BLADE OS™ Application Guide HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Version 5.1 Advanced Functionality Software
Table Of Contents
- Contents
- Figures
- Tables
- Preface
- Part 1: Basic Switching
- Accessing the Switch
- The Management Network
- Local Management Using the Console Port
- The Command Line Interface
- Remote Management Access
- Client IP Address Agents
- Securing Access to the Switch
- Setting Allowable Source IP Address Ranges
- RADIUS Authentication and Authorization
- TACACS+ Authentication
- LDAP Authentication and Authorization
- Secure Shell and Secure Copy
- Configuring SSH/SCP Features on the Switch
- Configuring the SCP Administrator Password
- Using SSH and SCP Client Commands
- SSH and SCP Encryption of Management Messages
- Generating RSA Host and Server Keys for SSH Access
- SSH/SCP Integration with Radius Authentication
- SSH/SCP Integration with TACACS+ Authentication
- End User Access Control
- Ports and Trunking
- Port-Based Network Access Control
- VLANs
- Spanning Tree Protocol
- RSTP and MSTP
- Link Layer Discovery Protocol
- Quality of Service
- Accessing the Switch
- Part 2: IP Routing
- Basic IP Routing
- Routing Information Protocol
- IGMP
- OSPF
- OSPF Overview
- OSPF Implementation in BLADE OS
- OSPF Configuration Examples
- Remote Monitoring
- Part 3: High Availability Fundamentals
- High Availability
- Layer 2 Failover
- Server Link Failure Detection
- VRRP Overview
- Failover Methods
- BLADE OS Extensions to VRRP
- Virtual Router Deployment Considerations
- High Availability Configurations
- High Availability
- Part 4: Appendices
- Index
BMD00113, September 2009 87
CHAPTER 4
VLANs
This chapter describes network design and topology considerations for using Virtual Local Area
Networks (VLANs). VLANs are commonly used to split up groups of network users into
manageable broadcast domains, to create logical segmentation of workgroups, and to enforce
security policies among logical segments.
The following topics are discussed in this chapter:
“VLANs Overview” on page 87
“VLANs and Port VLAN ID Numbers” on page 88
“VLAN Tagging” on page 90
“VLANs and IP interfaces” on page 93
“VLAN Topologies and Design Considerations” on page 94
“Protocol-Based VLANs” on page 101
“Private VLANs” on page 106
“FDB Static Entries” on page 108
Note – Basic VLANs can be configured during initial switch configuration. For comprehensive
VLAN configuration commands, see the BLADE OS 5.1 Command Reference.
VLANs Overview
Setting up virtual LANs (VLANs) is a way to segment networks to increase network flexibility
without changing the physical network topology. With network segmentation, each switch port
connects to a segment that is a single broadcast domain. When a switch port is configured to be a
member of a VLAN, it is added to a group of ports (workgroup) that belong to one broadcast
domain.