management IP on bridge or vlan interface for CRS310 switch

Hi,

So on a recent switch such as the CRS310-8G+2S+IN, assuming I already have some vlans configured on the bridge interface (/interface/bridge/vlan) and that my management vlan is 1, where is it recommended to configure the switch own management IP ?

a) directly on the bridge interface with PVID=1 (/interface/bridge) ?
b) or on a new vlan 1 interface on the switch ? (/interface/vlan) ?

From what I read I think the good answer is b), but why? What kind of issues could arise in assigning an IP to the bridge directly?

Thanks!

If you insist that management VLAN resides on VID 1, then it’s a). Reason: default config uses VID=1 for all sorts of configuration (e.g. PVID on all ports, including bridge CPU-facing port). It is possible to get it going as tagged (which is where VLAN interfaces come into play), but it’s a tedious job because one has to look at all the places where VID=1 might be used in any possible way and do something about it.

Since also other vendors treat VID=1 in special way (and each has slightly different approach at it), I’d recommend to go for a different VID for management. And in that case, it would be option b).

Thank you for this clear explanation!