CONFIGURING MANAGEMENT VLAN

[isaaco001]

Dear Community,

I need to create a management  vlan for a 24port 2960-X switch on vlan 11. The user data is vlan 12, voice vlan is vlan 5 and management vlan should be vlan 11.The management vlan  ip 192.168.1.179/24 while vlan 12(data) will get dhcp network setting.I put this on the network and the users were able to get network setting on vlan 12. However i cannot reach the management vlan, vlan 11.why is this?. Please find attached configs for the switch.

Thanks,

[Paul · Accepted solution]

Hello,

change your ip default-gateway to the management VLAN L3 interface.

OLD ip default-gateway 10.10.0.3

NEW ip default-gateway 192.168.1.X where X is the L3 interface on your router. Your router will need to know about the network in whatever routing protocol you are using RIP, EIGRP, ETC.

[isaaco001]

Hi Paul,

To clarify,you are saying the default gateway should be on the same subnet as the management vlan as below?

ip default-gateway 192.168.1.x

Also do i need to associate the management vlan with an interface for the management vlan 11 to come up(switchport mode access vlan11)?

Thanks for your response.

Regards,

Isaac.

[Paul]

Correct, ip default-gatway should be VLAN 11 gateway; 192.168.1.254, for example.

VLAN 11 interface will be up automatically, you will only need to make sure VLAN 11 is allowed down the trunk interface. You can verify interface status with sh ip int br

sh int trunk will show you which VLANs are allowed on the trunk interfaces.

Example:

Interface              IP-Address      OK? Method Status                Protocol
Vlan100                  unassigned      YES NVRAM  up                    up
Vlan11                 172.20.71.8     YES NVRAM  up                    up

Port        Vlans in spanning tree forwarding state and not pruned
Gi1/0/52    11,100

interface GigabitEthernet1/0/52
 switchport mode trunk

....

interface Vlan11
 ip address 172.20.71.8 255.255.255.0

....

ip default-gateway 172.20.71.254

[isaaco001]

Paul,

I will apply the configurations as recommended and let you know.

Thanks once again for your help.

Regards,

Isaac.

[Paul]

You're welcome.

Be sure the mgmt network is advertised in the routing protocol.

[isaaco001]

Paul,

I have configured a 2950 with the recommended settings but the management vlan, vlan 1 in this case is not coming up.Please look at the do show run, show ip int brief and do show vlan brief attached.

Thanks.

Regards,

Isaac.

[Krash Mole · Accepted solution]

Hi Isaac,

I read your post from where your vlan management is vlan 11 and even the one where we found vlan management as vlan 1.

You must understand that to be able to access the vlan 11 or vlan 1 as management one of your port needs to either be access port default vlan 1 or vlan 11 or a trunk port allowing vlan 1 or vlan 11 to pass through or even a hybryd port tagging vlan 1 or vlan 11.

Please change one port to vlan 11 or vlan 1

Regards

[isaaco001]

Hi Krash Mole,

I assigned one ports as you recommended to the 2950 with IOS 12.1(22)EA6 and the management interfaces would come up but only interchangeably.When vlan 1 would be up, then vlan 2 would shut down automatically.It seems in this switch you can only have one active management vlan.Please find show vlan brief attached.Thank you.

Regards

[isaaco001]

Paul,

It wen't well as you recommended with the 2960 switch. The management vlan is now accessible.

For the 2950 this could be a different matter.

Thanks.

Regards,

Isaac.