5406zl Management VLAN Issue

[stewdavis]

We are having some issues with integrating the HP Procurve 5406zl/5412zl/8212zl with appliances that need to make modifications to the switch (i.e. NAC device needing to move a port to another VLAN). The Management VLAN is not routable and therefore makes these types of implementations more difficult. Is there a way to bypass the blocking of the route to the Management VLAN? I have tried allowing "IP Authorized Managers" from a different subnet, but that only appears to work if the subnet is in that VLAN.

It would appear, based on the documentation, that you can't have multiple management IPs (but having that would probably solve my problem too).

Thanks in advance!

Stew

[paulgear]

I'm afraid you're out of luck.  The point of the management VLAN is to prevent management from anywhere else.

One thing that will work is to put a firewall on that VLAN which NATs your traffic from its original source.  That way, from the switch's perspective, the traffic originates on the managment VLAN.