Recommendation for configuration of Management port when Summit x440-24P is only switch in the network

[Gregory_Krueger]

I'm looking to see if anyone can give me a recommended configuration for the management port for a small network. I'm an automation engineer, so "part-time IT" and know enough basics about VLAN, routing etc. to get by with some suggestions. But I don't do enough of this stuff to really know a lot of good practices. We have a small network, just a single x440-24p switch, and I was wondering what good practice would be for configuring the management port. I'm planning to have 3 VLAN's on the switch, one will be for admins/engineers, and I'd like to be able to physically connect to that VLAN and also have access to the management interface as well (web based is what I plan to use mostly...after initial setup will mainly be using management port for monitoring/troubleshooting).

Should I just do interVLAN routing from my admin VLAN to the built-in default management VLAN. Or can I just connect via the switch IP in my admin VLAN and no need to route through the management port?

Any advice appreciated...

[Henrique]

Hi Flávio, yes you are correct.

You can create a mgmt network to use that port.

Let's say you have a segment where all those mgmt ports are connected. You can manage all switches through that segment.

All mgmt ports must be connected to that "management cloud".

[Henrique]

Hi Flávio,

"Mgmt" vlan is dedicated to the mgmt port and cannot be changed.

[Flávio_Soares]

is it possible to change the vlan on the mgmt port ?

[Henrique]

If you want to use the Mgmt vlan (VR-Mgmt) to access (manage) the switch, you have to apply an IP on the Mgmt vlan: configure vlan mgmt ipaddress

However, the Mgmt vlan (VR-Mgmt) is non-routable. You cannot connect your laptop into another vlan (VR-Default for instance) and access the Mgmt vlan (VR-Mgmt). That means you have to connect your laptop directly to the Mgmt vlan.

Also you can manage the switch using HTTP/HTTPS (web interface) using the Mgmt vlan IP.

For HTTP: enable web http
For HTTPS: enable web https

Note: To use HTTPS you have to load the SSL/SSH module into the switch.

Please refers to this article 1266 How to enable web interface on an EXOS switch for information about how to load the SSL/SSH module and enable https.

[Gregory_Krueger]

OK...thanks for the tip. I'll play around to see if I can figure out how to do that. If not, I may be back just to get a few more pointers on exact steps to set that up.