diff --git a/group_vars/dch-gw/dch-network.yml b/group_vars/dch-gw/dch-network.yml
index a1b5d28..46bb97a 100644
--- a/group_vars/dch-gw/dch-network.yml
+++ b/group_vars/dch-gw/dch-network.yml
@@ -14,6 +14,12 @@ dch_networks:
     ntp_servers:
     - tyrande.pyrocufflink.jazz
 
+  mgmt:
+    description: Management network
+    vlan_id: 10
+    router_iface: vlan30
+    ipv4_address: 172.30.0.240/28
+
   blue:
     description: pyrocufflink.blue AD domain members only
     vlan_id: 30
diff --git a/group_vars/dch-gw/dhcpd.yml b/group_vars/dch-gw/dhcpd.yml
index 3092b5e..1704d86 100644
--- a/group_vars/dch-gw/dhcpd.yml
+++ b/group_vars/dch-gw/dhcpd.yml
@@ -13,6 +13,14 @@ dhcp_subnets:
   domain_search: pyrocufflink.jazz
   ntp_servers: '{{ dch_networks.jazz.ntp_servers }}'
 
+# Management
+- address: 172.30.0.240/28
+  pools:
+  - start: 172.30.0.245
+    end: 172.30.0.253
+  routers:
+  - 172.30.0.241
+
 # pyrocufflink.blue
 - address: 172.30.0.0/26
   pools:
diff --git a/host_vars/gw0/network.yml b/host_vars/gw0/network.yml
index 9327b52..4963b39 100644
--- a/host_vars/gw0/network.yml
+++ b/host_vars/gw0/network.yml
@@ -53,6 +53,13 @@ network:
     addr: 172.30.0.1
     prefix: 26
     addr6: fd99:8cd7:6528:fe1e::1
+  - ifname: vlan10
+    enabled: true
+    vlan_id: 10
+    physdev: bond0
+    mode: manual
+    addr: 172.30.0.241
+    prefix: 28
 
 dhcpcd_send_hostname: false
 dhcpcd_ntp_servers: false