HP 2510G Figure 2-24.Example of Potential Security Breaches

Static Virtual LANs (VLANs)

Port-Based Virtual LANs (Static VLANs)

• Switches “A”, “B”, and								Server
“C” are connected by						Switch B
			Switch A
ports belonging to the
management VLAN.
• Hub “X” is connected
to a switch port that					Hub X
		Y
belongs to the	Hub
management VLAN. As
a result, the devices
connected to Hub X are
included in the
management VLAN.							Switch C
• Other devices
connected to the
switches through ports				Management Workstations
that are not in the
			Links with Ports Belonging to the Management VLAN and other VLANs
management VLAN are
excluded from			Links Between Ports on a Hub and Ports belonging to the Management VLAN
management traffic.			Links Not Belonging to the Management VLAN
			Links to Other Devices

Figure 2-24. Example of Potential Security Breaches

In figure 2-25,Workstation 1 has management access to all three switches through the Management VLAN, while the PCs do not. This is because configuring a switch to recognize a Management VLAN automatically excludes attempts to send management traffic from any other VLAN.

Links with Ports Configured as Members of the Management VLAN and other VLANs

Links Not Belonging to the Management VLAN

System

Management

Workstation

Switch

Switch

Switch

A

B

C

3

Port A1

Port B2

Port C2

Port A3

Port B4

Port C3

4

Port A6

Port B5

Port C6

Port B9

Port A7

Port C8

1

Server

Server

Shipping

Server

System Server

2

(on the

Marketing

DEFAULT_VLAN)

2-34