Backup Network Switch Config - Cisco 2950T

I have just been asked to setup the switches for a backup network in a data centre and I need major assistance.  They currently have 4x Cisco 2950T switches that are in different comms areas.  Each switch has a GB link back to a separate port in the backup server and switching is disabled on the server.  Every server being backed up has had a second NIC installed and switch has also been disabled on them.

The backup switch requirements are:

1. Port one on every switch needs to go to a management switch to allow management (this is a separate switch in the management domain).  This port is only allowed for switch management and is not allowed to see any other devices on the switches.

2. Each server being backed up (in ports 2 to 24) that is connected to the backup switch isn't allowed to see any other devices on that switch

3. Each server being backed up (in ports 2 to 24) is only able to see the 2 GB ports that are connected to the backup server.

The backup server is a new Dell server running Red Hat and I believe the NICs support 802.1Q VLAN trunking.  My idea was to have 24 separate VLANs on every switch, and only ports 2 to 24 could talk to the GB ports.  To allow the management I was going to give the device an IP from the management domain would could only be accessed via port 1.

Now the biggest problem I have is "How do I do it?".  If anyone could help it would be greatly appreciated, also please feel free to point out that I may be on the wrong track completely.

Thanking you in advance.

I'd go with you on the management. Management VLAN with a management IP address, confgure Port 1 for VLAN and connect to your management switch.

For the backup:
Your way: 24 VLANs per switch and while the NICS may support 802.1Q, do they support 23 VLANs? I'm assuming you're using IP, so that makes 4 x 23 = 92 networks on the backup server. That's a lot of work and administration.

Best way: Use protected ports. All ports are configured for access mode. Create another VLAN on the switch, assign that to ports 2 to 24 and the gigabit ports, configure ports 2 to 24 with "port protected" which will do exactly what you want. Servers and backup server interface are configured with IP addresses in the same network. That makes 2 VLANs per switch and 4 networks required on the Backup server.

I know which one I'd prefer :)

Read about protcted port operation here:
http://www.cisco.com/en/US/products/hw/switches/ps628/products_configuration_guide_chapter09186a00801a6bb2.html