Management SVI on layer 3 switch among several SVI ?

[Jitu1]

In L2 switch we have only one SVI and that is management SVI. Ip assigned to management that VLAN interface is considered to be as management ip of the that L2 switch. Default gateway ip is configured aditionally

Now my question is ; As we can have many SVI on Layer 3 switch and ip assigned to each SVI is considered to be as gateway ip of that subnet, which ip will be considered to be the management ip of that L3 switch? Or more precisely tell me the procedure to set management ip to L3 switch . 

[Georg Pauwen · Accepted solution]

Hello,

the 'management' Vlan is just like any other Vlan, with the exception that (typically) no users are connected, and no ports assigned, to this Vlab, meaning there is no user data traffic happening in that Vlab. So, you can chose any Vlan as management Vlan, it does not require any special setup. Best practice is not to use Vlan 1 (the default Vlan) because potential intruders could exploit that...

[Jitu1]

Perhaps I could not make my question clear. Here in L2 switch we can observere that mangement ip is 192.168.99.2 and gateway ip is 192.168.99.1.

S1(config)# interface vlan 99
S1(config-if)# ip add 192.168.99.2 255.255.255.0
S1(config-if)# no shut
S1(config-if)# exit
S1(config)# ip default-gateway 192.168.99.1

 Now find the L3 configuration as below

D1(config)# vlan 10
D1(config-vlan)# name LAN10
D1(config)# vlan 20
D1(config-vlan)# name LAN20
D1(config-vlan)# vlan 30
D1(config-vlan)# name LAN30
D1(config-vlan)# exit
D1(config)#

D1(config)# interface vlan 10
D1(config-if)# description Default Gateway SVI for 192.168.10.0/24
D1(config-if)# ip add 192.168.10.1 255.255.255.0
D1(config-if)# no shut
D1(config-if)# exit

D1(config)#
D1(config)# int vlan 20
D1(config-if)# description Default Gateway SVI for 192.168.20.0/24
D1(config-if)# ip add 192.168.20.1 255.255.255.0
D1(config-if)# no shut
D1(config-if)# exit

D1(config)# int vlan 30
D1(config-if)# description Default Gateway SVI for 192.168.30.0/24
D1(config-if)# ip add 192.168.30.1 255.255.255.0

Here all these three ip are gateway ips 192.168.20.1, 192.168.20.1, 192.168.20.1 are gateway ip for each vlan.

Now please tell me what is the management ip of this L3 switch?

Even if we take any VLAN for management ( for examaple-99) and configure it, again it will be like as below

D1(config)# vlan 99
D1(config-vlan)# name MGMTVLAN 99

D1(config)# int vlan 99

D1(config-if)# description Anything
D1(config-if)# ip add 192.168.99.1 255.255.255.0

Again 192.168.99.1 will the gateway ip only and not the mgmt?

I just want to know the management ip of the switch in this scenario. May also help by configuring mgmt vlan and ip for L3 switch.

[Georg Pauwen]

Hello,

I see...sorry for the misunderstanding. Can you ping 192.168.99.1 ? Are there any other L3 devices (switches or routers) attached ? 

[Jitu1]

Actually real scenario is that there are two SVI on this switch. One is vlan 20 and other is vlan 99. Intervlan routing between vlan  20 and vlan 99 is there. Port pertaing to vlan 99 is connected to router. I am able to ping 192.168.99.1 and 192.168.20.1 from router. But again my question is that which configuration/parameter makes management ip different from gateway ip when both SVI are configured on exactly sameway. 

Also tell me what is the management ip of the switch in this scenario?

[Georg Pauwen]

Hello,

there is no difference between a 'normal' SVI and a management SVI. They are both just layer 3 interfaces belonging to a Vlan. You can use any SVI and Vlan you want for management.

[Jitu1]

Means, I should be able to login ( via telnet/ssh) to switch either with ip 192.168.99.1 or with ip 192.168.20.1 ? Am I right ? 

If yes, then total number of management ip to a L3 swicth will be equal to total number of SVI.

[Georg Pauwen]

Hello,

indeed, you can telnet to any reachable IP address.

Any SVI can be used for management, the number of potential management SVIs is indeed equal to the number of available SVIs.