GlobalConfig.net header image 2

VLAN 1 on a Cisco Switch

May 4th, 2009 · 1 Comment

Welcome back!

In the many years I have been teaching Cisco courses I have come across a number of thoughts on VLAN 1. Some say not to use it, some say use it for management only. Have you ever wondered what the deal with VLAN 1 is? Well here is the scoop according to the VLAN Security White Paper via Cisco.com.

  • The Document recommends that you not use VLAN 1 for inband management traffic. Instead you should pick a different that you will dedicate to keeping management traffic separate from user data and protocol traffic.
  • Prune VLAN 1 from all the trunks and from all the access ports that don’t require it (including not connected and shutdown ports).

As far as the special VLAN for management purposes the document recommends the following:

  • Don’t configure the management VLAN on any trunk or access port that doesn’t require it (including not connected and shutdown ports).
  • When feasible, prefer out-of-band management to inband management.

There is certainly more that is discussed in the document and I think its a pretty good read.  Have a look for yourself!

Related posts:

  1. 5 ways to make sure Etherchannels work. Channeling is not that hard to do, its just temperamental....
  2. Can you knock out half of the CCNP in a week? Your probably thinking..yeah right! Actually, I have met a few...

Related posts brought to you by Yet Another Related Posts Plugin.

Tags: BCMSN · CCNP Study

1 response so far ↓

  • 1 Katz // May 6, 2009 at 8:20 pm

    When you said : (including not connected and shutdown ports). By default each one port, comes with vlan 1 and not shutdown. If you type show vlan, you will see what I´m saying. Is not easy to control in a Data Center disable each one port.

Leave a Comment