Switch Configuration

1
Switch Configuration

• Starting the switch
• Configuring the Switch

2
Switch Overview

• Switches contain CPU, RAM, Operating System
• POST
• When switched on System LED
• indicates status

Color System Status Off System is not powered
on. Green System is operating normally. Amber Sy
stem is receiving power but is not functioning
properly.
3
Status LED Overview

• Mode button toggles between different port modes
• Port mode displayed on Port Mode LEDs
• Individual Port status above each port

4
Port Status 1
5
Port Status 2
6
User Mode Commands
7
Switch Management

• Connect to switch via console connection
• Give switch IP address on management VLAN 1
• Switch(config)interface vlan 1
• Switch(config-if)ip address 192.168.1.2
  255.255.255.0
• Use web-browser based management
• Switch(config)ip http server

8
Switch Configuration 1

• Erase any existing settings
• VLAN database
• Configuration in NVRAM

• Reload the switch

9
Switch Configuration 2 - Security

• Static MAC address

• Port Security

10
Switches

• Contain
• CPU
• RAM
• Operating System

11
LED Indicators
Default setting
12
POST Test Initial boot Up, and Help

• Console into a switch with the same cable used to
  console into a router
• Use same settings in Hyperterminal

• Context sensitive help is available from the
  command line using the question mark as you
  would in router help.

13
Catalyst IOS Intro

• User EXEC mode and Privileged EXEC mode.
• enable command.
• IOS based switch is just like the router IOS.
• configure command go to global config mode.
• copy run start to save config to NVRAM.
• Host Name configuration -1-255 characters
• hostname name
• Comment to help identify the interface.
• description description-string - interface
  config. mode
• Use quotes when using spaces in string.
• IOS-based same as on a router.
• access help by entering ?

14
Default Configuration

• When powered up w/out configuration, the default
  name is Switch.
• No passwords have been configured.
• All switch ports are part of VLAN 1
• Switch has no IP address
• Show version shows the IOS version and the
  configuration register.

15
Actual Configuration

• First,
• Remove any VLAN info (delete flash vlan.dat)
• Erase startup
• Reload
• Follow router configuration method to configure
  hostname, line passwords, set a default gateway,
  etc.
• Set IP address for management VLAN1 for telnet
  access.
• Fast Ethernet ports default to auto-speed and
  auto-duplex, or they can be set manually.
• Management of a switch can also be done using a
  GUI interface as long as HTTP service is turned
  on.

16
Remote Access to Switch

• To telnet, ping, or globally manage the switch
• Enter an IP address and management VLAN.
• Configuration
• interface vlan 1
• ip address addressmask
• ip default-gateway address
• Verify with show ip interface

17
Defining port speed / duplex

• Speed
• Interface config mode
• speed 10 100 auto
• Line mode is either full duplex or half duplex.
• Interface config mode
• duplex auto full half
• auto option only for fixed Fast Ethernet TX ports.

18
Backup on TFTP Server

• IOS-based commands
• copy run tftp to save config file to tftp
  server.
• copy tftp run to download config from tftp
  server to active config and to NVRAM.

19
VLAN Configuration

• Entering VLAN Database
• Switchvlan database
• Switch(vlan)
• Adding VLANs
• Switch(vlan)vlan 15 name Accounting
• Deleting VLAN database
• Switchdelete flashvlan.dat
• Assigning ports to a VLAN
• Switch(config)interface FastEthernet 0/12
• Switch(config-if)switchport access vlan 15
• Verify VLAN Configuration
• Switchshow vlan

20
MAC Address Table

• Switches learn the MAC addresses of workstations
  that are connected to their switch ports by
  examining the source address of frames that are
  received on that port then they are placed in a
  MAC table.
• If no frames are seen with a previously learned
  address, the MAC address entry is automatically
  discarded or aged out after 300 seconds.

21
Static MAC addresses

• If entered by an admin, it will be permanent and
  not age out or be cleared out by powering down
  the switch.
• The node has to be attached to the switch.

22
Port Security

• Anyone can plug in if they are in the open
• Port security can be set on an interface so
  that, for instance, the number of MAC addresses
  that can be learned on any one interface could be
  1.
• Port security can be verified with
• Show port security

Note commands available
23
Adding a Switch
24
MAC Addresses
25
Password Recovery

• On a Cisco Catalyst 2900, hold down the MODE
  button during switch startup to begin the
  process.
• Instructions attached for Password Recovery on a
  Cisco 1900 Catalyst Switch.

26
Module 6

• Switch Configuration

END