RE: ISL Trunking [7:30728]
I must disagree with VLAN 1 being the only administrative VLAN. It is simply the default VLAN. At a previous client I set up a DMZ switch with a management VLAN of 999. This was on a Cat5505. HTH Darren At 11:28 PM 1/2/2002 -0500, Mark Odette II wrote: Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30801t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking [7:30728]
True enough, the management VLAN doesn't have to be 1. Using 1 is reccomended however, because it is the default. -Original Message- From: Darren Crawford [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 03, 2002 12:32 PM To: [EMAIL PROTECTED] Subject: RE: ISL Trunking [7:30728] I must disagree with VLAN 1 being the only administrative VLAN. It is simply the default VLAN. At a previous client I set up a DMZ switch with a management VLAN of 999. This was on a Cat5505. HTH Darren At 11:28 PM 1/2/2002 -0500, Mark Odette II wrote: Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30812t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking [7:30728]
Cisco may recommend it but I believe it really depends on your perspective. For example, if your environment's policy is to have all of your ports enabled and ready for a connection, then it is conceivable that anyone could get onto your administrative rail by simply finding a jack to plug in to. Sniff the traffic, etc. On the other hand, if you lock down your switch ports it's not that big of an issue. Any way I've been in both types of environments and I guess it also depends on how security conscience the organization is. HTH Darren At 01:43 PM 1/3/2002 -0500, Hire, Ejay wrote: True enough, the management VLAN doesn't have to be 1. Using 1 is reccomended however, because it is the default. -Original Message- From: Darren Crawford [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 03, 2002 12:32 PM To: [EMAIL PROTECTED] Subject: RE: ISL Trunking [7:30728] I must disagree with VLAN 1 being the only administrative VLAN. It is simply the default VLAN. At a previous client I set up a DMZ switch with a management VLAN of 999. This was on a Cat5505. HTH Darren At 11:28 PM 1/2/2002 -0500, Mark Odette II wrote: Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30815t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking [7:30728]
Let me clarify my statement: ...Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. What I meant by this is that based on the Version of IOS/CAT OS, that it would not accept any other VLAN as the Administrative Vlan. I know for a fact that you can specify other Vlans as the Administrative Vlan on many of the CAT 5x00/6x00 switches. I just was suggesting that stranger things could happen for the lower-end switches that have low port density, and other types of limitations. After all, Cisco hasn't made a considerable effort to make ALL their switches run Native IOS or CAT OS... it's been a mix/match from all the competitors they've acquired! :) Mark Odette II ... who obviously doesn't have experience with EVERY catalyst switch on the market, and admits it readily. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darren Crawford Sent: Thursday, January 03, 2002 11:32 AM To: [EMAIL PROTECTED] Subject: RE: ISL Trunking [7:30728] I must disagree with VLAN 1 being the only administrative VLAN. It is simply the default VLAN. At a previous client I set up a DMZ switch with a management VLAN of 999. This was on a Cat5505. HTH Darren At 11:28 PM 1/2/2002 -0500, Mark Odette II wrote: Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30875t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking [7:30728]
Go into config mode go into the vlan interface you want to be the default vlan type manage voila conf t int vlan 24 manage end wri mem Mark Odette II wrote: Let me clarify my statement: ...Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. What I meant by this is that based on the Version of IOS/CAT OS, that it would not accept any other VLAN as the Administrative Vlan. I know for a fact that you can specify other Vlans as the Administrative Vlan on many of the CAT 5x00/6x00 switches. I just was suggesting that stranger things could happen for the lower-end switches that have low port density, and other types of limitations. After all, Cisco hasn't made a considerable effort to make ALL their switches run Native IOS or CAT OS... it's been a mix/match from all the competitors they've acquired! :) Mark Odette II ... who obviously doesn't have experience with EVERY catalyst switch on the market, and admits it readily. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darren Crawford Sent: Thursday, January 03, 2002 11:32 AM To: [EMAIL PROTECTED] Subject: RE: ISL Trunking [7:30728] I must disagree with VLAN 1 being the only administrative VLAN. It is simply the default VLAN. At a previous client I set up a DMZ switch with a management VLAN of 999. This was on a Cat5505. HTH Darren At 11:28 PM 1/2/2002 -0500, Mark Odette II wrote: Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources -- James D. Wilson, CCDA, MCP Sr. Network/Security Engineer non sunt multiplicanda entia praeter necessitatem William of Ockham (1285-1347/49) Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30882t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking [7:30728]
Guys, don't forget that VTP is using VLAN 1, and it cannot be configured to use some other vlan. Sasa Mark Odette II wrote: Let me clarify my statement: ...Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. What I meant by this is that based on the Version of IOS/CAT OS, that it would not accept any other VLAN as the Administrative Vlan. I know for a fact that you can specify other Vlans as the Administrative Vlan on many of the CAT 5x00/6x00 switches. I just was suggesting that stranger things could happen for the lower-end switches that have low port density, and other types of limitations. After all, Cisco hasn't made a considerable effort to make ALL their switches run Native IOS or CAT OS... it's been a mix/match from all the competitors they've acquired! :) Mark Odette II ... who obviously doesn't have experience with EVERY catalyst switch on the market, and admits it readily. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darren Crawford Sent: Thursday, January 03, 2002 11:32 AM To: [EMAIL PROTECTED] Subject: RE: ISL Trunking [7:30728] I must disagree with VLAN 1 being the only administrative VLAN. It is simply the default VLAN. At a previous client I set up a DMZ switch with a management VLAN of 999. This was on a Cat5505. HTH Darren At 11:28 PM 1/2/2002 -0500, Mark Odette II wrote: Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30887t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking [7:30728]
Leigh Anne Chisholm wrote: -- Leigh Anne Advice to all women: Never let your man's mind wander, it's too small to be out alone. Jeez Leigh Anne, didn't you get what you wanted for Christmas??? ;) time to wander... David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30780t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISL Trunking [7:30728]
Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30728t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking [7:30728]
You can clear the trunks for anything 2-1005 and 1025-4096 (6000 series) but I don't believe it will allow you to do that with the default VLAN. HTH Darren At 06:59 PM 1/2/2002 -0500, Ali, Abbas wrote: Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: Lucent Technologies NetworkCare Professional Services http//www.lucent.com/netcare/ Darren S. Crawford - CCNP, CCDP, CCIE TBA Northwest Region - Sacramento Office Voicemail (916) 859-5200 x310 Pager (800) 467-1467 mailto:[EMAIL PROTECTED] x$:0`0:$xx$:0`0:$xx$:0`0:$xx$: You always have time for things you put first - Tucker Resources Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30739t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking [7:30728]
Ali- If my memory serves correct, you must first specify another VLAN as your administrative VLAN before you can drop VLAN 1 from the trunk...otherwise, your trunk would be orphaned (become unmanageable) and you wouldn't be able to control it anymore- until you cleared the config that is. Some Catalysts may just simply not allow dropping VLAN 1, as it can be the only Administrative Vlan. If you have a SmartNet contract, you might just call TAC to get a quick and straight forward answer to this. The call will probably last you 5 minutes +/-. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 5:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30759t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking [7:30728]
Why would you want to do that? What practical reason would you have? Before doing so, ask yourself what purpose VLANs 1, 1002, 1003, 1004, and 1005 serve. In doing so, you might answer your own question. -- Leigh Anne Advice to all women: Never let your man's mind wander, it's too small to be out alone. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ali, Abbas Sent: Wednesday, January 02, 2002 4:59 PM To: [EMAIL PROTECTED] Subject: ISL Trunking [7:30728] Is it possible to remove default Vlans 1, 1002-1005 from ISL trunking? I am setting up a ISL trunking between Catalyst 2924 and 3640 router. I am running IOS on Catalyst XL 2924 and only want certain vlan on my link. IOS does it, but then it also inserts default vlan 1 and 1002-1005 automatically. The IOS accepts the remove command to remove vlans from the current list, but will not remove default vlans. Ali Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30760t=30728 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]