Starting the switch Configuring the Switch Switch Configuration Starting the switch Configuring the Switch

Switch Overview indicates status Switches contain CPU, RAM, Operating System POST When switched on – System LED indicates status Color System Status Off System is not powered on. Green System is operating normally. Amber System is receiving power but is not functioning properly.

Status LED Overview Mode button toggles between different port modes Port mode displayed on Port Mode LEDs Individual Port status above each port

Port Status 1

Port Status 2

User Mode Commands

Switch Management Connect to switch via console connection Give switch IP address on management VLAN 1 Switch(config)#interface vlan 1 Switch(config-if)#ip address 192.168.1.2 255.255.255.0 Use web-browser based management Switch(config)#ip http server

Switch Configuration 1 Erase any existing settings Reload the switch VLAN database Configuration in NVRAM Reload the switch

Switch Configuration 2 - Security Static MAC address Port Security

Switches Contain: CPU RAM Operating System

LED Indicators Default setting

POST Test & Initial boot Up, and Help Console into a switch with the same cable used to console into a router Use same settings in Hyperterminal Context sensitive help is available from the command line – using the question mark as you would in router help.

Catalyst IOS Intro User EXEC mode and Privileged EXEC mode. enable command. IOS based switch is just like the router IOS. configure command – go to global config mode. copy run start – to save config to NVRAM. Host Name configuration -1-255 characters hostname [name] Comment to help identify the interface. description [description-string] - interface config. mode Use quotes when using spaces in string. IOS-based: same as on a router. access help by entering ?

Default Configuration When powered up w/out configuration, the default name is Switch. No passwords have been configured. All switch ports are part of VLAN 1 Switch has no IP address Show version shows the IOS version and the configuration register.

Actual Configuration First, Remove any VLAN info (delete flash: vlan.dat) Erase startup Reload Follow router configuration method to configure hostname, line passwords, set a default gateway, etc. Set IP address for management VLAN1 for telnet access. Fast Ethernet ports default to auto-speed and auto-duplex, or they can be set manually. Management of a switch can also be done using a GUI interface as long as HTTP service is turned on.

Remote Access to Switch To telnet, ping, or globally manage the switch: Enter an IP address and management VLAN. Configuration interface vlan 1 ip address [address][mask] ip default-gateway [address] Verify with show ip interface

Defining port speed / duplex Interface config mode: speed [10 | 100 | auto] Line mode is either full duplex or half duplex. duplex [auto | full | half] auto option only for fixed Fast Ethernet TX ports.

Backup on TFTP Server IOS-based commands: copy run tftp – to save config file to tftp server. copy tftp run – to download config from tftp server to active config and to NVRAM.

VLAN Configuration Entering VLAN Database Adding VLANs Switch#vlan database Switch(vlan)# Adding VLANs Switch(vlan)#vlan 15 name Accounting Deleting VLAN database Switch#delete flash:vlan.dat Assigning ports to a VLAN Switch(config)#interface FastEthernet 0/12 Switch(config-if)#switchport access vlan 15 Verify VLAN Configuration Switch#show vlan

MAC Address Table Switches learn the MAC addresses of workstations that are connected to their switch ports by examining the source address of frames that are received on that port – then they are placed in a MAC table. If no frames are seen with a previously learned address, the MAC address entry is automatically discarded or aged out after 300 seconds.

Static MAC addresses If entered by an admin, it will be permanent and not age out or be cleared out by powering down the switch. The node has to be attached to the switch.

Port Security Anyone can plug in if they are in the open Port security can be set on an interface – so that, for instance, the number of MAC addresses that can be learned on any one interface could be 1. Port security can be verified with: Show port security Note commands available

Adding a Switch

MAC Addresses

Password Recovery On a Cisco Catalyst 2900, hold down the MODE button during switch startup to begin the process. Instructions attached for Password Recovery on a Cisco 1900 Catalyst Switch.

Module 6 Switch Configuration END