Default VLAN - best practice

[localzuk]

Just a quick question about best practice with the default VLAN for a network.

 

I understand the idea of separating out switch management into VLAN 1, but want to know if other schools do this? ie. reserve VLAN 1 just for switch/network management traffic (so, wireless APs in this too I suppose)?

[Iain.Faulkner]

I couldn't tell you if it's best practice or not...but we don't use the default VLAN for this. We have separate VLAN's for switch management and also wireless management (for which we use ID 10 & 20 respectively).

[Davit2005]

Seperate vlan for switch management here which is also tagged on uplinks with switch management only from authorized IP's.

 

We don't use vlan 1 at all here and it is taken off any up links as part of documented switch config procedure.

Edited May 10, 2017 by Davit2005

[FN-GM]

The Cisco stance in the certification is not to use VLAN 1 at all. By default dot 1 q uses vlan 1 as its native VLAN so that would need to be changed. You should also not use the Native VLAN for anything else.

[IanT]

We always shut/disable default VLAN1 in are network designs.

[ellsandell]

As above - Cisco track is to not use VLAN 1 at all.