Cisco Catalyst Switch and VLAN

[azev]

I got a question about cisco catalsyt switch 2948g and VLAN setting...........
I set the IP of the swith 192.168.1.254/24. All workstation can ping the switch..........
Then I setup 4 vlan with 12 port each...... now nothing can ping the switch...........
Then only accessable way to the switch is via console port. I would like to be able to telnet to the switch from any workstation I am from.... Is this possible?? maybe I did something wrong here??

Thankx

 

[spidey07]

the ip address (management address) of the switch defaults to vlan1. if all machines are on vlan1 then you'll be able to communicate with the management address (192.168.1.254/24) because the are on the same IP network/VLAN.

if you create another vlan you now have TWO separate networks (two IP nets). you'll need a router for the two vlans to communicate.

hope this helps. generally the only reasons to segment into vlans is to reduce broadcasts or for security.

you can check you assignments with "show vlan". check management interfaces with "show int"

 

[Santa]

As spidey mentioned.. since you segmented off your ports into seperate VLANs make sure that you actually assign seperate subnets to each VLAN. You shouldn't have the same subnets on multiple VLANs because this will break how the packets are routed.

Once you assign the differnt VLANs to seperate subnets it makes perfect sense why you shouldn't/can't connect to the managment address of the switch without a router routing the traffic between your PC VLAN and the Switch's VLAN

 

[azev]

I understand all that now. Is there any way to move the management address from default vlan 1 to other vlan??
I dont like the default name, since I cannot rename it, so That is why I create other 4 other vlan of 12 ports.......
So basicly, If no ports are assign to vlan1 (Default) I will not be able to access the management address??

Thanks again

 

[spidey07]

type "set int sc0" for syntax of the command.

you can move the management interface to another vlan just be aware there are some consequences to doing this in a trunking or VTP environment. best to leave the management interface in the default vlan.

you'll still need a router for the separate vlans to communicate.