vlan 1 - what is your experience?

afarmer

I understand vlan 1 is used by CDP, cannot be removed from a switch, is assigned to all interfaces on Cisco switches by default, and is the default native vlan on trunks. My question is, using your own experience, how do you usually configure vlan 1 on switches? Some of the CCIEs that have done work at my company will usually administratively disable vlan 1, add another access vlan (assign the IP address of the switch to this access vlan instead of vlan 1), and add a second vlan for voice. Is that the recommended way? Or, do you leave vlan 1 enabled and assign the IP address to it, create a data vlan, and then create a voice vlan? It works either way but I was wondering what everyone's thoughts were on it. Thanks.

abhustler

I generally change the native VLAN, create an AUX VLAN for voice, add more restrictions to VLAN 1.

mzinz

It's good practice to shutdown VLAN 1 due to security risks, but it isn't required. I've seen many networks that do use VLAN1.

Your voice VLAN should always be separate from your data VLANs.

Typical corporate network may consist of the following:
Voice VLAN
Data VLAN
Server VLAN
Management VLAN
Wireless VLAN