Native Vlan use as a Management Vlan - unsecure ?

[Big Evil]

If you take the default Vl1 - which is the native and mgmt. Is not best practice to have them the same. Most designs have the management VL as another VL (although i admit i have seen many places that keep everything on VL1).


Best practice says shut down VL1, have the native as something else and the mgmt as something else. Further, each connection (trunk) between other switches should also use another native for further security. Cisco does recommend not have the native VL on trunks, in case an attacker hops from an access port to a trunk's native VL by sending frames that begin with DOT1Q headers. l though Cisco has proven this to be ineffective on Cisco switches.

HTH.