Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

To use or not to use VLAN 1

Hey everyone,

I have network that consist of a 2x Cisco 3550 switches and about 30x 2950T switches.

All the switches and core are configured in VLAN 1 along with servers and computers. I am planning on moving the servers to its own VLAN and the same for the computers. Shall I leave the switches in VLAN 1? I am not sure what is the best practise. Can someone please give me some advice.

Thanks,

Mark

1 REPLY
Hall of Fame Super Blue

Re: To use or not to use VLAN 1

Hi Mark

Cisco recommends not using vlan 1 for any user/management traffic. Where i work we have a dedicated vlan for managing the switches. No port is left in vlan 1. In addition we always set the native vlan on trunks to be vlan 999 otherwise it will default to vlan 1.

Vlan 1 is still used internally by the switches for vtp, pagp, stp traffic. You can't stop this happening but you can make sure you don't use it yourself.

Attached is a link on a vlan security paper from Cisco which covers the use of vlan 1 among other things

http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a008013159f.shtml

HTH

Jon

141
Views
0
Helpful
1
Replies
CreatePlease to create content