CISCO DMZ VLAN MANAGEMENT

Hi,

I need setup an External Contractors DMZ which they will use to connect to a storage system to receive and delivery work.  The plan is to attach a physical switch to a spare port on an ASA 5520 so this is completely
separate to our internal infrastructure.  Members of a Development VLAN (one way) would have access to this area via a firewall access policy.

Is there any "best practices" in regards to VLAN Management in DMZ's.  Our internal switches have a management VLAN but would that be acceptable / secure to use the same VLAN outside inner core to manage the switch.  Also unlike the inner switches that use Radius for authentication I would only use a local account.

Thank you in advance.
Mongo PeckAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pete LongTechnical ConsultantCommented:
Why not simply have a console server connected to this switch, then you can manage it and there is no direct connections form the DMZ/VLAN to the Secure network, you can pick up a console server very cheaply.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.