2960 Lan Based routing

[sejamc71]

Former network tech deployed 2960 switches and left everything on VLAN 1. These are very remote so no hands on. I am wondering if I can change the SDM and enable LAN-Based routing so that I can create an SVI which will let me remotely manage to switch so that I can change VLAN 1 and setup a proper management VLAN without loosing connection to the switch. Has anyone ever done that? Currently, the management is on VLAN 1 so if I change anything, I loose connectivity. Setting up an additional VLAN with LAN Based routing on the 2960 switch would allow me connectivity to readdress the switch, correct?

[Reza Sharifi]

If this is an old 2960, they only support one vlan and that is for management. The newer 2960s and X series support multiple vlans depending on the license.

HTH

[Martin L]

most likely c2960 are only l2 switches with just 1 SVI. no routing. if yo have newer model , i think call 2960-X, you may enable more then 1 SVI. Still, those are not design for havey routing. Compare them to 3850 which can be l2 or l3 switches

[sejamc71]

Yep, that is what I am afraid of. I'm doing a ton of digging. These switches are about 800 miles away and were, prior to me, deployed without a separate management vlan, meaning user data and management on VLAN 1 with VLAN 1 being native. Now they want to introduce additional Subnets

I have physically lab'd this up exactly and here is the problem.....The Class C setup for production has been filled so I've created 2 new Subnets on their router as subinterfaces to gi0/1 (gi0/1.500 & gi0/.501) They can pass traffic on VLAN 500/501, but if a device with a VLAN5xx address is on the switch and the switch port is in a trunk configuration, it is not able to ping the gateway of VLAN 500 or 501. If I move the port to access mode with access to VLAN 500 or 501, it is then able to ping the applicable gateway.

Locally, if I make a separate management VLAN, assigned the current IP to a different vlan, I can then pass traffic to the existing subnet, VLAN 500 % VLAN 501 without issues. But, with management and data being on the existing VLAN 1, I can't do this as I lose connectivity to the switch because it resides on the subnet I have to change.  Anyone have any ideas how to do this remotely on a L2, lanbase device?