 Series. Dell PowerConnect 7000 Series 37 stron. Stacking gigabit ethernet switches
Również dla Dell PowerConnect 7000 Series: Biała księga techniczna (34 strony)
Stacking Dell PowerConnect 7000 Series Switches
Creating a Separate VLAN for File Downloads
When updating the firmware, it is helpful to keep the in-band management port in a different VLAN
and configure the PVID appropriately to avoid any network congestion or flooding issues through which
the file is being downloaded.
The CLI commands in the following example show how to configure port gi1/0/17 as an in-band
management port for firmware downloads or management access.
configure
vlan database
vlan 1000
exit
interface vlan 1000
ip address 192.168.21.11 255.255.255.0
exit
interface ethernet gi1/0/17
switchport mode general
switchport general pvid 1000
switchport general allowed vlan add 1000
switchport general allowed vlan remove 1
exit
management access-list MGMT_VLAN
permit ip-source 192.168.21.0 mask /24 vlan 1000 service ssh
exit
management access-class MGMT_VLAN
The switch now segregates traffic arriving on port gi1/0/17 onto VLAN 1000. All untagged packets that
enter the port are tagged with a VLAN ID of 1000. Additionally, only hosts with an IP address in the
192.168.21.XXX subnet are allowed access to the switch using SSH. The 192.168.XXX.XXX address block
is a private address space per RFC 1918. As an added security measure, network administrators can
configure their organization's edge routers to drop ingress and egress traffic destined to this address
block.
Page 11