Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

v.j
New Member

Management Vlans in Layer 3 switches like 6509,5509,4006

Is it compulsory that we put the management vlan of the Layer 3 switches 6509,5509,4006 to be on a separate vlan compared to the user vlan.Or can we use one of the user vlan for management purpose also like snmp!!! (because of ip shortage).Will there be any effect on the network performance.

Thanks.

2 REPLIES
New Member

Re: Management Vlans in Layer 3 switches like 6509,5509,4006

The management Vlan should be set to 1 and I believe it comes defaulted to one. I don't think there is anything preventing you from changing it, but it is best not to. Also, remember that management Vlan doesn't have to conform to your ip scheme. For example, if your IP Scheme on your network is 10.0.0.0, you can use 192.168.1.0 for your management vlan and as long as all your network gear have their management vlan ip within that range, you should be fine.

New Member

Re: Management Vlans in Layer 3 switches like 6509,5509,4006

Regarding the use of VLAN 1 as your management VLAN; Cisco recommends changing it to something else, anything else. See the link below to read a detail report about the known vulnerabilities of VLAN 1 as the management VLAN.

Check out this link: http://www.sans.org/newlook/resources/IDFAQ/vlan.htm

607
Views
0
Helpful
2
Replies
CreatePlease to create content