WESM zl Management and Configuration Guide WT.01.28 and greater

2-8
Configuring the ProCurve Wireless Edge Services zl Module
Management Interfaces
Note Be careful when you change the default gateway IP address. The Wireless Edge
Services zl Module allows you to set more than one default gateway (and default
route). However, only the gateway configured first is active. Therefore, you cannot
change the gateway by simply re-entering the ip default-gateway command. Instead
first delete the old gateway; then specify the new gateway. For example:
ProCurve(wireless-services-C) (config)# no ip default-gateway 10.1.10.1
ProCurve(wireless-services-C) (config)# ip default-gateway 10.1.12.1
Failure to follow this procedure can cause your module to lose connectivity.
Set the Management VLAN Interface. The example commands above assign an
IP address to VLAN 1, the module’s default management interface. Your network
might use a different management VLAN. In that case, you must assign the IP address
to the VLAN you use and configure that VLAN as the management interface.
For example, in a network that defines VLAN 2 as the management VLAN, you
would enter these commands from the global configuration mode context:
ProCurve(wireless-services-C) (config)# interface vlan2
ProCurve(wireless-services-C) (config-if)# ip address <A.B.C.D></prefix length>]
ProCurve(wireless-services-C) (config-if)# management
Enable Secure Management. Secure management forces managers to access the
Wireless Edge Services zl Module at the IP address configured on the management
VLAN.
For example, you configure VLAN 2 as the management VLAN, and the module’s
IP address on VLAN 2 is 10.1.2.30. The module also has an IP address on VLAN 4,
10.1.4.30. By default, you can enter either IP address in your Web browser and access
the module’s Web browser interface. However, if you enable secure management,
you must enter 10.1.2.30 in your Web browser.
Enter this command from the global configuration mode context to enable secure
management:
ProCurve(wireless-services-C) (config)# management secure
Secure management filters management traffic according to the destination address
only. In other words, in the example above, secure management forces you to manage
the Wireless Edge Services zl Module through its IP address on VLAN 2. However,
your management station could be on VLAN 4 and its traffic routed to VLAN 2. To
restrict management access to devices in the management VLAN only, you must
configure ACLs on the module’s uplink port, on routing devices in your network, or
on both.