When configuring a Cat4006 with a separate layer 3 module installed, I'm confused over the term native LAN.
Q1.Some Cisco information mentions that VLAN1 is the native VLAN, is this correct?
Q2.Is the native VLAN where management traffic is sent over?
Q3.If so, what sort of 'management' traffic is using this VLAN?
Q4.Some information seems to state that the native LAN should NOT be used for user data, is this true?
Q5.If it is true, why?
Q6.If the answer to Q4 is yes, then what is the best way of configuring the trunks between the layer 2 and layer 3 modules to ensure that this segmentation is maintained?
For your information, the configuration requirement of a site is to connect ALL devices in the same VLAN (the Cat4006 is initially being used for layer 3 switching between multiple subnets on the same VLAN - to take the load off the external router).
I hope that there may be some person who can help me out of my state of confusion.
Q1: yes - by default it is vlan1 but you can change it
Q3: BPDU for spanning tree
Q5: you don't want to drop management traffic because the vlan is overloaded with user traffic.
Q6: not sure what you mean - if you keep the default natvie vlan as vlan 1 and never assigned any user to it, when you create a trunk, you don't even have to ask you the question what about the native vlan.
Thanks for taking the time and trouble to respond.
But I'm still confused. Cat4006/3524 etc, default with all ports in VLAN1, does this mean that only the uplink and downlink ports (ie. ports to other switches or external routers) should remain in VLAN1 (thus allowing management data such as BPDU to propogate via VLAN1 only) and all the user ports should be assigned a different VLAN eg. VLAN2?
Q1. Yes but this is just a default value and you can change it.
Q2. NO, native VLAN is set just on 802.1q trunk and has nothing to do with management. The confusing fact is that native VLAN and management VLAN have both the same default value = VLAN1.
Q3. Management traffic (Cluster Management Protocol, Telnet for CLI remote access, e.g.)is sent via management VLAN - another term. Unfortunately, some Cisco proprietary protocols (VTP, e.g.) are sent on VLAN1 without any possibility to change - even if you disable VLAN1 it is disabled for user data but still available for internal Cisco traffic.
Q4. It is better not to use management VLAN for user data to ensure bandwith for management traffic.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...