topic Re: Vlan/switch setup best practice in Switches, Hubs, and Modems

Vlan/switch setup best practice

Joseph L. Casale — Fri, 14 Mar 2008 21:09:46 GMT

What is the argument for using a vlan other then the default ID-1 for production use and untagging all client ports into?

We are making a significant amount of changes and could undo this current config with the only additional overhead of reconfiguring some firewall setup.

Is it worth it?

Thanks!

Re: Vlan/switch setup best practice

Geir Olav Skei . — Mon, 17 Mar 2008 09:14:54 GMT

Hi,

One argument is the security concern with regards to using default vlan as a production VLAN.

Whenever a port reverts back to default setting, for example because you delete a test-vlan with one port in, it will be placed into the default VLAN.
Now if this port is easily accessible to outsiders, they will now have access directly into the production vlan - and that is not something one want. =)

Re: Vlan/switch setup best practice

Mohieddin Kharnoub — Mon, 17 Mar 2008 11:23:35 GMT

Hi

Yes, its worth it, changing default Vlan from Vlan1 is considered always as a best Practice.

In fact, Vlan1 should be an unused Vlan without IP address, and all Unused ports should stay in That Vlan as untagged, so its better for Security Concerns.

Good Luck !!!

Re: Vlan/switch setup best practice

Joseph L. Casale — Tue, 18 Mar 2008 15:45:17 GMT

Answers made good sense.

Re: Vlan/switch setup best practice

kavita24 — Tue, 02 Dec 2008 09:02:53 GMT

i have one question ..
we r deciding our new ip address scheme...
can u suggest shd we use the same vlan for all switches or diff vlan for each one?
which one is better and why?