VLAN Configuration
Onboard Administrator 3.00 and higher provide a user-configurable IEEE 802.1Q tagged VLAN. This feature enables you to completely isolate traffic from the server or the interconnect module by creating a VLAN on the enclosure management network.
VLAN places no requirements or restrictions on the IP address. However, the external router or switch, which the Onboard Administrator is connected to, must be configured as a VLAN trunk access mode to route and pass multiple tagged traffic through the Onboard Administrators external Ethernet interface.
VLAN Features
- The VLAN ID is a unique number, which identifies each VLAN. The allowable range of VLAN ID numbers is 1 to 4094. By default, VLAN is disabled, and all devices are set to VLAN ID 1. After a VLAN is configured, devices that do not have the same VLAN ID cannot communicate with each other.
- All untagged frames received by Onboard Administrator are assigned to the default VLAN ID. Onboard Administrator will respond with untagged frames. All tagged frames will have a VLAN ID or tag in the frame and Onboard Administrator will respond with tagged frames.
- If a tagged frame is sent using the default VLAN ID, it will be dropped by Onboard Administrator, since Onboard Administrator expects default VLAN ID frames to be untagged. If the destination is the server or interconnect, then the Onboard Administrator responds with untagged frames.
- Since Onboard Administrator must communicate with all devices in the enclosure, all private management network communication inside the enclosure needs to be a member of all the configured VLANs on the system.
- Traffic between the iLO/IOM and the Broadcom switch is untagged, making VLAN transparent to them. Incoming traffic destined to the device will be tagged by Onboard Administrator going into the Broadcom switch which then removes the tag before sending the traffic to the device. The Broadcom switch will add the default VLAN ID to the port the device is attached to the outgoing traffic of the device before sending it out.
- The VLAN ID of the server, interconnect module, and Onboard Administrator is configurable to allow Onboard Administrator to be part of any network by configuring the VLAN ID to match the default VLAN setting of the external switch that the Onboard Administrator is connected to.
- The Onboard Administrator firmware will assign the default VLAN ID to all non-configured bays. The default VLAN ID can be changed by the user. You can associate a name, limited to 31 alphanumeric characters, to a VLAN ID. You can save up to 25 VLAN entries with a VLAN ID and name at one time.
- VLAN supports SAS interconnect peer-to-peer communication. There is also full interface support for CLI and GUI along with limited support for LCD. You can enable and disable VLAN and view or change VLAN IDs though the Insight Display. There is no VLAN support on the enclosure link and service port.
- Both active and standby Onboard Administrator are set to the same VLAN configuration settings, causing any changes to the active Onboard Administrator to be made to the standby Onboard Administrator as well. No changes can be made to the standby Onboard Administrator, but you can view the settings.
- You can configure or change VLAN settings with VLAN disabled. Run-time user changes are saved in RAM only and are lost when Onboard Administrator is restarted. Use the
Save Config
command to save configuration changes permanently. - You can configure VLAN remotely. VLAN configuration changes are saved in RAM only, and these changes are discarded upon reboot unless you save the changes to FLASH.
- Devices on different VLAN domain networks cannot communicate. All servers and interconnects, regardless of their VLAN ID, can still be managed using the Onboard Administrator. The client machine and the Onboard Administrator must be on the same VLAN ID to access the Onboard Administrator.
HP recommends using a console terminal to configure your network to prevent loss of communication when changing the VLAN configuration. The corresponding changes should then also be made to the external switch that Onboard Administrator is connected to.
The VLAN Control tab displays the active configuration that is currently in use on the Onboard Administrator.