Understanding (default) archiving and retention policies and tags

I am taking a look at archiving and policies and tags and am a bit confused.
If I look at the "Default Archive and Retention Policy", I see a lot of Tags assigned to this policy. On the Mailboxes tab, I see no mailboxes listed.
although no mailboxes are listed in there, are all users that (will) have archive enabled still using this default Policy?
I see a lot of Personal Tags in there assigned. 1 Month Delete, 1 Week Delete; Are all these tags active, or is the list you see there all tags that a user CAN personally use and assign to his folder?
For example, what does the tag do: "1 Month Delete", Personal Tag, Delete and Alllow Recovery, Age limit for Retention 30, Retention Enable True?
there is also a tag called "Default 2 year move to archive", with type All other folders in the mailbox. Does this mean that all users that have this policy assigned, that all their mail older than 2 years will be moved to their archive? Or can
the user enable this tag?
The longer I look at this list, the less I understand.... Maybe someone can give a short explanation?
Thanks!
Olaf

Hi,
For the question 1:
Yes. Exchange Setup creates the retention policy Default Archive and Retention Policy. When you enable a personal archive for a mailbox, the Default Archive and Retention Policy is automatically applied to the mailbox if it doesn't already have a retention
policy.
For the question 2:
Users can apply these personal tags to folders they create or individual items.
For the question 3:
First, we should know what the "Delete and Allow Recovery" retention action do.
Delete and Allow Recovery: This action emulates the behavior when the Deleted Items folder is emptied. Tags that have this action applied are known as deletion tags. When this action occurs, and deleted item retention is configured for the mailbox database
or the user, messages move to the Recoverable Items folder. The Recoverable Items folder (previously known as the dumpster) provides the user another chance to recover deleted messages.
So about the tag you mentioned above, it's a personal tag, when a mailbox item reaches its retention age(here is 30 days), the items will be deleted in the source folder and moved to the Recoverable Items folder.
For the question 4:
If you choose the type "All other folders in the mailbox", then this would be a Default Policy Tag (DPT). This DPT is applied to all other items where a RPT is not applied.
For example, if you have created a retention policy tag and apply it to default folder Inbox, then Inbox folder won't be affected by a default policy tag whose type is "All other folders in the mailbox".
Please note that a mailbox can't have more than one retention policy. If you later apply a retention policy to the mailbox, tags from the Default Archive and Retention Policy are no longer available to the mailbox.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Similar Messages

Archived video retention policies

Wondering if anyone has good links to video archive retention policies.
We are probably going to institute some sort of retention policies in the near future.
We will be keeping orginal tapes, and archiving the straight captures of the tapes.
We obviously will also store the fcp projects.
Also, we will be archiving the finished products.
Looking for others' policies so we can see what other edu's and coms are setting as rules for how long stuff is stored in each format.
thanks

I keep the tapes.
The FCP project files, stills, created graphics, project files and assets from applications like Motion and AE, music and sound effects...those I burn to DVD and archive. I also export a self contained movie of the final show...texted and textless and archive those to hard drive...and keep copies of the final output tapes.
I never back up the captured footage that I have the tapes for. I either keep the tapes, or if required by the network, send the tapes back to them....since they own them. If they want the project revisited and rebuilt, they need to send them back.
Shane

"Permanently Delete" fail in outlook client after setting up the "Archive and Retention Policy" in Exchange 2010

In Exchange 2010 server, we have setup a policy under "Default Archive and Retention Policy" as all messages under "Inbox", "Sent Items" and "Deleted Items" will be Permanently Delete after X months.
However, one of our client found that some of the email messages was still found under his "Deleted Items". All other email messages under her outlook client (2010) were successfully deleted according to the policy.
Is there any reason for this exception?
Thank you

Hi,
Based on your description, you created retention policy tags for Inbox, Sent Items and Deleted Items folders. Then you linked them to the default archive and retention policy
Default Archive and Retention Policy.
Please check if this issue affects all users.
Please create a different retention policy which is associated with these retention tags, and apply this policy to a test user to check result.
Best regards,
Belinda Ma
TechNet Community Support

Archive and Purge provisions in GRC suite

Hi,
I'm trying to understand the Archive and Purge options provided / offered by GRC suite but have very skeletal information. Can somebody help me on that front?
Balaji K

In a nutshell,purging is removal of data from a system or storage device with the intent that the data can not be reconstructed by any known technique. In GRC Suite purging has similar concept to purge incident stored after a long period of tie and storage (AACG). You can also purge snapshop or change tracking definitions in CCG. General rule of thumb, ensure you follow your company policies with regards to data archive and purging and access to these functionalities within the GRC Control Suite should be restricted.

Confusing Application of Archive and Retention Personal Tags and Policies

I created some custom personal tags and applied it to the retention policy assigned to my account and started the managed folder assistant on my mailbox and when I saw the new tags in Outlook, I applied personal tags at the folder level of all of the folders
in my Outlook 2010 profiles by right clicking on each folder, selecting Properties, then selecting Folder Policy, then selected the retention and archive policy I wanted and then clicked OK to save the settings.
After about 15 minutes, I had finished going through all the folders, I went back to look at the folder properties and instead of showing the custom policies I just set, they have "Use Parent Folder Policy" selected on the Policy tab for both Folder
Policy and Online Archive. It looks like the settings are not being saved/applied or they are reverting back to defaults. However, some messages show retention and archive dates and some messages are moving to my archive mailbox.
This is confusing to me, so this looks like it is going to generate a large amount of tech support calls when we roll this out and it will be difficult to explain to end users how this works.
Our retention policy does not contain any default archiving policy or retention policy on the Inbox (the 2 year default was not applied) to our policy. So mail in the Inbox is not automatically moved unless a user applies a personal tag to archive
and delete the messages.
How is this supposed to work and how long does it take for folder policies to be applied from personal tags and then work as expected in Outlook?

As for when the managed folder assistant runs, it depends on your Service Pack level. For Exchange 2010 SP1 and later, the retention policies run 24x7 with a throttling policy applied to the Mailbox Folder Assistant. Also, there is no guarantee
that the managed folder process will necessarily finish in the time allotted. In fact, there should be messages on the Exchange server side that document how many mailboxes were processed and I think, how many were not.
For the timing in general, if a tag is applied, my understanding is that with the default settings it could be up to a day, if not longer until things begin processing. It depends on what window you have for retention policies to process, what might
already be in the queue to process next, etc.
For the Start and End date question, my assumption would be that on the day that it is supposed to start, it will be placed in the queue to be processed as soon as possible, The same for the end date.
Hope that helps.
More good resources:
http://windowsitpro.com/blog/workcycles-and-managed-folder-assistant-mfa
http://technet.microsoft.com/en-us/library/bb123958(v=exchg.141).aspx
http://blogs.technet.com/b/samdrey/archive/2011/11/16/exchange-2010-retention-policy-tag-not-available-immediately-after-definition-in-emc.aspx
JAUCG - Please remeber to mark replies as helpful if they were or as answered if I provided a solution.

Cannot Assign Archive and Retention Policies in Outlook 2010

We are having problems figuring out how we enable Archiving and Retention tags in Outlook. We have a new Exchange 2010 server with an Enterprise license key. We have run Microsoft Office professional plus 2010 on all of our clients (licensed through
our volume license service agreement). We have configured an Archive mailbox store and assigned accounts to use that store. The archive mailbox appears in the users Outlook, but they cannot assign policies to folders or items. The ribbon does not show the
option. I can see that it is configured to be part of the ribbon (when customizing the ribbon), but the option is not available to the user to actually select. I see user tags assigned to the user in Exchange, so I am at a loss as to where else to look for
the problem.
I see lots of documentation that says this is a licensing problem, but I am running the right components and think I have the right licensing. Is there a trouble shooting document or things I can check to make sure I have everything the way I need it to
be?

We found our own answer on this. Not sure why, but we had to use powershell to start the Managed Folder Assistant for the user name we had configured:
Start-ManagedFolderAssistant -identity <username>
My guess is that if we had waited long enough this would have resolved itself.

NEW 9I RMAN: BACKUP OPTIMIZATION AND RETENTION POLICIES

제품 : RMAN
작성날짜 : 2004-05-20
NEW 9I RMAN: BACKUP OPTIMIZATION AND RETENTION POLICIES
=======================================================
오라클 9i RMAN 에서는 백업을 보다 효율적으로 할 수 있는 기능을 보강 했다.
지금 소개할 "Retention Policies" 기능을 통해서 보다 효율적인 RMAN 백업
전략을 세울 수 있다.
1. 백업 화일 최적화 방법 (Backup File Optimization)
백업 화일 최적화란 백업에 소요되는 공간을 최소화 하는 전략이다. RMAN
백업시에 같은 정보 (dbid, checkpoint, and resetlogs data 등등) 를 가지고 있는
화일이 이미 존재하는 백업 셋 내부에 있는지 체크하게 된다. 만일 같은 화일이
이미 백업 되어 있다면 BACK UP 명령은 해당 화일에 대해서는 백업을 하지 않게
된다.
이때 같은 화일이라고 판단하는 기준은 다음과 같다.
* Datafile: 같은 DBID, checkpoint SCN, resetlogs SCN 과 time. 데이타 화일은
반드시정상적으로 offline 되었거나, read-only 이거나, 또는 정상적 으로 close
되어야 함.
* Archived redo log: 같은 thread, sequence number, 그리고 같은 Resetlogs
SCN 과 time.
* Backup Set: 같은 Backup Set recid 와 stamp.
RMAN 이 백업을 수행하다가 위와 같은 조건의 화일이 이미 존재함을 확인하면
이것은 건너뛰게 될 화일의 대상이다. 하지만 이때 바로 Skip 을 결정하지 않고
정해진 Retention Policies 를 조사 한후에 Skip 여부를 결정 하게 된다.
만일 백업 명령에 DELETE INPUT option 이 사용되면 RMAN 은 백업이 Skip
되어도 화일을 지우게 된다.
RMAN 은 모든 화일에 대한 백업이 Skip 되어도 에러메시지나 경고를 보내지
않는다.
그러나 만일 데이터 화일에 대한 백업이 recovery policy window 보다 오래
된 것 이면 RMAN 은 새로운 백업 화일을 만들기 위해서 화일을 백업 하게 된다.
Note:
자체적인 expirations policy 를 가지고 있는 media manager 를 사용할 경우에는
이런 백업 최적화 정책을 사용하는 것에 신중을 기해야 한다.
백업 최적화 를 사용하기 위해서는 CONFIGURE 명령을 사용한다. CONFIGURE
명령은 명령 수행 이후에 이루어지는 모든 백업에 대해 적용이 된다.
예:
CONFIGURE BACKUP OPTIMIZATION ON; # default 는 OFF
2. Backup Optimization에 Retention Policies 적용 하기
Retention Policy 로 백업 최적화를 조절 할 수 있다. 그러나 retention policy를
사용하지 않기 위해서는 'CONFIGURE RETENTION POLICY TO NONE' 을
이용해서 명시적으로 retention policy를 사용하지 않는다고 해야 한다. 디폴트로
REDUNDANCY = 1 이 적용 된다.
a. Recovery Window 를 이용한 Backup Optimization
만일 백업 최적화가 enable 되어 있고 Recovery Window 가 retention policy
적용을 위해서 셋업 되어 있으면 RMAN 은 항상 가장 최근의 백업이 Recovery
Window 보다 오래된 데이터 화일을 백업한다.
예를 들면 다음과 같은 조건에서
o Today is February 21.
o The recovery window is 7 days.
o The most recent backup of tablespace tbs2 to tape is January 3.
o Tablespace tbs2 is read-only.
2월 21일에 tbs2 테이블 스페이스를 테이프로 백업을 하라는 명령을 내리면,
RMAN 은 이 화일이 1월3일 이후에 변경 사항이 없는데도 불구 하고 백업을 하게
된다. 이로써 RMAN 은 최근 7일 동안에 최소한 한번의 백업이 있어야 된다는
조건을 지키게 된다.
이러한 작동 방식은 media manager 가 오래된 테잎을 제거 해도 되도록 한다.
그렇지 않다면, media manager 는 1월 3일의 백업을 무한정 가지고 있게 된다.
2월 21일에 tbs2 테이블 스페이스의 보다 최근의 백업을 만듦으로 써, RMAN 은
media manager 가 1월 3일에 백업 했던 테입을 지워도 되도록 한다.
b. Redundancy 를 이용한 Backup Optimization
Retention policy 로 Redundancy 를 채택 한 경우에 RMAN 은 Redundancy
에 1을 더한 갯수를 초과하는 오프라인 또는 읽기 전용 화일의 백업을 건너뛴다.
이때 'CONFIGURE RETENTION POLICY TO REDUNDANCY n' 명령어로
Redundancy의 갯수를 정한다.
아래와 같은 백업 최적화 명령을 내린 경우를 예로 든다:
CONFIGURE BACKUP OPTIMIZATION ON;
CONFIGURE RETENTION POLICY TO REDUNDANCY 2;
아카이브 테이블스페이스를 한번도 백업을 받은적이 없고 다음의 작업을 1주일
동안 한다고 하자.
Day Action Result Redundant Backup
Monday Take tablespace archive offline clean.
Tuesday Run BACKUP DATABASE. The archive tablespace is backed up.
Wednesday Run BACKUP DATABASE. The archive tablespace is backed up.
Thursday Run BACKUP DATABASE. The archive tablespace is backed up. Tuesday backup.
Friday Run BACKUP DATABASE. n/a Tuesday backup.
Saturday Run BACKUP DATABASE. n/a Tuesday backup.
Sunday Run DELETE OBSOLETE. The Tuesday backup is deleted.
Monday Run BACKUP DATABASE. The archive tablespace is backed up. Wednesday backup.
화요일, 수요일, 그리고 목요일의 백업은 아카이브 테이블 스페이스를 복사 해서
3개의 백업이 반드시 존재 해야 한다는 조건을 충촉 시킨다. (1+Redundancy)
금요일과 토요일에는 백업 최적화 조건에 의해서 아카이브 테이블 스페이스를
복사하지 않게 된다.
RMAN 은 일요일에는 유효기간이 지난 백업 화일을 지우게 된다. 따라서 화요일에
만든 백업은 삭제 된다. 월요일의 전체 백업은 3개의 백업이 존재 해야 한다는 조건
때문에 아카이브 테이블 스페이스를 또 다시 백업하게 된다. 이런 방식으로 백업
사이클이 진행 된다.
3. RETENTION POLICY NONE vs. DEFAULT
주의 사항:
'CONFIGURE RETENTION POLICY TO NONE' 과 'CONFIGURE RETENTION
POLICY TO DEFAULT' 는 그 의미가 같지 않다. 전자는 RETENTION POLICY
자체가 존재 하지 않는다는 의미 이며 백업은 expire 되지 않으며 'DELETE
OBSOLETE' 명령은 사용 할 수 없게 된다. 후자는 디폴트 RETENTION POLICY
(REDUNDANCY 1) 를 사용하게 된다는 의미 이다.
'DELETE OBSOLETE' 명령은 RETENTION POLICY 기준으로 expire 된 백업을
제거 하라는 명령이다.
보다 자세한 내용은 Oracle9i Recovery Manager User's Guide and
Reference의 Backup Optimization 부분을 참고 하시기 바랍니다.
--------------THE END----------------------------------------------

Hi,
Backup optimisation = +- do not copy empty space.
So, when you issue your BACKUP statement, it backs up the datafile. dot. nothing more.
In order to achieve what you're testing, look into TFM for BACKUP INCREMENTAL LEVEL x .
Regards,
Yoann.

Archive and Install--I don't understand it!

I'm a long time Mac user, but I have never done an A&I. I have to do one now according to the Apple support guys.
My questions:
Will I have to reinstall all my non-Apple applications?
Will I lose any files?
I've been reading old threads, but I still don't understand what happens if you do NOT check the "preserve users and network settings"? Will I lose my files?
I am backing up right now using iBackup, but frankly I don't have a clue how to restore if needed. Will I need to restore?
I know this isn't an erase and install, but I've always avoided all of this because the articles get so complicated.
Proving that I would never, ever make it on a PC...
Amy

"Will I have to reinstall all my non-Apple applications?"
Maybe some
"Will I lose any files?"
No
You can read all about an Archive and Install here:
http://docs.info.apple.com/article.html?artnum=107120

Difference between the archive and cache_archive in object tag

hello,
I am trying to find the difference between the archive and cache_archive for the object tag to use for applet.
I was going through this link which discusses the applet caching :
http://java.sun.com/javase/6/docs/technotes/guides/plugin/developer_guide/applet_caching.html
Especially : A sticky applet is placed in a disk cache created and
controlled by Java Plug-in which the browser cannot overwrite.How do i find what is the disk cache on my machine, and how different it is from the normal cache.
Currently i am using the normal archive parameter in object tag, and when i go to the java plugin control panel, i see all the downloaded jars.
But wanted to know how will it be different from using the cache_archive parameter.
Please advise,
Edited by: duskandawn on Jun 10, 2009 11:07 AM

Hi Juraj!
I feel the same too - Except the fact that SessionFacade is used to access EJBs while the VO are built as response objects (i.e. assembled) and unassembled by different web requests.
rnats

Custom Retention policies for default folders in Outlook

Hello,
The following are the steps I've taken to create a retention policy for a user.Exchange 2013, outlook 2013
The problem is that even if I create a retention tag for a default folder, I cannot implement it. I've gotten retention tags for user created folders to work, but not the default folders.
Login to microsoft 365 as exchange Administrator
Click Admin > Exchange
Click ‘Compliance Management’ on left side
Click ‘Retention Tags’
Create desired retention tag by folder (choose default folder or user created folder)
Save each tag as it is created
Click ‘Retention Policies’
Click ‘New’ to create a new policy
Add desired tags to policy and click save
To apply Retention Policy click ‘Recipients’ on left side
Click ‘mail boxes’
12.
Select user and click edit > mailbox features
13.
Select desired retention policy
14.
Save
Using this method I created a retention tag to delete mail in the junk mail folder after 14 days. I added the 14 day junk mail retention tag to a retention policy and applied
it to a user. But whenever I look at the junk mail folder it shows that the email will be deleted in 30 days --- not 14.
What am I doing wrong?

Hi,
We can try to use managed folders to specify retention settings for default folders such as Inbox, Deleted Items, and Sent Items. See:
http://technet.microsoft.com/en-us/library/ee364744(v=exchg.141).aspx
Also check this:
http://blogs.technet.com/b/theexchangeguy/archive/2012/06/04/retention-polices-and-tags-101.aspx
Since this question is more related to Exchange server, it's better to post your question to Exchange forum:
http://social.technet.microsoft.com/Forums/en-US/category/exchangeserver/
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents,
and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.
Thank you for your understanding.
Best Regards,
Steve Fan
TechNet Community Support

PI 7.11 AAE- Archiving and deletion

Dear All,
I just want to get confirm on my understanding regarding AAE archiving and deletion.
We have 98% interfaces using only AAE in our landscape.
I had set up XMLDAS archiving for AAE ( After fixing so many issues ) which archives the AAE messages into the local file system. So no issues in that .
Now my requirements are,
1) I would like to keep only 7 days of data in the database and 100 days of data in the file system
2) I do not want to set up any rules for Archiving /Deletion. It means i would like to archive messages older than 7 days in the file system.
The steps are ( My understanding )
1) Set the persistence duration in NWA to 7 days . So only 7 days of data will be stored in table BC_MSG.
2) Set up the archival job in the background processing through RWB without ANY RULES. So all processed messages older than 7 days will be achieved in the file system. And Archive will come with default delete procedure as well hence Archived messages will be deleted from table BC_MSG.
3) Deactivate the delete job . If i have the active delete job in the background processing, it will delete all messages older than 7 days which i don want. The deletion of messages from BC_MSG will be taken care as part of archival job.
Is my understanding correct?
Thanks
Rajesh

Hello, any know what did they do to delete the files from the file system after 100 days?
We have the same problem, when we deleted manualy some messages from SO AIX but they still appear from the RWB, and when we clic over them we get an error: ...... java.lang.Exception: XML DAS GET command failed with ErrorCode: 598; ErrorText: 598 GET: Error while accessing resource; response from archive store: 598 I/O Error java.io.FileNotFoundException: /usr/sap/PID/javaarch/archive/usr/sap/pid/x
Is there any way to delete messages without generating errors / inconcistencias?

URM 11g Archive and disposition rules

Hi guys,
Our customer is using Oracle URM 11g. They wants to archive a content into a external storage first. After sometime they want to destroy them from the external storage itself. That means upon the content reaches certain time in retention process, it should be processed though a Content Archive process and the metadata can be stored in the URM repository. Later on the document should be processed for physical distroyal.
For example
Document A --> (After 4 years of record creation) Archive the content into external storage and leave metadata --> (After 8 years of record creation) Destroy metadata and document from external storage.
Is the above retention process can be configured in URM retention process?
I remember that each retention process can have only one action. In the above requirement there is a need to use two actions? is it possible to do? Can we create two retention policies with diff period and actions to handle this requirement?
Please give us your valuable suggestions
Thanks & Regards
bless

Hello Srini:
Thanks for your response. Please find the requested information. I am a good follower of your threads in OTN when ever I get time.
Server Configuration:
Host Name Platform CPUs Cores Sockets Memory(GB)
CNRT Solaris[tm] OE (64-bit) 32 8 1 15.99
Key stats:
Cache Sizes Begin End
~~~~~~~~~~~ ---------- ----------
Buffer Cache: 1,456M 1,456M Std Block Size: 4K
Shared Pool Size: 1,664M 1,664M Log Buffer: 16,656K
Load Profile Per Second Per Transaction Per Exec Per Call
~~~~~~~~~~~~ --------------- --------------- ---------- ----------
DB Time(s): 12.6 0.4 0.01 0.01
DB CPU(s): 3.7 0.1 0.00 0.00
Redo size: 149,822.1 5,204.2
Logical reads: 46,034.3 1,599.0
Block changes: 886.7 30.8
Physical reads: 2,239.2 77.8
Physical writes: 339.9 11.8
User calls: 1,552.4 53.9
Parses: 368.8 12.8
Hard parses: 2.5 0.1
W/A MB processed: 10.2 0.4
Logons: 3.4 0.1
Executes: 952.5 33.1
Rollbacks: 6.9 0.2
Transactions: 28.8
Instance Efficiency Percentages (Target 100%)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Buffer Nowait %: 99.46 Redo NoWait %: 99.99
Buffer Hit %: 97.74 In-memory Sort %: 100.00
Library Hit %: 99.42 Soft Parse %: 99.33
Execute to Parse %: 61.28 Latch Hit %: 99.81
Parse CPU to Parse Elapsd %: 74.77 % Non-Parse CPU: 96.49
Shared Pool Statistics Begin End
Memory Usage %: 96.35 96.27
% SQL with executions>1: 68.89 74.88
% Memory for SQL w/exec>1: 68.21 76.37
I am seeing that the tablespace I/O AVG Read < 10 ms. I will take a look at links that you have recommended.
Regards,
Bala

Archiving and Delete Job

Hi,
I having problem in PI 7.0, SXMB_MONI XML Messages does shows only 1 day, Messages, I understand there are 2 jobs are running in background
Job: SAP_BC__XMB_DELETE Program: RSXMB_DELETE_MESSAGES
Job: SAP_BC_XMB_HIST_DELETE Program: RSXMB_DELETE_HISTORY
These jobs are running every 6 hrs.
Is that can I change the job time like delete messages every 1 or 2 weeks, is that my problem will be solve, or should I do someitng else... please tell me
Thanks in Advanced
Angeline Purnama

Hi Angeline,
Define the retention period for archiving and deletion in SXMB_ADM ->Define Interfaces for archiving and retention periods.
Re Shcedule the jobs using SXMB_ADM ->Schedule Archiving Jobs and Schedule Deletion Jobs.
Then check if the messages are getting deleted.
Revert if it works.
Regards
RAGHU

Hide all default Aplications and Programes

Hi
I need to Hide the default Programs and applications in windows and allow only company related applications such as ERP application, MS Office package,Acrobat/WinZip. When the user log in to the PC they should see only thees set of applications and rest all
need to be Hidden. I have 500+ computers connected to Windows 2008 Server Active directory .How do i do this with GP settings
Thanks
Kamal
System Admin Danube-

Hi Kamal,
In addition to Milos’s suggestion, we can try the following settings:
User Configuration > Policies > Administrative Templates > Start Menu and Taskbar\
Remove Default Programs link from the Start menu
Regarding this point, the following article can be referred to for more information.
Group Policy Setting of the Week 10 – Remove Default Programs link from the Start menu
http://www.grouppolicy.biz/tag/default-programs/
Best regards,
Frank Shen

VLANs - Default, Native and Management

Okay, please help in understanding the concept of VLANs by confirming whether the following is true or not, and based on that please help me to clear my doubts.
Default vlan - Always Vlan 1 on a switch and cannot be changed. It's purpose is to account the interfaces/ports which are not assigned with a vlan explicitly.
Native vlan - By default, it is also vlan 1 in a switch, but can be changed. Frames belonging to the native vlan are sent across the trunk link untagged. It's sole purpose is to provide back ward compatibility to the devices that doesn't understand frame tagging, as per 802.1q.
Management vlan- for managing switches.
Now my doubts ::
1. Can anyone please draw and explain a scenario in which NATIVe vlan comes into use, so that I can understand its purpose completely.
2. Management vlan- how they are created/assigned and is used ?

Hello
From a security perspective its best practice to not use vlan1 whatsoever as it well documented that all cisco switches default to this vlan.
Also it is best to define a native vlan that will be not used.
This is due to something I think is called ( double tagging or vlan hopping) - and it when a hacker knowing that vlan 1 is untagged and the default vlan can apply an outer tag to a encapsulated packet and send this into your network, then when this outer tag is stripped away the native vlan1 is seen by the switch which is excepted into your network.and sent on its merry way toward its destination.
So to negate this threat it is best to either tagged ALL vlans or define a unused native vlan and a tagged management vlan and not allow the native vlan to cross any trunks
example:
vlan 1 = shutdown
vlan 10 = management
vlan 11-49 - user vlans
vlan 50 = native
conf t
vlan 2-50
exit
int vlan 1
shut
int vlan 10
ip address x.x.x.x y.y.y.y.y
interface gig x/x
switchport trunk encapsulation dot1q
switchport trunk native vlan 50
switchport trunk allowed vlan 2-49
res
Paul

Understanding (default) archiving and retention policies and tags

Similar Messages

Maybe you are looking for