About the Native Vlan and Management Vlan.

I wanted to know that Management vlan and Native vlan can be different vlan id or both should be same vlan id. Why should not be native vlan 1.

The use of a native VLAN is generally frowned upon now as there are some well known security exploits that leverage this untagged VLAN. Cisco often recommends setting the Native VLAN to an unused VLAN in your infrastructure in order to render it useless for attacks.
It is also recommended that you create a separate VLAN for your Management traffic and that this VLAN be tagged (therefore not a Native VLAN).
Native Vlan is the vlan which will be sent untagged even in Trunk links. Consider a Trunk link configured between two switches SWA and SWB, if a system in vlan1 of SWA is sending a frame via SWB, then this frame will be received as untagged by SWB, then switch B decides that the untagged frame is from native vlan 1 and handles accordingly. By default native vlan is 1, this can also be changed as per requirement.
Example: In the below figure if a IP phone and system are connected toa switch port as below, the the Phones will send its frames tagged with vlan 10 where as the frames sent by system will be untagged. So here the the corresponding switch port should be configured as native vlan 20. So that it can recognise and handle the frames from system and IP phone properly.
a
Management vlan is different, it means that this vlan will be used for management purposes like Logging into the switch for management, Monitoring the switch,collecting Syslog ans SNMP traps, etc will be done by management vlan IP. This also by default vlan 1 in cisco. So as Antony said the it is always a Best practice and security measure to not use the default vlan and use custom vlans.
Hope this helps !

Similar Messages

VLAN trunking, native vlan and management vlan

Hello all,
In our situation, we have 3 separate vlans: 100 for management vlan and 101 for data and 102 for voice.
We have an uplink which is trunked using .1Q. Our access ports has the data vlan as the native. Based on our design, what should be the native vlan for this uplink trunk? Should it be the management vlan or the data vlan? Thanks for your help.

To answer this question you must remember what the native vlan is. Native is where untagged packets are sent, i.e. packets without a dot1Q tag. It is there mainly for compatibility. On an access port it has no function while normal traffic is not tagged and sent to the vlan that is configured for the port. Traffic for the voice vlan is an exception to this general rule.
Native vlan setting only plays a role on trunk links where most of the traffic carries a tag. As explained, it is then used as the vlan for untagged traffic.
When you do not consider this a security breach, you may configure the data-vlan as native. Use another vlan (why not vlan1?) in the case where you want to isolate this traffic.
I find it good design practice to use the same native vlan throughout the network. This keeps things clear and it's better for anyone who is not completely obsessed with security. The latter kind of people can always find a reason to mess things up, both for themselves and for others;-)
Regards,
Leo

Users VLAN and Management VLAN

is it possible to separate two VLANs:
one is running for the users VLAN connects to the clients
one is for management purpose.
Is there a sample code available for access points, bridges, and switches?
I am really appreciated that

Hi,
You can configure VLANs on enterprise access points.
What you need to do is configure the access point with its managment IP address, set this as the native vlan and then add the other VLAN or VLANs.
Then on the switch that the access point is connected to you need to configure a trunk port and make sure that the native vlan is the same VLAN you set as native on the access point.
As an example if the Access point has an IP address for managment vlan 20, we set this VLAN as native and then we add the other VLAN or VLANs, and on the switch you configure the port as a trunk port with the same native VLAN 20.
Note, native vlan is the same as untagged vlan. When we confgure a trunk port this will tag all vlans except the native vlan or untagged vlan that needs to be the same between directly connected devices.

Cisco 3750x DHCP and Management VLAN

We use 3750x switches in the stack, it has management VLAN (IP Address and Gateway configured correctly). I can ssh to switch fine. However we also use this switch as DHCP server for a number of different VLANS. So, I would create a DHCP pool, interface in this VLAN. Now, if I'm in VLAN3 that gets DHCP address on this switch I'm not able to ssh to this switch via Management VLAN IP Address 192.168.5.253 (can ping it fine), but I can ssh into this switch using Interface IP Address from the VLAN that I'm sitting on 192.168.3.253. For example
ip dhcp excluded-address 192.168.3.253 192.168.3.254
ip dhcp excluded-address 192.168.5.253 192.168.5.254
ip dhcp pool VLAN_3
network 192.168.3.0 255.255.255.0
dns-server 8.8.8.8
default-router 192.168.3.254
ip default-gateway 192.168.5.254
interface Vlan3
description Test
ip address 192.168.3.253 255.255.255.0
interface Vlan5
description Management
ip address 192.168.5.253 255.255.255.0

Hi,
can you post "sh run"?

Record about my phone (bought in Verizon store and connected to Verizon for 4 years) has been corrupted and now I can not make any changes to my data plan. Several sessions with the technical support and management have not resolved this issue. Each time

Record about my phone (bought in Verizon store and connected to Verizon for 4 years) has been corrupted and now I can not make any changes to my data plan. Several sessions with the technical support and management have not resolved this issue. Each time technical people and top managers promised that this issue will be resolve tomorrow and they will cal me. Nothing happend!! I can not even cancel my service not just to upgrade it. Completely locked.
Any advice?
Thanks.
Alex.

Cannot figure out what your talking about since it makes no sense.
If you are the account owner you can go to the My Verizon web portal http://www.verizonwireless.com
You must log in with your cell number and your my Verizon portal password. Not the account pin.
Once there you can change your plan and services. However repeated incorrect login attempts will lock you out of the site. It a fraud prevention measure.
1-800-922-0204 call support with your cell number and or account number and account pin and they can assist you.
If you don't have the information then there is nothing they can do.
If you can verify who you are they may be able to reset your account access. But only if you are the account owner.
Good Luck

About the PIM(Personal Information Manager)

Hi
Hello friends
i will get very important information about the PIM(personal Information Manager)
that manages the personal database in Handheld devices such as PDA,Mobiles,Cells etc
also i heard that it (PIM) should be downloaded seperately i search many times on sun's product web but i don't get the PIM
please tell me where i can get downloaded it the PIM?

Well directly from the J2ME PIM website ( [http://developers.sun.com/mobility/apis/articles/pim/index.html|http://developers.sun.com/mobility/apis/articles/pim/index.html] ) is this statement:
"Personal information management (PIM) refers to the ability to manage in electronic form the kinds of personal data that broad classes of users want handy, such as appointment books, contact directories, and to-do lists."
We're talking about accessing the actual PIM applications on the device (i.e. the Calendar, Contact List, etc. native to the specific phone/pda/device).
the javax.microedition.pim package is an optional package, meaning it is not part of the core MIDP/CLDC APIs. So, yes, you have to download a separate package and place the library in your classpath in order to compile on your system.
Now the next problem you're going to run into is "does your target device support this optional package". There is a reference implementation for PocketPC OS from IBM that you can find here: [http://www-106.ibm.com/developerworks/library/j-pda-op|http://www-106.ibm.com/developerworks/library/j-pda-op] . However if you're trying to perform this on a cellphone (for example) the phone's J2ME implementation is going to have to have support for JSR 75 for this to work at all. I don't know where there is a definitive list of phones that support JSR 75, but I believe BlackBerry's with version 4.2 or newer (for example) do support this package. I believe some Motorla, Erickson, Nokia and other phones support this optional package.
I read somewhere that the following line of code should tell you whether a device supports JSR 75 or not:
System.getProperty("microedition.io.file.FileConnection.version"); If this returns null then the system does not. If it returns a non-null string, then it does at some level.
HTH

I downloaded the fifa 14 app last tear and i purchased the kick off and manager mode...I deleted it by mistake yesterday..and when i installed it today..the manager mode is locked...and DO I HAVE TO PURCHASE IT AGAIN ?

I downloaded the fifa 14 app last tear and i purchased the kick off and manager mode...I deleted it by mistake yesterday..and when i installed it today..the manager mode is locked...and DO I HAVE TO PURCHASE IT AGAIN ?

Hi there asvatth,
You may find the information in the article below helpful.
iTunes Store: About In-App Purchases
http://support.apple.com/kb/ht4009
If you lose your In-App Purchases because apps were accidentally deleted or you had to restore your device without a backup, you may be able to download some of your purchases again for free. See which types of In-App Purchases you need to purchase again or can redownload for free in the table:
Type
Download for free
Purchase Again
Consumable
X
Non-consumable
X
Non-renewing subscriptions
X
Auto-renewable subscriptions
X
To download an In-App Purchase again, you must download it from within the installed app using the same iTunes Store account name you used for the original In-App Purchase.
-Griff W.

N one of my 'playlists' in Itunes it comes up to about the 7th song and when finished skips to about the 47th song?, instead of going to

In one of my 'playlists' in Itunes it comes up to about the 7th song and when finished skips to about the 47th song?, instead of going to #8 What gives?

There is nothing wrong with the OS update.
Delete ALL your email accounts.
Restart Playbook
Put the accounts back and ensure they are all set with PUSH ON. Manual (push off) will burn battery.
Similarly delete your wifi connections and add back when required.
Turn off wifi is not connected to wifi.
Any "hunting for connection" in email or wifi will burn up battery.

I need some advice about the macbook pro and iPhone 5. I took a video on my iPhone and tried to email it it said it was too big to send? So i downloaded it to my macbook pro and tried to mail it to no avail? The macbook tells me the server won't let it th

I need some advice about the macbook pro and iPhone 5.
I took a video on my iPhone and tried to email it it said it was too big to send? So i downloaded it to my macbook pro and tried to mail it to no avail? The macbook tells me the server won't let it through other mail goes through any ideas how to resize it or what it might take to send it?

I agree with LowLister, the best option for you to share the video online is to upload it to your online storage account for example : Box, Dropbox, SkyDrive (All of them provide free storage beginning from 2GB).
You can upload the files which you want to share in this online storage and then they have sharing options in which you'll will get the link of the file to be sent and send the email. You're good to go!
Tip : You can store multiple files for backup purposes.

Can we unlock an iphone which one locked with an email address and password.I have no idea about the email address and password for the icloud

can we unlock an iphone which one locked with an icloud email address and password.I have no idea about the email address and password for the icloud.can any one help me about this.

It sounds like you are talking about an iPhone that has been Activation Locked. This article explains:
http://support.apple.com/kb/PH13695
If so, the iPhone can never be unlocked without the original Apple ID and password. This is an anti-theft measure.

I am trying to learn to use the "Add Spammer" and "Manage Spammer list" but can't find any reference material ?

I need to learn how to properly use the "Add Spammer" and "Manage Spammer List" functions and can find no documentation/explanation of these functions. Sites I list with the "Add Spammer" function continue to come into my mail box.
Thank you for your help

Use the Thunderbird built-in junk filter.
http://kb.mozillazine.org/Junk_Mail_Controls

What's happened about the Ovi contacts and the con...

Hi,
What's happened about the Ovi contacts and the contacts list ??
OMG, were deleted all the contacts suddenly !!! is a tragedy!!
also , Many users have reported me this problem
I wait for a Nokia Staff Reply
Real Name: Marco Amesty - Spanish Nokia Advisor. Follow me @elcoxx
DO NOT SPAM say thanks pressing the button

Well, yesterday I spent all day without contacts, and today I woke up with the contacts back!
i Think it is solved!
Real Name: Marco Amesty - Spanish Nokia Advisor. Follow me @elcoxx
DO NOT SPAM say thanks pressing the button

Heartbleed virus/vulnerability-I have been hearing about the "heartbleed vulnerability" and told to change all my passwords. Does this apply to Macs? I thought they could not get viruses and this was one of the reasons I got one.

I have been hearing about the "heartbleed vulnerability" and told to change all my passwords. Does this apply to Macs? I thought they could not get viruses and this was one of the reasons I got one.

See What is Heartbleed?
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

I have few questions to ask about the Expert Series and Valet Series

Hello.
I have few questions to ask about the Expert Series and Valet Series.
1. I see there aren't any print server/bridge/access point for these two new series. Do I have to use previous ones? Or the new ones are in planned in near future?
2. Do I "HAVE TO USE CONNECT SOFTWARE"? Can I just use web interface to do every setting that these routers features?
3. Does expert series routers support guest network and parental control?
4. When I look into informations of these router, some router doesn't give information about backward compatible to older standards. Do I have to consider that as they are backward compatible with older standards?
Ok, that's all for now.
If I need to ask more questions I will do that in this thread as reply

With the New Expert or the Valet Series Router, you still can use the Print Server / Bridge and Access Points.
Well with the Expert and Valet Series router, you have an option to User Cisco Connect Software or you can User Web Interface of the Router. But with the Cisco Connect Software you have an Advantage of creating a Guest Account and using Parental Control , which is not available using the Web Interface.
These both the routers are backward compatible and they can connect to your G Series Product.

I just have questions about the AirPort Express and how it works.

My household Wi-Fi is not the strongest in my room and I found out about the AirPort Express and I read the overvie, but I still have some questions on how it works, how its setup and other questions as well.

The AirPort Express will not wirelessly extend the signal from another router unless that router is also an Apple product.
Not sure what other questions you might have, but we'll try to answer if you want to ask.

About the Native Vlan and Management Vlan.

Similar Messages

Maybe you are looking for