Management vlans?

[louis0001]

I'm sure it's been asked loads of times but can't see a definitive answer.

Is it advisable to move the management vlan (just network devices on it) off vlan 1 so that nothing on vlan 1 has an ip address? eg management vlan = 100, data = 200, voice = 300

Or should you use vlan 1 for management and just move everything else off to other tagged vlans?

[Jon Marshall]

The recommendation is to use a different vlan for management and to have no end devices in that vlan, so just your network infrastructure. 

Jon

[Zain Khan]

Hi,

as per Cisco it is recommended to not keep your devices in vlan 1/ by default Vlan 1 act as a trunk which is not recommended in most of the cases. you can create any vlan let say 100,200,300 or any vlan ID to create your MGMT vlan to keep your management devices in or traffic on it which is very helpful and easy to mange your network

[louis0001]

Hi,

I'm not fully clear of this. Am I better with the following:

Management vlan = vlan 1 (network devices management only eg router, switch, AP's)
Data Vlan = 200 (pc's, laptops, printers etc)

Voice Vlan = 300 (phones)

OR

Management vlan = vlan 100 (network devices management only eg router, switch, AP's)
Data Vlan = 200 (pc's, laptops, printers etc)

Voice Vlan = 300 (phones)

and Vlan 1 = no IP address/subnet set with no devices on.

[Jon Marshall]

The second option. 

Jon