RE: Management VLAN in Cat3550?

From: Larson, Chris (CLarson@usaid.gov)
Date: Wed Jan 15 2003 - 11:59:49 GMT-3


I see this in several posts. Could it be that because people tend to use
managment and native vlan interchangeably that the question being asked is
to actually change the native vlan? Just a thought as I do not know how you
would configure a management Vlan per se on a 6500 or 3550.

> -----Original Message-----
> From: frank.yu@japan.bnpparibas.com [SMTP:frank.yu@japan.bnpparibas.com]
> Sent: Tuesday, January 14, 2003 11:53 PM
> To: bsivasub@cisco.com
> Cc: wangtao_sh@hotmail.com; ccielab@groupstudy.com
> Subject: Re: Management VLAN in Cat3550?
>
> Balaji,
>
> Thanks for the explaination, it's ver clear now. My question is if I
> were asked to make certain vlan as management vlan on a cat3550 which has
> several SVIs, does that mean I need to put some sort of access list to
> deny
> telnet coming from other vlan to the switch?
>
> Frank
>
>
>
> Internet
> bsivasub@cisco.com - 01/15/2003 01:32 PM
>
> To: Frank Yu
>
> cc: wangtao_sh, ccielab
>
>
> Subject: Re: Management VLAN in Cat3550?
>
>
> What is managemnt vlan for you ? These Layer 3 switches (like 3550, 4k
> sup3/4, cat6k msfc/native) has multiple SVIs , so you can call any one
> your management SVI depending on your network design. I can telnet to
> any SVI interface and mange the device as long as I have route to it.
>
> I think you may be confused from the CatOS and XL world ..where there
> is only one managment vlan interface ..(there may some exceptions which
> is not significant)
>
> Balaji
>
> frank.yu@japan.bnpparibas.com wrote:
>
> >Balaji,
> >
> > I am little bit confused about management vlan now.
> > According to your explanation, if we have one SVI configured on the
> >switch then we can call it management vlan, well if we have several SVIs
> we
> >can't link any vlan to management vlan.
> > Am I understanding correctly? Thanks.
> >
> >Frank
> >
> >
> >
> >Internet
> >bsivasub@cisco.com - 01/15/2003 01:20 PM
> >
> >To: Frank Yu
> >
> >cc: wangtao_sh, ccielab
> >
> >
> >Subject: Re: Management VLAN in Cat3550?
> >
> >
> >There is nothing like management vlan.... you can shut down the other
> >vlans if you want so that only usuable interface is vlan3 so you can
> >call it managemnet vlan. :)
> >
> >Balaji
> >
> >frank.yu@japan.bnpparibas.com wrote:
> >
> >
> >
> >>Balaji,
> >>
> >> What if I asked to configure Vlan 3 as management vlan while I have
> some
> >>other SVIs on the switch. How can I achieve that?
> >> Any one follows? Thanks.
> >>
> >>Frank
> >>
> >>
> >>
> >>Internet
> >>bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
> >>
> >>
> >>Please respond to bsivasub@cisco.com
> >>
> >>Sent by: nobody@groupstudy.com
> >>
> >>To: wangtao_sh
> >>
> >>cc: ccielab
> >>
> >>
> >>Subject: Re: Management VLAN in Cat3550?
> >>
> >>
> >>you can have more than one vlan for management and routing on 3550 EMI
> >>unlike XL series.
> >>So configure another interface and you should be good to go.
> >>
> >>Balaji
> >>
> >>
> >>Wang Tao wrote:
> >>
> >>
> >>
> >>
> >>
> >>>Hi all,
> >>>
> >>>I want to change the management VLAN in catalyst 3550 (EMI). But I
> could
> >>>
> >>>
> >>>
> >>>
> >>not
> >>
> >>
> >>
> >>
> >>>find any command in manaual.
> >>>Does someone know it?
> >>>
> >>>Thanks!
> >>>
> >>>Regards/tao
> >>>.
> >>>
> >>>
> >>>
> >>>
> >>--
> >>***************************************
> >>Balaji Sivasubramanian
> >>TAC LAN Techlogies WW SME
> >>Cisco Systems
> >>RTP, NC, 27709
> >>Ph: 919 392 7596
> >>E-mail: bsivasub@cisco.com
> >>URL: http://www-tac.cisco.com/~bsivasub
> >>****************************************
> >>.
> >>This message and any attachments (the "message") is
> >>intended solely for the addressees and is confidential.
> >>If you receive this message in error, please delete it and
> >>immediately notify the sender. Any use not in accord with
> >>its purpose, any dissemination or disclosure, either whole
> >>or partial, is prohibited except formal approval. The internet
> >>can not guarantee the integrity of this message.
> >>BNP PARIBAS (and its subsidiaries) shall (will) not
> >>therefore be liable for the message if modified.
> >>
> >> ---------------------------------------------
> >>
> >>Ce message et toutes les pieces jointes (ci-apres le
> >>"message") sont etablis a l'intention exclusive de ses
> >>destinataires et sont confidentiels. Si vous recevez ce
> >>message par erreur, merci de le detruire et d'en avertir
> >>immediatement l'expediteur. Toute utilisation de ce
> >>message non conforme a sa destination, toute diffusion
> >>ou toute publication, totale ou partielle, est interdite, sauf
> >>autorisation expresse. L'internet ne permettant pas
> >>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> >>filiales) decline(nt) toute responsabilite au titre de ce
> >>message, dans l'hypothese ou il aurait ete modifie.
> >>
> >>
> >>
> >>
> >
> >--
> >***************************************
> >Balaji Sivasubramanian
> >TAC LAN Techlogies WW SME
> >Cisco Systems
> >RTP, NC, 27709
> >Ph: 919 392 7596
> >E-mail: bsivasub@cisco.com
> >URL: http://www-tac.cisco.com/~bsivasub
> >****************************************
> >
> >
> >
> >(See attached file: C.htm)
> >
> >
> >
> >
> >This message and any attachments (the "message") is
> >intended solely for the addressees and is confidential.
> >If you receive this message in error, please delete it and
> >immediately notify the sender. Any use not in accord with
> >its purpose, any dissemination or disclosure, either whole
> >or partial, is prohibited except formal approval. The internet
> >can not guarantee the integrity of this message.
> >BNP PARIBAS (and its subsidiaries) shall (will) not
> >therefore be liable for the message if modified.
> >
> > ---------------------------------------------
> >
> >Ce message et toutes les pieces jointes (ci-apres le
> >"message") sont etablis a l'intention exclusive de ses
> >destinataires et sont confidentiels. Si vous recevez ce
> >message par erreur, merci de le detruire et d'en avertir
> >immediatement l'expediteur. Toute utilisation de ce
> >message non conforme a sa destination, toute diffusion
> >ou toute publication, totale ou partielle, est interdite, sauf
> >autorisation expresse. L'internet ne permettant pas
> >d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> >filiales) decline(nt) toute responsabilite au titre de ce
> >message, dans l'hypothese ou il aurait ete modifie.
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> >
> > There is nothing like management vlan.... you can shut down the other
> > vlans if you want so that only usuable interface is vlan3 so you can
> > call it managemnet vlan. :)
> >
> > Balaji
> >
> > frank.yu@japan.bnpparibas.com wrote:
> >
> >>Balaji,
> >>
> >> What if I asked to configure Vlan 3 as management vlan while I have
> some
> >>other SVIs on the switch. How can I achieve that?
> >> Any one follows? Thanks.
> >>
> >>Frank
> >>
> >>
> >>
> >>Internet
> >>bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
> >>
> >>
> >>Please respond to bsivasub@cisco.com
> >>
> >>Sent by: nobody@groupstudy.com
> >>
> >>To: wangtao_sh
> >>
> >>cc: ccielab
> >>
> >>
> >>Subject: Re: Management VLAN in Cat3550?
> >>
> >>
> >>you can have more than one vlan for management and routing on 3550 EMI
> >>unlike XL series.
> >>So configure another interface and you should be good to go.
> >>
> >>Balaji
> >>
> >>
> >>Wang Tao wrote:
> >>
> >>
> >>
> >>>Hi all,
> >>>
> >>>I want to change the management VLAN in catalyst 3550 (EMI). But I
> could
> >>>
> >>>
> >>not
> >>
> >>
> >>>find any command in manaual.
> >>>Does someone know it?
> >>>
> >>>Thanks!
> >>>
> >>>Regards/tao
> >>>.
> >>>
> >>>
> >>--
> >>***************************************
> >>Balaji Sivasubramanian
> >>TAC LAN Techlogies WW SME
> >>Cisco Systems
> >>RTP, NC, 27709
> >>Ph: 919 392 7596
> >>E-mail: bsivasub@cisco.com
> >>URL: http://www-tac.cisco.com/~bsivasub
> >>****************************************
> >>.
> >>This message and any attachments (the "message") is
> >>intended solely for the addressees and is confidential.
> >>If you receive this message in error, please delete it and
> >>immediately notify the sender. Any use not in accord with
> >>its purpose, any dissemination or disclosure, either whole
> >>or partial, is prohibited except formal approval. The internet
> >>can not guarantee the integrity of this message.
> >>BNP PARIBAS (and its subsidiaries) shall (will) not
> >>therefore be liable for the message if modified.
> >>
> >> ---------------------------------------------
> >>
> >>Ce message et toutes les pieces jointes (ci-apres le
> >>"message") sont etablis a l'intention exclusive de ses
> >>destinataires et sont confidentiels. Si vous recevez ce
> >>message par erreur, merci de le detruire et d'en avertir
> >>immediatement l'expediteur. Toute utilisation de ce
> >>message non conforme a sa destination, toute diffusion
> >>ou toute publication, totale ou partielle, est interdite, sauf
> >>autorisation expresse. L'internet ne permettant pas
> >>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> >>filiales) decline(nt) toute responsabilite au titre de ce
> >>message, dans l'hypothese ou il aurait ete modifie.
> >>
> >>
> >
> >--
> >***************************************
> >Balaji Sivasubramanian
> >TAC LAN Techlogies WW SME
> >Cisco Systems
> >RTP, NC, 27709
> >Ph: 919 392 7596
> >E-mail: bsivasub@cisco.com
> >URL: http://www-tac.cisco.com/~bsivasub
> >****************************************
> >
> >
>
> --
> ***************************************
> Balaji Sivasubramanian
> TAC LAN Techlogies WW SME
> Cisco Systems
> RTP, NC, 27709
> Ph: 919 392 7596
> E-mail: bsivasub@cisco.com
> URL: http://www-tac.cisco.com/~bsivasub
> ****************************************
>
>
>
> (See attached file: C.htm)
>
>
>
>
> This message and any attachments (the "message") is
> intended solely for the addressees and is confidential.
> If you receive this message in error, please delete it and
> immediately notify the sender. Any use not in accord with
> its purpose, any dissemination or disclosure, either whole
> or partial, is prohibited except formal approval. The internet
> can not guarantee the integrity of this message.
> BNP PARIBAS (and its subsidiaries) shall (will) not
> therefore be liable for the message if modified.
>
> ---------------------------------------------
>
> Ce message et toutes les pieces jointes (ci-apres le
> "message") sont etablis a l'intention exclusive de ses
> destinataires et sont confidentiels. Si vous recevez ce
> message par erreur, merci de le detruire et d'en avertir
> immediatement l'expediteur. Toute utilisation de ce
> message non conforme a sa destination, toute diffusion
> ou toute publication, totale ou partielle, est interdite, sauf
> autorisation expresse. L'internet ne permettant pas
> d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> filiales) decline(nt) toute responsabilite au titre de ce
> message, dans l'hypothese ou il aurait ete modifie.
> What is managemnt vlan for you ? These Layer 3 switches (like 3550, 4k
> sup3/4, cat6k msfc/native) has multiple SVIs , so you can call any one
> your management SVI depending on your network design. I can telnet to
> any SVI interface and mange the device as long as I have route to it.
>
> I think you may be confused from the CatOS and XL world ..where there is
> only one managment vlan interface ..(there may some exceptions which is
> not significant)
>
> Balaji
>
> frank.yu@japan.bnpparibas.com wrote:
>
> Balaji,
>
> I am little bit confused about management vlan now.
> According to your explanation, if we have one SVI configured on the
> switch then we can call it management vlan, well if we have several SVIs
> we
> can't link any vlan to management vlan.
> Am I understanding correctly? Thanks.
>
> Frank
>
> Internet
> bsivasub@cisco.com - 01/15/2003 01:20 PM
>
> To: Frank Yu
>
> cc: wangtao_sh, ccielab
>
> Subject: Re: Management VLAN in Cat3550?
>
> There is nothing like management vlan.... you can shut down the other
> vlans if you want so that only usuable interface is vlan3 so you can
> call it managemnet vlan. :)
>
> Balaji
>
> frank.yu@japan.bnpparibas.com wrote:
>
> Balaji,
>
> What if I asked to configure Vlan 3 as management vlan while I have
> some
> other SVIs on the switch. How can I achieve that?
> Any one follows? Thanks.
>
> Frank
>
> Internet
> bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
>
> Please respond to bsivasub@cisco.com
>
> Sent by: nobody@groupstudy.com
>
> To: wangtao_sh
>
> cc: ccielab
>
> Subject: Re: Management VLAN in Cat3550?
>
> you can have more than one vlan for management and routing on 3550 EMI
> unlike XL series.
> So configure another interface and you should be good to go.
>
> Balaji
>
> Wang Tao wrote:
>
> Hi all,
>
> I want to change the management VLAN in catalyst 3550 (EMI). But I
> could
>
> not
>
> find any command in manaual.
> Does someone know it?
>
> Thanks!
>
> Regards/tao
> .
>
> --
> ***************************************
> Balaji Sivasubramanian
> TAC LAN Techlogies WW SME
> Cisco Systems
> RTP, NC, 27709
> Ph: 919 392 7596
> E-mail: bsivasub@cisco.com
> URL: http://www-tac.cisco.com/~bsivasub
> ****************************************
> .
> This message and any attachments (the "message") is
> intended solely for the addressees and is confidential.
> If you receive this message in error, please delete it and
> immediately notify the sender. Any use not in accord with
> its purpose, any dissemination or disclosure, either whole
> or partial, is prohibited except formal approval. The internet
> can not guarantee the integrity of this message.
> BNP PARIBAS (and its subsidiaries) shall (will) not
> therefore be liable for the message if modified.
>
> ---------------------------------------------
>
> Ce message et toutes les pieces jointes (ci-apres le
> "message") sont etablis a l'intention exclusive de ses
> destinataires et sont confidentiels. Si vous recevez ce
> message par erreur, merci de le detruire et d'en avertir
> immediatement l'expediteur. Toute utilisation de ce
> message non conforme a sa destination, toute diffusion
> ou toute publication, totale ou partielle, est interdite, sauf
> autorisation expresse. L'internet ne permettant pas
> d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> filiales) decline(nt) toute responsabilite au titre de ce
> message, dans l'hypothese ou il aurait ete modifie.
>
> --
> ***************************************
> Balaji Sivasubramanian
> TAC LAN Techlogies WW SME
> Cisco Systems
> RTP, NC, 27709
> Ph: 919 392 7596
> E-mail: bsivasub@cisco.com
> URL: http://www-tac.cisco.com/~bsivasub
> ****************************************
>
> (See attached file: C.htm)
>
> This message and any attachments (the "message") is
> intended solely for the addressees and is confidential.
> If you receive this message in error, please delete it and
> immediately notify the sender. Any use not in accord with
> its purpose, any dissemination or disclosure, either whole
> or partial, is prohibited except formal approval. The internet
> can not guarantee the integrity of this message.
> BNP PARIBAS (and its subsidiaries) shall (will) not
> therefore be liable for the message if modified.
>
> ---------------------------------------------
>
> Ce message et toutes les pieces jointes (ci-apres le
> "message") sont etablis a l'intention exclusive de ses
> destinataires et sont confidentiels. Si vous recevez ce
> message par erreur, merci de le detruire et d'en avertir
> immediatement l'expediteur. Toute utilisation de ce
> message non conforme a sa destination, toute diffusion
> ou toute publication, totale ou partielle, est interdite, sauf
> autorisation expresse. L'internet ne permettant pas
> d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> filiales) decline(nt) toute responsabilite au titre de ce
> message, dans l'hypothese ou il aurait ete modifie.
>
> --------------------------------------------------------------------
>
> There is nothing like management vlan.... you can shut down the other
> vlans if you want so that only usuable interface is vlan3 so you can call
> it managemnet vlan. :)
>
> Balaji
>
> frank.yu@japan.bnpparibas.com wrote:
>
> Balaji,
>
> What if I asked to configure Vlan 3 as management vlan while I have
> some
> other SVIs on the switch. How can I achieve that?
> Any one follows? Thanks.
>
> Frank
>
> Internet
> bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
>
> Please respond to bsivasub@cisco.com
>
> Sent by: nobody@groupstudy.com
>
> To: wangtao_sh
>
> cc: ccielab
>
> Subject: Re: Management VLAN in Cat3550?
>
> you can have more than one vlan for management and routing on 3550 EMI
> unlike XL series.
> So configure another interface and you should be good to go.
>
> Balaji
>
> Wang Tao wrote:
>
> Hi all,
>
> I want to change the management VLAN in catalyst 3550 (EMI). But I
> could
>
> not
>
> find any command in manaual.
> Does someone know it?
>
> Thanks!
>
> Regards/tao
> .
>
> --
> ***************************************
> Balaji Sivasubramanian
> TAC LAN Techlogies WW SME
> Cisco Systems
> RTP, NC, 27709
> Ph: 919 392 7596
> E-mail: bsivasub@cisco.com
> URL: http://www-tac.cisco.com/~bsivasub
> ****************************************
> .
> This message and any attachments (the "message") is
> intended solely for the addressees and is confidential.
> If you receive this message in error, please delete it and
> immediately notify the sender. Any use not in accord with
> its purpose, any dissemination or disclosure, either whole
> or partial, is prohibited except formal approval. The internet
> can not guarantee the integrity of this message.
> BNP PARIBAS (and its subsidiaries) shall (will) not
> therefore be liable for the message if modified.
>
> ---------------------------------------------
>
> Ce message et toutes les pieces jointes (ci-apres le
> "message") sont etablis a l'intention exclusive de ses
> destinataires et sont confidentiels. Si vous recevez ce
> message par erreur, merci de le detruire et d'en avertir
> immediatement l'expediteur. Toute utilisation de ce
> message non conforme a sa destination, toute diffusion
> ou toute publication, totale ou partielle, est interdite, sauf
> autorisation expresse. L'internet ne permettant pas
> d'assurer l'integrite de ce message, BNP PARIBAS (et ses
> filiales) decline(nt) toute responsabilite au titre de ce
> message, dans l'hypothese ou il aurait ete modifie.
>
> --
> ***************************************
> Balaji Sivasubramanian
> TAC LAN Techlogies WW SME
> Cisco Systems
> RTP, NC, 27709
> Ph: 919 392 7596
> E-mail: bsivasub@cisco.com
> URL: http://www-tac.cisco.com/~bsivasub
> ****************************************
>
> --
> ***************************************
> Balaji Sivasubramanian
> TAC LAN Techlogies WW SME
> Cisco Systems
> RTP, NC, 27709
> Ph: 919 392 7596
> E-mail: bsivasub@cisco.com
> URL: http://www-tac.cisco.com/~bsivasub
> ****************************************
> .
.



This archive was generated by hypermail 2.1.4 : Sat Feb 01 2003 - 07:33:50 GMT-3