I have network that consist of a 2x Cisco 3550 switches and about 30x 2950T switches.
All the switches and core are configured in VLAN 1 along with servers and computers. I am planning on moving the servers to its own VLAN and the same for the computers. Shall I leave the switches in VLAN 1? I am not sure what is the best practise. Can someone please give me some advice.
Cisco recommends not using vlan 1 for any user/management traffic. Where i work we have a dedicated vlan for managing the switches. No port is left in vlan 1. In addition we always set the native vlan on trunks to be vlan 999 otherwise it will default to vlan 1.
Vlan 1 is still used internally by the switches for vtp, pagp, stp traffic. You can't stop this happening but you can make sure you don't use it yourself.
Attached is a link on a vlan security paper from Cisco which covers the use of vlan 1 among other things
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...