How to configure cisco switch step by step - part 1
This video series will focus on how to configure an enterprise switch from the scratch. This will be a multi part video covering all the steps involved in a switch configuration with detailed explanation.
Here are the steps i used in this video to configure this switch.
1. Set a host name to the switch – have a naming convention
abc-s-marketing-b101-1-access
2. Configure a Network Management IP address
Don’t use vlan 1 for this purpose – for security reason
interface Vlan1
no ip address
shutdown
end
Use a different vlan – say vlan 499
access-switch1(config)# interface vlan 499
access-switch1(config-if)# ip address 10.134.56.6 255.255.255.0
access-switch1(config-if)# exit
access-switch1(config)#
3. Assign a Default Gateway to the Switch
The default gateway is essentially the address of the router that the switch will be communicating with. Without this address, switch can’t communicate with another network and thus you can’t access the switch remotely from a different network.
(config)# ip default-gateway 10.134.56.252
4. Assign a password - create a password to control who has access to the privileged EXEC mode
(config)# enable secret An1m@ti0n
Have a strong password
5. Configure Telnet and Console Access Passwords
Configuring passwords for these is important because it makes your switch more secure
Telnet
access-switch1(config)# line vty 0 15
access-switch1(config-line)# password An1m@ti0n
access-switch1(config-line)# login
access-switch1(config-line)# exit
access-switch1(config)#
Console
access-switch1(config)# line console 0
access-switch1(config-line)# password An1m@ti0n
access-switch1(config-line)# login
access-switch1(config-line)# exit
access-switch1(config)#
6. Configure ACL and assign it to Telnet access – Prevent unauthorized access
access-switch1(config)# ip access-list standard TELNET-ACCESS
access-switch1(config-std-nacl)# permit 10.155.16.0 255.255.255.0
access-switch1(config-std-nacl)# permit 10.176.20.0 255.255.255.0
access-switch1(config-std-nacl)# permit host 144.92.200.254
access-switch1(config-std-nacl)# exit
access-switch1(config)# line vty 0 15
access-switch1(config-line)# access-class TELNET-ACCESS in
access-switch1(config-line)# exit
access-switch1(config)#