moving management interface to another vlan on 3750

[fkatsumi1]

I understand that it is recommended to have a dedicated management vlan for switches so what I want to do is create a new vlan in the two 3750 stacked switches A and B for this purpose. My question is after I create it how do I assign the management interface to the new vlan? Two stacks are etherchanneled and stack A is doing the intervlan routing. Do I need routing on B also?

Fred

[ethiel]

On a switch that is doing routing between VLANs, the concept of a "management VLAN" is slightly blurred. Generally a management VLAN is so that all switches have an isolated segment, sometimes with ACLs controlling inbound access, for you to manage them on. In the case of a L3 switch, it will obviously still be accessible on other VLANs as well.

Even so, all of your L2 switches will still benefit from a didicated management VLAN, so here is the best way to get it done:

On your routing switch, you need to create the VLAN and the Layer-3 interface for it. This just takes commands "vlan x" and "int vlan x" and then you can specify the IP address for the new vlan interface.

Then, you can move on to the Layer-2 switch(s). First you want to go to the current vlan interface and do a shutdown. Then create "int vlan x" with an IP for the new VLAN. You will also have to change your "IP route 0.0.0.0" or "ip default-gateway" command to point to the Layer-3 switch IP on the new VLAN. Be sure all of this is from the console since you will lose telnet access when applying the changes.

Hopefully this is clear.

-Eric

Please remember to rate all helpful posts.

[fkatsumi1]

I currently have the default vlan 1 as the management and all clients attached to it. What do you suggest? Create a new vlan for clients and also a new vlan for management so that I don't use VLAN 1 at all? If so what are the correct steps in doing this to minimize down time?