CLI Reference Guide-R02

Chapter 1 | Initial Switch Configuration
Configuring the Switch for Remote Management
– 49 –
Configuring the Switch for Remote Management
Using the Craft Port or
Network Interface
The Craft port is a dedicated for out-of-band management. In general, the Craft
port should be used to manage the switch for security reasons. Traffic on this port is
segregated from normal network traffic on other switch ports and cannot be
switched or routed to the operational network. Additionally, if the operational
network is experiencing problems, the Craft port still allows you to access the
switch’s management interface and troubleshoot network problems. Configuration
options on the Craft port are limited, which makes it difficult to accidentally cut off
management access to the switch.
Alternatively, the switch can be managed through the operational network, known
as in-band management. Because in-band management traffic is mixed in with
operational network traffic, it is subject to all of the filtering rules usually applied to
a standard network ports such as ACLs and VLAN tagging. In-band network
management can be accessed through a connection to any network port.
Setting an IP Address You must establish IP address information for a switch to obtain management
access through the network. This can be done in either of the following ways:
◆ Manual — You have to input the information, including IP address and subnet
mask. If your management station is not in the same IP subnet as the switch,
you will also need to specify the default gateway router. To configure this
device as the default gateway, use the ip default-gateway command.
◆ Dynamic — The switch can send IPv4 configuration requests to BOOTP or
DHCP address allocation servers on the network, or automatically generate a
unique IPv6 host address based on the local subnet address prefix received in
router advertisement messages. An IPv6 link local address for use in a local
network can also be dynamically generated as described in “Obtaining an IPv6
Address” on page 54.
This switch is designed as a router, and therefore does not support DHCP for
IPv6, so an IPv6 global unicast address for use in a network containing more
than one subnet can only be manually configured as described in “Assigning an
IPv6 Address” on page 50.
Manual Configuration
You can manually assign an IP address to the switch. You may also need to specify a
default gateway that resides between this device and management stations that
exist on another network segment. Valid IPv4 addresses consist of four decimal
numbers, 0 to 255, separated by periods. Anything other than this format will not
be accepted by the CLI program.
Note: The default IPv4 address and subnet mask for VLAN 1 is 192.168.2.10
255.255.255.0, with no defined default gateway.