voip vlan with data vlan moving from vlan1 to vlan10

Below is my current VoIP config on a Cisco 3750 with data vlan1 and voip vlan100
int gig1/0/1
description NEC VOIP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 1,100

Now I want to move my data subnet from vlan1 to vlan20. So I have to add native vlan20 in my config.Correct?
int gig1/0/1
description NEC VOIP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 20
switchport trunk allowed vlan 1,100,20
LVL 1
leblancAccountingAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

max_the_kingCommented:
Hi,
switchport trunk native vlan 20
will set vlan 20 as "untagged" ... that's it.
Now you have the default, that is vlan 1 native.

you probably want to shutdown vlan 1 and then set
switchport trunk allowed vlan 100,20

this way you lose any track of vlan1 (which is desirable from security point of view).
You need to set that on all other uplinked switches.

hope this helps
max
leblancAccountingAuthor Commented:
Hi Max,

A little bit confused about your statement. You said that setiing native vlan 20 will set vlan20 as untagged. But then you said that now I have the default which is native vlan 1.

Is the config below correct if I move my data subnet from vlan1 to vlan20? Thx

int gig1/0/1
description NEC VOIP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 20
switchport trunk allowed vlan 100,20
max_the_kingCommented:
Yes,exactly

i as well tried to explain that it is not mandatory to set native vlan as a used vlan. Cisco switches (and many others) have their default to default vlan1 and native vlan1.
When you shut down and disable vlan1, you may want to set trunk native vlan with another one, but this is not a must.
Basically, if you do, you're telling the switch that the frames traverse the trunk "untagged" for that particular vlan.
Cisco recommends that you set tha native vlan as an unused vlan (e.g. you create a dummy vlan, ex. vlan 4090 and set that as native) for security reason.
My opinion is that thare is no security breach and you can safely use native vlan 20 as you wrote above.

hope this clarify
max
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

leblancAccountingAuthor Commented:
I see. So from my understanding, when the VoIP phone boots up, it will go to the data vlan first to get the information necessary to get to the VoIP vlan. In my current case, the data vlan is in vlan 1. So it is working fine. So if I move my data subnet from vlan1 to vlan 20, I do not need to configure native vlan20 on my VoIP port configuration. Correct?
max_the_kingCommented:
Well, that depends ...

to keep it the very same manner, since vlan1 was formerly the (default) native vlan, you'd better set native vlan 20 (the one that replaces vlan1). This way you keep the same rules you had before.

Just try it in console mode on the switch, so that you'll see in monitor what happens

max

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
leblancAccountingAuthor Commented:
Thanks
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Voice Over IP

From novice to tech pro — start learning today.