Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VLAN Subinterfaces CAT 6500

I have a CAT-6500 with a 6348.


Ports 1-6 on VLAN100

Ports 7-12 on VLAN200

In MLS Card the virtual interface for VLAN100 I have a network in the

In MLS Card the virtual interface for VLAN200 I have a network

The problem I'm having is that on these 2 VLANS I also have to run a "sub-network" in the block for management purposes.

So what I'm thinking is that on the MLS card on the virtual interface for VLAN100, I assigned it no IP Address and created 2 sub-interfaces

VLAN100.1 with an ip of

VLAN100.2 with an ip of

On the virtual interface for VLAN200, I assigned it no IP address and created 2 sub-interfaces

VLAN200.1 with an ip of

VLAN200.2 with an ip of

But I can't get the VLAN100.1 to talk to VLAN200.1 to talk to eachother.

What am I doing wrong, or am I going about this the wrong way.

Cisco Employee

Re: VLAN Subinterfaces CAT 6500

The IOS parser might allow you to configure sub-interfaces under VLAN interfaces on a MSFC, but it will not work. Try using secondary addressing instead

New Member

Re: VLAN Subinterfaces CAT 6500

Hi Antonio,

I think you want to manage network equipments.

Use VLAN1 or other VLAN for management purpose. The cisco switches use VLAN1 as nativ VLAN. On the switches the physical ports configure to VLAN100 or VLAN200 or any other. So you can securely separate the management VLAN (VLAN1) from other networks.

You can control the access to the management VLAN with ACL.




Re: VLAN Subinterfaces CAT 6500


Thank you. The reason I was using subinterfaces was that in each vlan there are wireless bridges. The customers attach to us via their radio. Their radio is on a public subnet. But the radio is on a private network. That is what we want to be able to controll.

For example: Customer A's radio IP would be and a gateway of Back at the switch for VLAN100 I created a subinterface VLAN100.192 with an IP of But their router which is attached to their radio would have an IP of with a gateway of Back at the switch on VLAN100 I created a subinterface with an IP of

I have tried secondary interfaces and they do work, but it just seems a bit sloppy to me. It seems as if the VLAN subinterfaces would be a bit more secure.


New Member

Re: VLAN Subinterfaces CAT 6500


On the Cisco APs possible configure VLANs

with this technic you can setup VLAN for manage and other for a customers.



CreatePlease login to create content