Management interface and log server

[donohoecompanies]

On our switches we have a production network (172.16.4.0/22) (VLAN4) that servers and clients sit on, then we have a management network (172.16.8.0/22) (VLAN10) which the management interfaces of various systems sit on, including our switches. We want to send logs from our switches to a data collector which sits on the production network, but only allow management of the switch from the management network.

Would this configuration achieve that, and is there a better way to do it?

interface Vlan4
ip address 172.16.4.40 255.255.252.0
!
interface Vlan10
ip address 172.16.8.40 255.255.252.0
!
ip access-list standard Management-SSH
permit 172.16.8.0 0.0.0.255
logging trap debugging
logging host 172.16.4.19
!
line con 0
line vty 0 4
access-class Management-SSH in
line vty 5 15
access-class Management-SSH in
transport input all

[balaji.bandi]

As long as routing in place to reach management network and data network Logs will reach destination.

you can also use Logging using the interface.

Logging source-interface x/x

or you would like to make ACL to allow only syslog messages to allow ?

is this make sense ? what challenges you see here ?