From: Balaji Siva (bsivasub@cisco.com)
Date: Wed Jan 15 2003 - 02:03:05 GMT-3
yeah you can do that..
Balaji
frank.yu@japan.bnpparibas.com wrote:
>Balaji,
>
> Thanks for the explaination, it's ver clear now. My question is if I
>were asked to make certain vlan as management vlan on a cat3550 which has
>several SVIs, does that mean I need to put some sort of access list to deny
>telnet coming from other vlan to the switch?
>
>Frank
>
>
>
>Internet
>bsivasub@cisco.com - 01/15/2003 01:32 PM
>
>To: Frank Yu
>
>cc: wangtao_sh, ccielab
>
>
>Subject: Re: Management VLAN in Cat3550?
>
>
>What is managemnt vlan for you ? These Layer 3 switches (like 3550, 4k
>sup3/4, cat6k msfc/native) has multiple SVIs , so you can call any one
>your management SVI depending on your network design. I can telnet to
>any SVI interface and mange the device as long as I have route to it.
>
>I think you may be confused from the CatOS and XL world ..where there
>is only one managment vlan interface ..(there may some exceptions which
>is not significant)
>
>Balaji
>
>frank.yu@japan.bnpparibas.com wrote:
>
>
>
>>Balaji,
>>
>> I am little bit confused about management vlan now.
>> According to your explanation, if we have one SVI configured on the
>>switch then we can call it management vlan, well if we have several SVIs
>>
>>
>we
>
>
>>can't link any vlan to management vlan.
>> Am I understanding correctly? Thanks.
>>
>>Frank
>>
>>
>>
>>Internet
>>bsivasub@cisco.com - 01/15/2003 01:20 PM
>>
>>To: Frank Yu
>>
>>cc: wangtao_sh, ccielab
>>
>>
>>Subject: Re: Management VLAN in Cat3550?
>>
>>
>>There is nothing like management vlan.... you can shut down the other
>>vlans if you want so that only usuable interface is vlan3 so you can
>>call it managemnet vlan. :)
>>
>>Balaji
>>
>>frank.yu@japan.bnpparibas.com wrote:
>>
>>
>>
>>
>>
>>>Balaji,
>>>
>>>What if I asked to configure Vlan 3 as management vlan while I have some
>>>other SVIs on the switch. How can I achieve that?
>>>Any one follows? Thanks.
>>>
>>>Frank
>>>
>>>
>>>
>>>Internet
>>>bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
>>>
>>>
>>>Please respond to bsivasub@cisco.com
>>>
>>>Sent by: nobody@groupstudy.com
>>>
>>>To: wangtao_sh
>>>
>>>cc: ccielab
>>>
>>>
>>>Subject: Re: Management VLAN in Cat3550?
>>>
>>>
>>>you can have more than one vlan for management and routing on 3550 EMI
>>>unlike XL series.
>>>So configure another interface and you should be good to go.
>>>
>>>Balaji
>>>
>>>
>>>Wang Tao wrote:
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>>Hi all,
>>>>
>>>>I want to change the management VLAN in catalyst 3550 (EMI). But I could
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>not
>>>
>>>
>>>
>>>
>>>
>>>
>>>>find any command in manaual.
>>>>Does someone know it?
>>>>
>>>>Thanks!
>>>>
>>>>Regards/tao
>>>>.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>--
>>>***************************************
>>>Balaji Sivasubramanian
>>>TAC LAN Techlogies WW SME
>>>Cisco Systems
>>>RTP, NC, 27709
>>>Ph: 919 392 7596
>>>E-mail: bsivasub@cisco.com
>>>URL: http://www-tac.cisco.com/~bsivasub
>>>****************************************
>>>.
>>>This message and any attachments (the "message") is
>>>intended solely for the addressees and is confidential.
>>>If you receive this message in error, please delete it and
>>>immediately notify the sender. Any use not in accord with
>>>its purpose, any dissemination or disclosure, either whole
>>>or partial, is prohibited except formal approval. The internet
>>>can not guarantee the integrity of this message.
>>>BNP PARIBAS (and its subsidiaries) shall (will) not
>>>therefore be liable for the message if modified.
>>>
>>> ---------------------------------------------
>>>
>>>Ce message et toutes les pieces jointes (ci-apres le
>>>"message") sont etablis a l'intention exclusive de ses
>>>destinataires et sont confidentiels. Si vous recevez ce
>>>message par erreur, merci de le detruire et d'en avertir
>>>immediatement l'expediteur. Toute utilisation de ce
>>>message non conforme a sa destination, toute diffusion
>>>ou toute publication, totale ou partielle, est interdite, sauf
>>>autorisation expresse. L'internet ne permettant pas
>>>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>>>filiales) decline(nt) toute responsabilite au titre de ce
>>>message, dans l'hypothese ou il aurait ete modifie.
>>>
>>>
>>>
>>>
>>>
>>>
>>--
>>***************************************
>>Balaji Sivasubramanian
>>TAC LAN Techlogies WW SME
>>Cisco Systems
>>RTP, NC, 27709
>>Ph: 919 392 7596
>>E-mail: bsivasub@cisco.com
>>URL: http://www-tac.cisco.com/~bsivasub
>>****************************************
>>
>>
>>
>>(See attached file: C.htm)
>>
>>
>>
>>
>>This message and any attachments (the "message") is
>>intended solely for the addressees and is confidential.
>>If you receive this message in error, please delete it and
>>immediately notify the sender. Any use not in accord with
>>its purpose, any dissemination or disclosure, either whole
>>or partial, is prohibited except formal approval. The internet
>>can not guarantee the integrity of this message.
>>BNP PARIBAS (and its subsidiaries) shall (will) not
>>therefore be liable for the message if modified.
>>
>> ---------------------------------------------
>>
>>Ce message et toutes les pieces jointes (ci-apres le
>>"message") sont etablis a l'intention exclusive de ses
>>destinataires et sont confidentiels. Si vous recevez ce
>>message par erreur, merci de le detruire et d'en avertir
>>immediatement l'expediteur. Toute utilisation de ce
>>message non conforme a sa destination, toute diffusion
>>ou toute publication, totale ou partielle, est interdite, sauf
>>autorisation expresse. L'internet ne permettant pas
>>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>>filiales) decline(nt) toute responsabilite au titre de ce
>>message, dans l'hypothese ou il aurait ete modifie.
>>
>>
>>
>>
>>------------------------------------------------------------------------
>>
>>There is nothing like management vlan.... you can shut down the other
>>vlans if you want so that only usuable interface is vlan3 so you can
>>call it managemnet vlan. :)
>>
>>Balaji
>>
>>frank.yu@japan.bnpparibas.com wrote:
>>
>>
>>
>>>Balaji,
>>>
>>> What if I asked to configure Vlan 3 as management vlan while I have
>>>
>>>
>some
>
>
>>>other SVIs on the switch. How can I achieve that?
>>> Any one follows? Thanks.
>>>
>>>Frank
>>>
>>>
>>>
>>>Internet
>>>bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
>>>
>>>
>>>Please respond to bsivasub@cisco.com
>>>
>>>Sent by: nobody@groupstudy.com
>>>
>>>To: wangtao_sh
>>>
>>>cc: ccielab
>>>
>>>
>>>Subject: Re: Management VLAN in Cat3550?
>>>
>>>
>>>you can have more than one vlan for management and routing on 3550 EMI
>>>unlike XL series.
>>>So configure another interface and you should be good to go.
>>>
>>>Balaji
>>>
>>>
>>>Wang Tao wrote:
>>>
>>>
>>>
>>>
>>>
>>>>Hi all,
>>>>
>>>>I want to change the management VLAN in catalyst 3550 (EMI). But I could
>>>>
>>>>
>>>>
>>>>
>>>not
>>>
>>>
>>>
>>>
>>>>find any command in manaual.
>>>>Does someone know it?
>>>>
>>>>Thanks!
>>>>
>>>>Regards/tao
>>>>.
>>>>
>>>>
>>>>
>>>>
>>>--
>>>***************************************
>>>Balaji Sivasubramanian
>>>TAC LAN Techlogies WW SME
>>>Cisco Systems
>>>RTP, NC, 27709
>>>Ph: 919 392 7596
>>>E-mail: bsivasub@cisco.com
>>>URL: http://www-tac.cisco.com/~bsivasub
>>>****************************************
>>>.
>>>This message and any attachments (the "message") is
>>>intended solely for the addressees and is confidential.
>>>If you receive this message in error, please delete it and
>>>immediately notify the sender. Any use not in accord with
>>>its purpose, any dissemination or disclosure, either whole
>>>or partial, is prohibited except formal approval. The internet
>>>can not guarantee the integrity of this message.
>>>BNP PARIBAS (and its subsidiaries) shall (will) not
>>>therefore be liable for the message if modified.
>>>
>>> ---------------------------------------------
>>>
>>>Ce message et toutes les pieces jointes (ci-apres le
>>>"message") sont etablis a l'intention exclusive de ses
>>>destinataires et sont confidentiels. Si vous recevez ce
>>>message par erreur, merci de le detruire et d'en avertir
>>>immediatement l'expediteur. Toute utilisation de ce
>>>message non conforme a sa destination, toute diffusion
>>>ou toute publication, totale ou partielle, est interdite, sauf
>>>autorisation expresse. L'internet ne permettant pas
>>>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>>>filiales) decline(nt) toute responsabilite au titre de ce
>>>message, dans l'hypothese ou il aurait ete modifie.
>>>
>>>
>>>
>>>
>>--
>>***************************************
>>Balaji Sivasubramanian
>>TAC LAN Techlogies WW SME
>>Cisco Systems
>>RTP, NC, 27709
>>Ph: 919 392 7596
>>E-mail: bsivasub@cisco.com
>>URL: http://www-tac.cisco.com/~bsivasub
>>****************************************
>>
>>
>>
>>
>
>--
>***************************************
>Balaji Sivasubramanian
>TAC LAN Techlogies WW SME
>Cisco Systems
>RTP, NC, 27709
>Ph: 919 392 7596
>E-mail: bsivasub@cisco.com
>URL: http://www-tac.cisco.com/~bsivasub
>****************************************
>
>
>
>(See attached file: C.htm)
>
>
>
>
>This message and any attachments (the "message") is
>intended solely for the addressees and is confidential.
>If you receive this message in error, please delete it and
>immediately notify the sender. Any use not in accord with
>its purpose, any dissemination or disclosure, either whole
>or partial, is prohibited except formal approval. The internet
>can not guarantee the integrity of this message.
>BNP PARIBAS (and its subsidiaries) shall (will) not
>therefore be liable for the message if modified.
>
> ---------------------------------------------
>
>Ce message et toutes les pieces jointes (ci-apres le
>"message") sont etablis a l'intention exclusive de ses
>destinataires et sont confidentiels. Si vous recevez ce
>message par erreur, merci de le detruire et d'en avertir
>immediatement l'expediteur. Toute utilisation de ce
>message non conforme a sa destination, toute diffusion
>ou toute publication, totale ou partielle, est interdite, sauf
>autorisation expresse. L'internet ne permettant pas
>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>filiales) decline(nt) toute responsabilite au titre de ce
>message, dans l'hypothese ou il aurait ete modifie.
>
>
>
>
> ------------------------------------------------------------------------
>
> What is managemnt vlan for you ? These Layer 3 switches (like 3550,
> 4k sup3/4, cat6k msfc/native) has multiple SVIs , so you can call any
> one your management SVI depending on your network design. I can
> telnet to any SVI interface and mange the device as long as I have
> route to it.
>
> I think you may be confused from the CatOS and XL world ..where there
> is only one managment vlan interface ..(there may some exceptions
> which is not significant)
>
> Balaji
>
> frank.yu@japan.bnpparibas.com wrote:
>
>>Balaji,
>>
>> I am little bit confused about management vlan now.
>> According to your explanation, if we have one SVI configured on the
>>switch then we can call it management vlan, well if we have several SVIs we
>>can't link any vlan to management vlan.
>> Am I understanding correctly? Thanks.
>>
>>Frank
>>
>>
>>
>>Internet
>>bsivasub@cisco.com - 01/15/2003 01:20 PM
>>
>>To: Frank Yu
>>
>>cc: wangtao_sh, ccielab
>>
>>
>>Subject: Re: Management VLAN in Cat3550?
>>
>>
>>There is nothing like management vlan.... you can shut down the other
>>vlans if you want so that only usuable interface is vlan3 so you can
>>call it managemnet vlan. :)
>>
>>Balaji
>>
>>frank.yu@japan.bnpparibas.com wrote:
>>
>>
>>
>>>Balaji,
>>>
>>> What if I asked to configure Vlan 3 as management vlan while I have some
>>>other SVIs on the switch. How can I achieve that?
>>> Any one follows? Thanks.
>>>
>>>Frank
>>>
>>>
>>>
>>>Internet
>>>bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
>>>
>>>
>>>Please respond to bsivasub@cisco.com
>>>
>>>Sent by: nobody@groupstudy.com
>>>
>>>To: wangtao_sh
>>>
>>>cc: ccielab
>>>
>>>
>>>Subject: Re: Management VLAN in Cat3550?
>>>
>>>
>>>you can have more than one vlan for management and routing on 3550 EMI
>>>unlike XL series.
>>>So configure another interface and you should be good to go.
>>>
>>>Balaji
>>>
>>>
>>>Wang Tao wrote:
>>>
>>>
>>>
>>>
>>>
>>>>Hi all,
>>>>
>>>>I want to change the management VLAN in catalyst 3550 (EMI). But I could
>>>>
>>>>
>>>>
>>>>
>>>not
>>>
>>>
>>>
>>>
>>>>find any command in manaual.
>>>>Does someone know it?
>>>>
>>>>Thanks!
>>>>
>>>>Regards/tao
>>>>.
>>>>
>>>>
>>>>
>>>>
>>>--
>>>***************************************
>>>Balaji Sivasubramanian
>>>TAC LAN Techlogies WW SME
>>>Cisco Systems
>>>RTP, NC, 27709
>>>Ph: 919 392 7596
>>>E-mail: bsivasub@cisco.com
>>>URL: http://www-tac.cisco.com/~bsivasub
>>>****************************************
>>>.
>>>This message and any attachments (the "message") is
>>>intended solely for the addressees and is confidential.
>>>If you receive this message in error, please delete it and
>>>immediately notify the sender. Any use not in accord with
>>>its purpose, any dissemination or disclosure, either whole
>>>or partial, is prohibited except formal approval. The internet
>>>can not guarantee the integrity of this message.
>>>BNP PARIBAS (and its subsidiaries) shall (will) not
>>>therefore be liable for the message if modified.
>>>
>>> ---------------------------------------------
>>>
>>>Ce message et toutes les pieces jointes (ci-apres le
>>>"message") sont etablis a l'intention exclusive de ses
>>>destinataires et sont confidentiels. Si vous recevez ce
>>>message par erreur, merci de le detruire et d'en avertir
>>>immediatement l'expediteur. Toute utilisation de ce
>>>message non conforme a sa destination, toute diffusion
>>>ou toute publication, totale ou partielle, est interdite, sauf
>>>autorisation expresse. L'internet ne permettant pas
>>>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>>>filiales) decline(nt) toute responsabilite au titre de ce
>>>message, dans l'hypothese ou il aurait ete modifie.
>>>
>>>
>>>
>>>
>>
>>--
>>***************************************
>>Balaji Sivasubramanian
>>TAC LAN Techlogies WW SME
>>Cisco Systems
>>RTP, NC, 27709
>>Ph: 919 392 7596
>>E-mail: bsivasub@cisco.com
>>URL: http://www-tac.cisco.com/~bsivasub
>>****************************************
>>
>>
>>
>>(See attached file: C.htm)
>>
>>
>>
>>
>>This message and any attachments (the "message") is
>>intended solely for the addressees and is confidential.
>>If you receive this message in error, please delete it and
>>immediately notify the sender. Any use not in accord with
>>its purpose, any dissemination or disclosure, either whole
>>or partial, is prohibited except formal approval. The internet
>>can not guarantee the integrity of this message.
>>BNP PARIBAS (and its subsidiaries) shall (will) not
>>therefore be liable for the message if modified.
>>
>> ---------------------------------------------
>>
>>Ce message et toutes les pieces jointes (ci-apres le
>>"message") sont etablis a l'intention exclusive de ses
>>destinataires et sont confidentiels. Si vous recevez ce
>>message par erreur, merci de le detruire et d'en avertir
>>immediatement l'expediteur. Toute utilisation de ce
>>message non conforme a sa destination, toute diffusion
>>ou toute publication, totale ou partielle, est interdite, sauf
>>autorisation expresse. L'internet ne permettant pas
>>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>>filiales) decline(nt) toute responsabilite au titre de ce
>>message, dans l'hypothese ou il aurait ete modifie.
>>
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> There is nothing like management vlan.... you can shut down the other
>> vlans if you want so that only usuable interface is vlan3 so you can
>> call it managemnet vlan. :)
>>
>> Balaji
>>
>> frank.yu@japan.bnpparibas.com wrote:
>>
>>>Balaji,
>>>
>>> What if I asked to configure Vlan 3 as management vlan while I have some
>>>other SVIs on the switch. How can I achieve that?
>>> Any one follows? Thanks.
>>>
>>>Frank
>>>
>>>
>>>
>>>Internet
>>>bsivasub@cisco.com@groupstudy.com - 01/15/2003 12:44 PM
>>>
>>>
>>>Please respond to bsivasub@cisco.com
>>>
>>>Sent by: nobody@groupstudy.com
>>>
>>>To: wangtao_sh
>>>
>>>cc: ccielab
>>>
>>>
>>>Subject: Re: Management VLAN in Cat3550?
>>>
>>>
>>>you can have more than one vlan for management and routing on 3550 EMI
>>>unlike XL series.
>>>So configure another interface and you should be good to go.
>>>
>>>Balaji
>>>
>>>
>>>Wang Tao wrote:
>>>
>>>
>>>
>>>>Hi all,
>>>>
>>>>I want to change the management VLAN in catalyst 3550 (EMI). But I could
>>>>
>>>>
>>>not
>>>
>>>
>>>>find any command in manaual.
>>>>Does someone know it?
>>>>
>>>>Thanks!
>>>>
>>>>Regards/tao
>>>>.
>>>>
>>>>
>>>--
>>>***************************************
>>>Balaji Sivasubramanian
>>>TAC LAN Techlogies WW SME
>>>Cisco Systems
>>>RTP, NC, 27709
>>>Ph: 919 392 7596
>>>E-mail: bsivasub@cisco.com
>>>URL: http://www-tac.cisco.com/~bsivasub
>>>****************************************
>>>.
>>>This message and any attachments (the "message") is
>>>intended solely for the addressees and is confidential.
>>>If you receive this message in error, please delete it and
>>>immediately notify the sender. Any use not in accord with
>>>its purpose, any dissemination or disclosure, either whole
>>>or partial, is prohibited except formal approval. The internet
>>>can not guarantee the integrity of this message.
>>>BNP PARIBAS (and its subsidiaries) shall (will) not
>>>therefore be liable for the message if modified.
>>>
>>> ---------------------------------------------
>>>
>>>Ce message et toutes les pieces jointes (ci-apres le
>>>"message") sont etablis a l'intention exclusive de ses
>>>destinataires et sont confidentiels. Si vous recevez ce
>>>message par erreur, merci de le detruire et d'en avertir
>>>immediatement l'expediteur. Toute utilisation de ce
>>>message non conforme a sa destination, toute diffusion
>>>ou toute publication, totale ou partielle, est interdite, sauf
>>>autorisation expresse. L'internet ne permettant pas
>>>d'assurer l'integrite de ce message, BNP PARIBAS (et ses
>>>filiales) decline(nt) toute responsabilite au titre de ce
>>>message, dans l'hypothese ou il aurait ete modifie.
>>>
>>>
>>
>>--
>>***************************************
>>Balaji Sivasubramanian
>>TAC LAN Techlogies WW SME
>>Cisco Systems
>>RTP, NC, 27709
>>Ph: 919 392 7596
>>E-mail: bsivasub@cisco.com
>>URL: http://www-tac.cisco.com/~bsivasub
>>****************************************
>>
>>
>
>--
>***************************************
>Balaji Sivasubramanian
>TAC LAN Techlogies WW SME
>Cisco Systems
>RTP, NC, 27709
>Ph: 919 392 7596
>E-mail: bsivasub@cisco.com
>URL: http://www-tac.cisco.com/~bsivasub
>****************************************
>
>
-- *************************************** Balaji Sivasubramanian TAC LAN Techlogies WW SME Cisco Systems RTP, NC, 27709 Ph: 919 392 7596 E-mail: bsivasub@cisco.com URL: http://www-tac.cisco.com/~bsivasub **************************************** .
This archive was generated by hypermail 2.1.4 : Sat Feb 01 2003 - 07:33:49 GMT-3