Management Vlan SVI

SOLVED
Mac1
Comes here often

Management Vlan SVI

Hello. I've read here that Best practice suggest using a management vlan

 

So lets just say I want to use 10.1.1.0/24 as management for reachability to the cloud (this will be natted)

 

should this 10.1.1.0/24  be configured on my layer 3 gateway as a normal SVI along with my Data & Voice svi's and whatever else?

1 ACCEPTED SOLUTION
Inderdeep
Kind of a big deal

@Mac1 : Well check the below thread for best practices. I would say always separate management and user data traffic VLANs and if possible not to use the Native VLAN ( Hardening)

 

https://community.meraki.com/t5/Security-SD-WAN/Best-practices-for-native-VLAN-configuration/td-p/48...

 

I can give my native vlan whichever number i want, right? It doesn't have to be one does it?

Yes, you can have any number and dont use 1.

Regards
Inderdeep Singh
www.thenetworkdna.com ( Awarded by Cisco IT Blogs award 2020)

View solution in original post

5 REPLIES 5
Aaron_Wilson
A model citizen

That is how I do it

Inderdeep
Kind of a big deal

@Mac1 : Check this out 

By default, the switch will try to contact Meraki Dashboard on the untagged (native) VLAN. Alternately, you can specify the management VLAN under Configure > Switch settings. This allows the switch to reach the internet via a trunk port. 

https://documentation.meraki.com/MS/Other_Topics/Switch_Settings 

Regards
Inderdeep Singh
www.thenetworkdna.com ( Awarded by Cisco IT Blogs award 2020)
Mac1
Comes here often

Thanks Inderdeep. So what is the best practice?

 

Native vlan or separate managment network?

 

 

Or use the Native vlan  with the intended /24 network you were going to use as managment?

 

 

I can give my native vlan whichever number i want, right? It doesn't have to be one does it?

Inderdeep
Kind of a big deal

@Mac1 : Well check the below thread for best practices. I would say always separate management and user data traffic VLANs and if possible not to use the Native VLAN ( Hardening)

 

https://community.meraki.com/t5/Security-SD-WAN/Best-practices-for-native-VLAN-configuration/td-p/48...

 

I can give my native vlan whichever number i want, right? It doesn't have to be one does it?

Yes, you can have any number and dont use 1.

Regards
Inderdeep Singh
www.thenetworkdna.com ( Awarded by Cisco IT Blogs award 2020)
Mac1
Comes here often

Thanks for your help. Much appreciated.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels