cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Distribution switch management IP

Highlighted
Here to help

Distribution switch management IP

Hello all,  I have a question. I am using an MS220-8 as a distribution switch from my ISP to two MX250's in an HA pair. Should the management IP of this switch come from behind the MX or can a public IP be used instead. Is it secure/safe to do so? Thank you!

2 REPLIES 2
Highlighted
Head in the Cloud

Re: Distribution switch management IP

Hi @Slobs2 . No need for you to assign a Public IP to your distribution switch.  We always create or re-assign a new VLAN purely for Meraki device management.  

look at the last paragraph of the below document:

 

https://documentation.meraki.com/MS/Layer_3_Switching/MS_Layer_3_Switching_and_Routing#Notes_regardi...

Highlighted
Here to help

Re: Distribution switch management IP

Hi @UCcert , I don't think I understand your response. This switch is between the ISP and the MX, so its outside of the LAN. There is no DHCP so a static address would be needed, that would need to be a public address. I'm curious about the security implications of having a switch management IP as a public IP not private.

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.