It is considered good form to leave VLAN1 only for management, although in
small networks, it may not be as "critical".  In a large network, however,
doing this becomes very important.  Here's some reasons why:

1) Keeps most/all SNMP traffic off of data VLANs
2) Adds an extra level of security, especially if you don't route to VLAN1
3) Most important - keeps all of the host-generated broadcasts from the
switches, which serves to reduce CPU load on the switches by not having to
look at every single broadcast

There are other reasons, but these are compelling enough to support this
philosophy.

Rik

""David spalding"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What? you want move ALL workstations of VLAN 1 as this is amanagment VLAN
> and only switch/routers should use this. For your info, I have assigned
> quite a lot of PC to VLAN 1 ports and I used VLAN 1 ports to connect to
the
> WAN via routers too.  Will it slow down the network?? why??
>
> somenosuke> sh vlan
> VLAN Name                             Status    IfIndex Mod/Ports, Vlans
> ---- -------------------------------- --------- -------
> ------------------------
> 1    default                          active    5       1/1-2
>                                                         3/5-17
>                                                         4/1-6
>                                                         5/1-6
> 2    VLAN0002                         active    83      3/18-19
>                                                         4/7-17
>                                                         5/7-17
> 3    VLAN0003                         active    84      3/20-21
>                                                         4/18-24
>                                                         5/18-24
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> Below are the sh int output, VLAN 2 have been discommisioned.  Is that
> normal??
>
> SOMENOSUKE>sh int
> Vlan1 is up, line protocol is up
>   Hardware is Cat5k Virtual Ethernet, address is 0090.92fd.9400 (bia
> 0090.92fd.9400)
>   Description: "XXXX"
>   Internet address is 100.100.45.253/24
>   MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, rely 255/255, load 1/255
>   Encapsulation ARPA, loopback not set, keepalive set (10 sec)
>   ARP type: ARPA, ARP Timeout 04:00:00
>   Last input 00:00:00, output 00:00:00, output hang never
>   Last clearing of "show interface" counters never
>   Queueing strategy: fifo
>   Output queue 0/40, 0 drops; input queue 0/75, 0 drops
>   5 minute input rate 115000 bits/sec, 43 packets/sec
>   5 minute output rate 125000 bits/sec, 41 packets/sec
>      331535286 packets input, 3135729531 bytes, 0 no buffer
>      Received 7547855 broadcasts, 0 runts, 0 giants, 0 throttles
>      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
>      451577502 packets output, 4089081283 bytes, 0 underruns
>      0 output errors, 0 collisions, 1 interface resets
>      0 output buffer failures, 0 output buffers swapped out
> Vlan2 is up, line protocol is up
>   Hardware is Cat5k Virtual Ethernet, address is 0090.92fd.9400 (bia
> 0090.92fd.9400)
>   Internet address is 100.100.170.253/24
>   MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, rely 255/255, load 1/255
>   Encapsulation ARPA, loopback not set, keepalive set (10 sec)
>   ARP type: ARPA, ARP Timeout 04:00:00
>   Last input 00:00:00, output 00:00:02, output hang never
>   Last clearing of "show interface" counters never
>   Queueing strategy: fifo
>   Output queue 0/40, 0 drops; input queue 0/75, 0 drops
>   5 minute input rate 0 bits/sec, 0 packets/sec
>   5 minute output rate 0 bits/sec, 0 packets/sec
>      33157120 packets input, 103412590 bytes, 0 no buffer
>      Received 533647 broadcasts, 0 runts, 0 giants, 0 throttles
>      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
>      33438811 packets output, 2522506402 bytes, 0 underruns
>      0 output errors, 0 collisions, 1 interface resets
>      0 output buffer failures, 0 output buffers swapped out
> Vlan3 is up, line protocol is up
>   Hardware is Cat5k Virtual Ethernet, address is 0090.92fd.9400 (bia
> 0090.92fd.9400)
>   Internet address is 100.100.171.253/24
>   MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, rely 255/255, load 1/255
>   Encapsulation ARPA, loopback not set, keepalive set (10 sec)
>   ARP type: ARPA, ARP Timeout 04:00:00
>   Last input 00:00:00, output 00:00:03, output hang never
>   Last clearing of "show interface" counters never
>   Queueing strategy: fifo
>   Output queue 0/40, 0 drops; input queue 0/75, 0 drops
>   5 minute input rate 125000 bits/sec, 42 packets/sec
>   5 minute output rate 110000 bits/sec, 40 packets/sec
>      409420811 packets input, 1385306767 bytes, 0 no buffer
>      Received 1232865 broadcasts, 0 runts, 0 giants, 0 throttles
>      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
>      277329303 packets output, 3156818548 bytes, 0 underruns
>      0 output errors, 0 collisions, 1 interface resets
>      0 output buffer failures, 0 output buffers swapped out
> SOMENOSUKE>
>
>
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> Ya,.. our trunks are 100M and FD
> somenosuke> sh port 3/1
> Port  Name               Status     Vlan       Level  Duplex Speed Type
> ----- ------------------ ---------- ---------- ------ ------ -----
> ------------
> 3/1                     connected  trunk      normal   full   100
> 10/100BaseTX
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>
>
>
>
> >From: "Stephen Skinner" <[EMAIL PROTECTED]>
> >Reply-To: "Stephen Skinner" <[EMAIL PROTECTED]>
> >To: [EMAIL PROTECTED], [EMAIL PROTECTED]
> >Subject: Re: what's the RSM utilization and what slow down network?
> >Date: Mon, 09 Apr 2001 08:33:07 -0000
> >
> >first thing to do is check to see what is going on ......
> >
> >go onto the rsm and do a show interface....this sholud list all VIRTUAL
> >interface`s and see what is the amount of "Packets per second" going
> >through
> >interface.
> >
> >also check "5 mins traffic"...
> >
> >you can download from "www.solarwinds.com" there package`s...in eval
> >
> >go for the professioinal edition ...it has a tool called CPU load ...this
> >will give you an OVERALL picture of your RSM (aslong as you have assigned
> >it
> >an IP address)...in real time...
> >also has "bandwidth Monitor" ..which can monitor VIRTUAL and REAL
> >interfaces...(again need ip address)
> >
> >in order to fix this we need to know were all the traffic is
> >
> >FIRST good thing to do is move ALL workstations of VLAN 1 ...this is a
> >managment VLAN and only switch/routers should use this .......
> >ALSO your trunks are they fibre or are they 100 meg....are your
> >workstations
> >100meg ...if so to increase speed .....ETHERCHANNELL 3 or 4 TP ports for
> >3-400 meg throughput.
> >
> >this is a good start ....try this and report back to the list ...and we
> >will
> >go from there...
> >
> >HTH steve
> >>From: "David spalding" <[EMAIL PROTECTED]>
> >>Reply-To: "David spalding" <[EMAIL PROTECTED]>
> >>To: [EMAIL PROTECTED]
> >>Subject: what's  the RSM utilization and what slow down network?
> >>Date: Mon, 09 Apr 2001 07:49:58 -0000
> >>
> >>Hi...
> >>
> >>I need to solve a network slowness problem.  First, let me tell you
about
> >>our network.  All our PCs are connected to 2 X 5500 switches with RSM
and
> >>divided into 3 VLANs 1,2,3 on each swtich.  Both switches are connected
to
> >>each other via trunks and HSRP configured.  VLANs are routed via RSM in
> >>5500s.  By right, implementation of VLAN can increase the performance
and
> >>speed, and 5500 switch also a high end switches. But our network is very
> >>SLOW.  All parameter have been checked including the duplex type and
speed
> >>of the ports match with NIC.  I suspect can it be the bottleneck of
> >>routing
> >>process in RSM due to overwhelming packet for routing? Each 5500 are
> >>connected about 40 PCs.  How to determined the utilization of RSM ? what
> >>is
> >>the limit?
> >>
> >>Besides,  both 5500 are connected to the company WAN via two 1700
routers.
> >>And our network is extremely slow when accessing the WAN especially on
the
> >>Citrix traffic although we have prioritize the citrix traffic. I don't
> >>know
> >>what is the reason?  We have two links 128K, and 256K, it should be
fast.
> >>I
> >>doubt whether the bandwidth is correct or not?  When I see the output of
> >>#sh
> >>interface as shown below.  Can u say that it is 256K ?
> >>
> >>MTU 1500 bytes, BW 256 Kbit, DLY 20000 usec
> >>
> >>I heard from my friend that Cisco router is poor in handling citrix and
> >>netbios traffic, is that true??  We are using OSPF in our WAN, but RIP
in
> >>RSMs.  Could the difference in routing protocol slow down the network?
> >>
> >>
>
>>_________________________________________________________________________
> >>Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com.
> >_________________________________________________________________________
> >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to