How useful is a Management VLAN if all clients are out of the default/native LAN?
After a failed attempt at moving all devices into a Management VLAN (a while back), I was up for giving it another try.
I reread some of the docs, browsed the forums about this matter.
Beyond the effort that it will take now, I'm a bit worried going forward about some of the things I just found out (in particular difficulties adopting new devices).
It's actually a bit nuts that having an ER605 (that needs a special step to be told where the controller is) makes things more difficult than having a 3rd party router...
So I did a quick cost/benefit analysis and I'm now wondering if I should bother with that VLAN.
The main (if not only) benefit of the management VLAN seems to be proper isolation from random clients on the network.
But I have no clients in the native network because they are all in a few VLANs.
I did a quick test in a test VLAN (couple switch ACLs to allow members of the VLAN to access the VLAN's GW, one switch rule to deny access to the native VLAN).
I have at least DHCP, Internet DNS, Web.
I also tested SSH into the test VLAN (it took one more rule if the client is in LAN).
Am I missing something?
[Edit] FWIW, as an added benefit, having all Omada devices in the native VLAN makes things effectively simpler.
I should have no issues onboarding new devices. I don't have to worry as much about GW<->Controller discovery/comms.