VLAN Management Policy Server
From Wikipedia, the free encyclopedia
A VLAN Management Policy Server or "VMPS" is a network switch that contains a mapping of device information to VLAN.
VMPS' main goal is VLAN management, but can also be used for security purposes. "Device Information" is the MAC address in the case of VMPS. Although the MAC address can be manipulated quite easily, it is still legitimate to use VMPS as a security tool. It is indeed better to have some control of what devices are present on a network, than simply allowing every device full network connectivity.
As all network security technology following a "white list" approach (i.e. allowing what is known, deny by default), managing large (or even huge) lists of MAC addresses becomes rapidly a challenge. VMPS management tools are therefore a necessity. See freeNAC in the external links.
With Cisco switches, there are only certain switches that can fill this role. The Cisco 1900-series switch and the 2950 cannot fill this role. The Cisco Catalyst 6500 can, however.
OpenVMPS and Icarus VMPSd are also available as open-source alternatives to using Cisco equipment to fill the need of a VMPS server.
