Changing Management Vlan

Question

Hi I need to change the vlan of my management network and had a few questions. I have two cores (4507's) that i created the new vlan on and started to add the vlan to the access switches (2960's) throughout the campus. is it ok to setup the new vlan and give it an Ip address while still leaving the old one in? will this cause any issues? i will eventually take the old one out once im confident everything is stable. Also, Is there anything else i might have missed in creatin the new vlan? i pretty much just copied anything that was in the config for the old one.
thanks
Mike

Answer 1

Mike
If the config at the top is from your 4500s then it looks like you are setting the STP priority for all vlans on those switches so nothing to worry about.
So assuming you have setup the vlan 4 interfaces on the 4500 with HSRP etc. then -
1) login to the 4500. If you work from the 4500 then the default gateway etc. on the access switch doesn't matter because you are in the same vlan ie. vlan 4
2) make sure that vlan 4 is allowed on the trunk link. You need to make sure it is allowed on both ends
3)  Currently you have a vlan 241 SVI on each access switch. So you need to -
a) create a vlan 4 SVI and give it an IP. ie. -
int vlan 4
shut  <-- just to make sure it is not brought up yet
ip address x.x.x.x <subnet mask>
At this stage that SVI should be down and the vlan 241 up. To see this do a "sh ip int brief" and it should show you the status of the vlan interfaces. 
b) do a "no shut" on the vlan 4 ie.
int vlan 4
no shut
one of two things will happen -
i) either both SVIs will still be up in which case you can then log out of the switch, log back in using the vlan 4 SVI IP and then shutdown the 241 SVI
or
ii) because the 241 SVI is up the vlan 4 SVI won't come up. If this is the case you will then need to shutdown the 241 SVI. When you do this you will automatically be logged out of the switch.
You should however then be able to log back in using the vlan 4 IP address because that SVI should have come up.  You must make sure you did the "no shut" under vlan 4 in the previous step.
If that all works and you are now logged in using the vlan 4 SVI IP then you can add -
"ip default-gateway x.x.x.x"  <-- where x.x.x.x is the HSRP VIP for vlan 4 on the 4500s.
Once you have done that you should be able to connect to the switch from a remote subnet eg. your PC for example.
Like i say, even if you do get locked out of the switch end user traffic will not be affected but you would then need to login locally to the switch to setup the new management vlan.
Let me know how it goes.
Jon