1-8z Enabling the management packets (including NDP packets, NTDP packets, and handshakepackets) to be transmitted in the management VLAN only, through which the management packetsare isolated from other packets and network security is improved.z Enabling the management device and the member devices to communicate with each other in themanagement VLAN.Cluster management requires the packets of the management VLAN be permitted on ports connectingthe management device and the member/candidate devices. Therefore:z If the packets of management VLAN are not permitted on a candidate device port connecting to themanagement device, the candidate device cannot be added to the cluster. In this case, you canenable the packets of the management VLAN to be permitted on the port through the managementVLAN auto-negotiation function.z Packets of the management VLAN can be exchanged between the management device and amember device/candidate device without carrying VLAN tags only when the default VLAN ID ofboth the two ports connecting the management device and the member/candidate device is themanagement VLAN. If the VLAN IDs of the both sides are not that of the management VLAN,packets of the management VLAN need to be tagged.z By default, the management VLAN interface is used as the network management interface.z There is only one network management interface on a management device; any newly configurednetwork management interface will overwrite the old one.Tracing a device in a clusterIn practice, you need to implement the following in a cluster sometimes:z Know whether there is a loop in the clusterz Locate which port on which switch initiates a network attackz Determine the port and switch that a MAC address corresponds toz Locate which switch in the cluster has a faultz Check whether a link in the cluster and the devices on the link comply with the original planIn these situations, you can use the tracemac command to trace a device in the cluster by specifying adestination MAC address or IP address.The procedures are as follows:1) Determine whether the destination MAC address or destination IP address is used to trace adevice in the clusterz If you use the tracemac command to trace the device by its MAC address, the switch will query itsMAC address table according to the MAC address and VLAN ID in the command to find out the portconnected with the downstream switch.z If you use the tracemac command to trace the device by its IP address, the switch will query thecorresponding ARP entry of the IP address to find out the corresponding MAC address and VLANID, and thus find out the port connected with the downstream switch.2) After finding out the port connected with the downstream switch, the switch will send a multicastpacket with the VLAN ID and specified hops to the port. Upon receiving the packet, the
