CISCO SWITCH BASIC CONFIGURATION GUIDE
ALL AUTHENTICATION CONFIGURATION
1. Set hostname
#hostname NAME-IP
2. Set domain name
#ip domain-name drbdtest.com
3. Set username and password
#username admin privilege 15 password 123456
4. Set enable password
#enable password 123456
5. Encrypt all existing and future passwords
#service password-encryption
6. Generate crypto key to enable ssh login
#crypto key generate rsa
7. Enable ssh version
#ip ssh version 2
8. Configure console login
#line console 0
#password 123456
#login local
9. Configure line vty login
#line vty 0 5
#password 123456
#transport input ssh
#login local
#line vty 6 15
#password 123456
#transport input ssh
#login local
10. Configure authentication
#aaa new-model
#aaa authentication login default local
#aaa authentication enable default enable
INTERFACE, IP & VLAN CONFIGURATION
11. IP & Gateway configuration
#interface vlan1
#no shutdown
#ip address 192.168.0.100 255.255.255.0
#no ip route-cache
#ip default-gateway 192.168.0.1
#no ip http server
#no cdp run
#ip name-server 8.8.8.8
#ip name-server 9.9.9.9
12. VLAN configuration
#vlan 10
#vlan 20
#vlan 30
*** If any VLAN is assigned into any switch port then make the switch port access for that vlan
1. Set hostname
#hostname NAME-IP
2. Set domain name
#ip domain-name drbdtest.com
3. Set username and password
#username admin privilege 15 password 123456
4. Set enable password
#enable password 123456
5. Encrypt all existing and future passwords
#service password-encryption
6. Generate crypto key to enable ssh login
#crypto key generate rsa
7. Enable ssh version
#ip ssh version 2
8. Configure console login
#line console 0
#password 123456
#login local
9. Configure line vty login
#line vty 0 5
#password 123456
#transport input ssh
#login local
#line vty 6 15
#password 123456
#transport input ssh
#login local
10. Configure authentication
#aaa new-model
#aaa authentication login default local
#aaa authentication enable default enable
INTERFACE, IP & VLAN CONFIGURATION
11. IP & Gateway configuration
#interface vlan1
#no shutdown
#ip address 192.168.0.100 255.255.255.0
#no ip route-cache
#ip default-gateway 192.168.0.1
#no ip http server
#no cdp run
#ip name-server 8.8.8.8
#ip name-server 9.9.9.9
12. VLAN configuration
#vlan 10
#vlan 20
#vlan 30
*** If any VLAN is assigned into any switch port then make the switch port access for that vlan
13. UPLINK port configuration
#interface GigabitEthernet0/1
#switchport trunk encapsulation dot1q
#switchport mode trunk
#description Uplink-From-Agg-SW
# switchport trunk allowed vlan 1,10,20,30
#interface GigabitEthernet0/1
#switchport trunk encapsulation dot1q
#switchport mode trunk
#description Backup Uplink-From-Agg-SW
#switchport trunk allowed vlan 1,10,20,30
OTHER CONFIGURATION
14. SNMP configuration
#snmp-server community b0lc0rp RO
#snmp-server location TEST PoP
#snmp-server contact support@drbdtest.com
15. Clock setup
#clock timezone BDT 6
#no ip domain-lookup
#no ip http server
16. Spanning tree configuration
#spanning-tree mode pvst
#spanning-tree portfast default
# spanning-tree portfast bpdufilter default
17. ERR disable recovery configuration
#no errdisable detect cause gbic-invalid
#errdisable recovery cause link-flap
#errdisable recovery cause gbic-invalid
#errdisable recovery interval 30
#service unsupported-transceiver
18. Configure MTU
#system mtu jumbo 9000
#system mtu routing 1500
19. VTP configuration
#vtp mode transparent
#vtp domain <hostname>
Save all configuration
#interface GigabitEthernet0/1
#switchport trunk encapsulation dot1q
#switchport mode trunk
#description Uplink-From-Agg-SW
# switchport trunk allowed vlan 1,10,20,30
#interface GigabitEthernet0/1
#switchport trunk encapsulation dot1q
#switchport mode trunk
#description Backup Uplink-From-Agg-SW
#switchport trunk allowed vlan 1,10,20,30
OTHER CONFIGURATION
14. SNMP configuration
#snmp-server community b0lc0rp RO
#snmp-server location TEST PoP
#snmp-server contact support@drbdtest.com
15. Clock setup
#clock timezone BDT 6
#no ip domain-lookup
#no ip http server
16. Spanning tree configuration
#spanning-tree mode pvst
#spanning-tree portfast default
# spanning-tree portfast bpdufilter default
17. ERR disable recovery configuration
#no errdisable detect cause gbic-invalid
#errdisable recovery cause link-flap
#errdisable recovery cause gbic-invalid
#errdisable recovery interval 30
#service unsupported-transceiver
18. Configure MTU
#system mtu jumbo 9000
#system mtu routing 1500
19. VTP configuration
#vtp mode transparent
#vtp domain <hostname>
Save all configuration
#write
#relaod
check the switch configuration again after the reload.
#relaod
check the switch configuration again after the reload.
Comments
Post a Comment