Designated VLAN for Management Sessions to a Layer 2 Switch
All RUCKUS ICX devices support the creation of management VLANs. By default, the management IP address you configure on a Layer 2 Switch applies globally to all the ports on the device. This is true even if you divide the device ports into multiple port-based VLANs.
If you want to restrict the IP management address to a specific port-based VLAN, you can make that VLAN the designated management VLAN for the device. When you configure a VLAN to be the designated management VLAN, the management IP address you configure on the device is associated only with the ports in the designated VLAN. To establish a management session with the device, a user must access the device through one of the ports in the designated VLAN.
You can also configure up to five default gateways for the designated VLAN and associate a metric with each one. The software uses the gateway with the lowest metric. The other gateways reside in the configuration but are not used. To use one of the other gateways, modify the configuration so that the gateway you want to use has the lowest metric.
If more than one gateway has the lowest metric, the gateway that appears first in the running-config is used.
To configure a designated management VLAN, enter commands such as those shown in the following example.
device# configure terminal device(config)# vlan 10 by port device(config-vlan-10)# untag ethernet 1/1/1 to 1/1/4 device(config-vlan-10)# management-vlan device(config-vlan-10)# default-gateway 10.10.10.1 1 device(config-vlan-10)# default-gateway 10.20.20.1 2The example configures port-based VLAN 10 to consist of ports 1/1/1 through 1/1/4 and to be the designated management VLAN. Two default gateways are configured for the VLAN. Since the 10.10.10.1 gateway is configured with a metric of 1, the software uses this gateway. The other gateway remains in the configuration but is not used. To use the 10.20.20.1 gateway, which has a metric of 2, reconfigure it so that it has a lower metric than the other gateway. The metric for a gateway can be set to a value of 1 through 5. There is no default.