cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
997
Views
0
Helpful
3
Replies

Want to remove vlan 1

pd.politiet.no
Level 1
Level 1

Hi,

We want to remove vlan 1 from my core and access layer switches.  Today we have 2 catalyst 6509 connected to each other10Gig trunk.  All accesswitches have an uplink to each of the core switch.  There's about 25 different accesswitches (3560, 3750, 4900M and bladeswitches).

Some servers in the core are connected to vlan 1.  Interface vlan 1 are configured on both core switches with hsrp.  Vlan 1 is configured on all switches i the core network.

We want to move from vlan 1 to vlan 102.  The easy way is to remove interface vlan 1, create interface vlan 102 and then move all the accessports i vlan 1 to vlan 102.  But to minimize the downtime for the servers, how can we do this with almost no downtime?

Is there a possibility to create vlan 102, but not the interface vlan 102 on core switches, and on 2 accesswitches interconnect 2 accessports in each vlan (1 and 102), and then move 1 server at a time? And at the end we only remove the interface vlan 1, and create it as interface vlan 102?

I have attached a quick drawing of how it could be done, but do you think this is a risk og will have negative impact on the core network?

Some of the serveres are running on vmware, and we need to cooperate with vmware administrators while doing this.  So by doing it the way I ask for opinoins, will minimize downtime and give us time to migrate from vlan 1 to vlan 102 in a controlled manner.

Br

Geir

3 Replies 3

mahmoodmkl
Level 7
Level 7

Hi

Yes u can create the vlan 102 without creating interface vlan 102.

I hope u r running VTP in u r environment if yes then just create the vlan 102 on u r vtp server and it will be propogated to all the switches.Once u have the same vlan database on all the switches then u can migrate as u thought.

In addition u can even create interface vlan for 102 also which will not cause any harm.U can migrate parallely.

Thanks

Thanks for quick reply!

I have already created the vlan 102, but the interconnect between the accesswitches (where one port on accessswitch1 is in vlan 1 and this accessport is connected to a accessport on accesswitch2 in vlan 102) haven't been done yet.

I see the drawing says accesswitch1 on both accessswitches on the right side, but imagine the bottom is accesswicth2.

But I don't think it would cause any problem, as long as vlan 102 is just a vlan, and the interface vlan 102 is not created yet.

If nobody sees any problems with this, I will give it a go, and start removing vlan 1.

Br

Geir

Hi

Since VLAN 1 "factory default" is not q tagged, I am not shure if there could be a problem with 102 being q tagged.

just a thought..

Good luck

HTH