Managment VLAN for SW in Tier 3 network design

[nikEnable]

Dear All,

Good Day. Please note that I have 4 buildings and each building has 2 L3 distribution switches and 12 Access. All L3 distribution switches go to 2 core L3 switches and i have configured ospf single area 0 between core and dist L3 switches. I want to ask if I have to separate vlan management for each building or can I have them all in one?

I hope I have made myself clear in my question, I would greatly appreciate your advice

Thanks

[balaji.bandi]

L2 you can have all of them 1 VLAN range

Since you can not extend VLAN from CORE to Access switches, best i can think is.

Use Managment your  p2p address for Manangement or Loopback address as manangement (Loopback address will be anounced in the OSPF network, so others can see that IP address).

[Flavio Miranda]

Hi

 You dont need to but would be a good pract to have a management network. This can safely be one vlan ID across the buildings  to make it simple to remember and manage and one network with the size that can fit all your devices and allows for expantion.

[nikEnable]

Thank you for the reply. Bellow i have an example from my topology

Build - 1
i have created vlan 99
Dist-1 -> 172.16.99.1
Dist-2 -> 172.16.99.2
HSRP -> 172.16.99.3
Access-1 -> 172.16.99.4 i have enable ssh with ip default-gateway 172.16.99.3

and in the ospf
i have configured 172.16.99.0 0.0.0.255 area 0

Build - 2
i have created vlan 99
Dist-1 -> 172.16.99.5
Dist-2 -> 172.16.99.6
HSRP -> 172.16.99.7
Can i have remote access to the Access-1 from build-2 to build-1 ?

Build-1 and Build-2 connected to Core.

Can it works because it the same network. And the pc-admin is located to the Build-2 ?

It is also recommended to have hsrp for the mangment?

[balaji.bandi · Accepted solution]

In the big network OOB is good, if you have small network that should work, if you looking all manangment to be same IP address range.

Make them small subnet  and distribute from OSPF.

Example : 172.16.99.0/24  in to 4 subnet /26 use them in respected network.

[nikEnable]

I have a 12-hour in front of the screen and I didn't think about it. Thank you.