The Threat of High Revision Numbers

The Threat of High Revision Numbers
Many organizations have discovered the need for physical security when a device with only
VLAN 1 but a high configuration revision number is added to the network. If a switch is a part
of a test lab and then needs to be placed into production, it is best to clear everything and
then power-cycle it. There have been instances of wiped switches erasing the VLAN setup of
large organizations because the new device had a higher configuration revision number but
had only VLAN 1. If a port belongs to a VLAN and that VLAN is removed, the port shuts down
until the VLAN exists again. Adding the VLANs back and propagating them is a snap. The hassle
and stress occur with discovering the problem. Using a VTP password is encouraged to
prevent people from accidentally causing problems.