52. General Switch Configuration

Описание: General Switch Configuration

1. Hostname //setting hostname of switch
hostname SW1

2. Line console 0, password, exec-timeout //secure console line
line console 0
login
password cisco
exec-timeout 0 0

3. Enable secret //secure # line
enable secret cisco

4. Service password encryption //to encrypt all password in md7 (type 7)
service-password-encryption

5. Line vty login, password, exec-timeout //enable and secure telnet
line vty 0 4
login
password cisco
exec-timeout 0 0

6. Interface VLAN 1 IP Address //for managing the switch (mngmt vlan1)
ip address 192.168.1.10 255.255.255.0
no shut
exit
show ip int brief

7. IP default gateway //enables the switch to ping other networks
ip default-gateway 192.168.1.1 //use the IP Address of the router belong to the same network on switch vlan 1

8. Switchport Modes
show interface fa0/1 switchport //to verify default switchport mode configuration on the int
switchport mode trunk //to configure an interface to trunk
switchport mode access //to configure an interface to access
switchport mode dynamic auto //to configure an interface to dynamic auto for DTP negotiation
switchport mode dynamic desirable //to configure an interface to dynamic desirable for DTP nego
show interfaces trunk //to view trunk interfaces
switchport nonegotiate //to disable switchport negotiation


9. Switchport Security
conf t
int fa0/6
switchport mode access //port security can only be implemented on access interface
switchport port-security //setting int port security
switchport port-security maximum 1 //set allowed maximum mac address to this int to only 1
switchport port-securitym mac-address sticky //set port security with dynami static acquisition of MAC addrs
switchport port-security violation protect //protect int once violation occur/ traffic from MAC with violation will be drop
switchport port-security violation restrict //restrict int once violation occur/ traffic from MAC with violation will be drop and log the event
switchport port-security violation shutdown //shutdown int once violation occur/admin need to no shut the
int to make it working back
spanning-tree portfast //to skip spanning tree initialization
exit
show port-security //to view secured ports with details
show port-security int fa0/6 //to view port security details on this interface
exit

shut //to enable err-disabled int due to int violation
no shut

Note: port-security with MAC-address setup is can be bypassed by MAC-address cloning strategy..