Friday, August 10, 2018

Dead Vlan with SVI but no IP Address vs No SVI

Specifically working with Dell N-Series Switches.

Is there effectively any difference between an interface with no Ip address vs no interface at all security-wise.

I'm using this vlan to park ports that are not in use.

The difference it makes to me is I will get an interface up/down log if the interface exists.

Sample output.

_______________________

configure

vlan 999

exit

slot 1/0 4 ! Dell EMC Networking N2048P

stack

member 1 4 ! N2048P

exit

logging console informational

logging monitor informational

interface vlan 1

exit

!

VS.

________________

configure

vlan 999

exit

slot 1/0 4 ! Dell EMC Networking N2048P

stack

member 1 4 ! N2048P

exit

logging console informational

logging monitor informational

interface vlan 1

exit

interface vlan 999

exit

!



No comments:

Post a Comment