Switch Alternate Management Interface Configuration

Dashboard Location: Network-wide > Configure > General

Network Management Interface Isolation

Switch alternate management interface configuration in Meraki networks provides network administrators with the capability to isolate management traffic from user data traffic by designating a specific VLAN for network management protocols. This functionality enables enhanced security through network segmentation, improved network monitoring capabilities, and centralized management traffic control across distributed switch deployments. The alternate management interface supports protocols including RADIUS authentication, SNMP monitoring, Syslog reporting, and other critical network management functions while maintaining operational isolation from production traffic.

Diagram

Classes

meraki

Name	Type	Constraint	Mandatory	Default Value
domains	List	domains	No

domains (meraki)

Name	Type	Constraint	Mandatory	Default Value
organizations	List	organizations	Yes

organizations (meraki.domains)

Name	Type	Constraint	Mandatory	Default Value
networks	List	networks	No

networks (meraki.domains.organizations)

Name	Type	Constraint	Mandatory	Default Value
switch	Class	switch	No

switch (meraki.domains.organizations.networks)

Name	Type	Constraint	Mandatory	Default Value
alternate_management_interface	Class	alternate_management_interface	No

alternate_management_interface (meraki.domains.organizations.networks.switch)

Name	Type	Constraint	Mandatory	Default Value
enabled	Boolean	true, false	No
vlan_id	Any	Integer[min: 1, max: 4094] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
protocols	List	Choice[radius, snmp, syslog]	No
switches	List	switches	No

switches (meraki.domains.organizations.networks.switch.alternate_management_interface)

Name	Type	Constraint	Mandatory	Default Value
alternate_management_ip	IP		Yes
subnet_mask	String	Regex: ^(255|254|252|248|240|224|192|128|0+)(\.0|\.128|\.192|\.224|\.240|\.248|\.252|\.254|\.255){0,3}$	No
gateway	IP		No
device	String	min: 1, max: 127	Yes

Examples

Example-1: The example below demonstrates switch alternate management interface configuration.

This configuration isolates management traffic by assigning VLAN 100 for protocols like RADIUS, SNMP, and syslog, with the alternate management interface disabled so all monitoring and management traffic uses the default interface.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              switch:
                alternate_management_interface:
                  enabled: false
                  protocols: ["radius", "snmp", "syslog"]
                  vlan_id: 100