NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
neo998
Nov 27, 2020Aspirant
xs716T change management vlan id failed
I got a xs716t switch its F/W version is 7.0.0.20 my final goal is to make this switch's management vlan id change from 1 to 1029(which had vlan routing configured for remote access). somehow, a...
- Dec 02, 2020
There are never to many questions.
It does not make to much sense isolating the management VLAN to a dedicated network, and in the next step right away put up almost non-controlled short cut inter-VLAN routing on the switch. The idea of having a management VLAN is that you have some security appliance with firewall rules and probably additional authentication, some dedicated VPN, ... connecting to that management VLAN where in-band and out-of-band management ports, console servers, and so on where only people with physical access or strong authentication can gain access to.
schumaku
Nov 27, 2020Guru - Experienced User
Use a different port. The moment you change the PVID to the new management VLAN on the port you are connected to the computer is fully associated to the VLAN 1029 while the management VLAN is still VLAN 1 ...
Not sure what your idea is ref. routing for remote access.
Not sure what your idea is ref. routing for remote access.
neo998
Nov 30, 2020Aspirant
schumakuthanks for the hint!!
regarding to the remote access,
i meant i want to make vlan 1029 (management vlan) routable to other vlans, and access this xs716's management IP via other networks.
e.g. from internet to vlan 1030's gateway IP(10.30.0.254) and route to vlan 1029's gateway IP (10.29.0.254)then reach the XS716T management IP.
however, it seemed that intergace ip can't be assigned to management vlan and it became 0.0.0.0/0 automatically. I don't get it.
does anyone know how vlan routing was designed on this switch?
- schumakuNov 30, 2020Guru - Experienced User
neo998 wrote:however, it seemed that intergace ip can't be assigned to management vlan and it became 0.0.0.0/0 automatically.
Same place where you define the management VLAN, isn't it?
- neo998Dec 01, 2020Aspirant
oops, just discovered that the management vlan is not routable...terribly sorry about raising this dumb question.:smileyfrustrated:
alright, my final question is, how do i set configurations on xs716t to make the managemnt IP routable?(I would like to access xs716t remotely.)
or maybe it's not possible to do that??
thanks in advance! you helped so much!
- schumakuDec 01, 2020Guru - Experienced User
neo998 wrote:oops, just discovered that the management vlan is not routable...
Any source or reference for this limitation?
neo998 wrote:alright, my final question is, how do i set configurations on xs716t to make the managemnt IP routable?(I would like to access xs716t remotely.)
or maybe it's not possible to do that??
Define "remotely".... Any system on the management VLAN and it's subnet can by default reach the switch management, do SNMP, ...
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!