03-29-2011 05:15 AM - edited 03-06-2019 04:19 PM
Hi,
We want to remove vlan 1 from my core and access layer switches. Today we have 2 catalyst 6509 connected to each other10Gig trunk. All accesswitches have an uplink to each of the core switch. There's about 25 different accesswitches (3560, 3750, 4900M and bladeswitches).
Some servers in the core are connected to vlan 1. Interface vlan 1 are configured on both core switches with hsrp. Vlan 1 is configured on all switches i the core network.
We want to move from vlan 1 to vlan 102. The easy way is to remove interface vlan 1, create interface vlan 102 and then move all the accessports i vlan 1 to vlan 102. But to minimize the downtime for the servers, how can we do this with almost no downtime?
Is there a possibility to create vlan 102, but not the interface vlan 102 on core switches, and on 2 accesswitches interconnect 2 accessports in each vlan (1 and 102), and then move 1 server at a time? And at the end we only remove the interface vlan 1, and create it as interface vlan 102?
I have attached a quick drawing of how it could be done, but do you think this is a risk og will have negative impact on the core network?
Some of the serveres are running on vmware, and we need to cooperate with vmware administrators while doing this. So by doing it the way I ask for opinoins, will minimize downtime and give us time to migrate from vlan 1 to vlan 102 in a controlled manner.
Br
Geir
03-29-2011 05:50 AM
Hi
Yes u can create the vlan 102 without creating interface vlan 102.
I hope u r running VTP in u r environment if yes then just create the vlan 102 on u r vtp server and it will be propogated to all the switches.Once u have the same vlan database on all the switches then u can migrate as u thought.
In addition u can even create interface vlan for 102 also which will not cause any harm.U can migrate parallely.
Thanks
03-29-2011 06:02 AM
Thanks for quick reply!
I have already created the vlan 102, but the interconnect between the accesswitches (where one port on accessswitch1 is in vlan 1 and this accessport is connected to a accessport on accesswitch2 in vlan 102) haven't been done yet.
I see the drawing says accesswitch1 on both accessswitches on the right side, but imagine the bottom is accesswicth2.
But I don't think it would cause any problem, as long as vlan 102 is just a vlan, and the interface vlan 102 is not created yet.
If nobody sees any problems with this, I will give it a go, and start removing vlan 1.
Br
Geir
03-29-2011 06:08 AM
Hi
Since VLAN 1 "factory default" is not q tagged, I am not shure if there could be a problem with 102 being q tagged.
just a thought..
Good luck
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide