Configuration process of access switch

Configuring an access switch involves connecting to the switch, setting a hostname, assigning VLANs, configuring access ports, and securing management access.

Initial Setup

Check Hardware and Power On: Inspect the switch for any physical damage, ensure cables are properly connected, and power it on. Verify that indicator lights are functioning correctly. Connect via Console: Use a rollover cable to connect the switch console to a computer.

Open a terminal emulator like PuTTY and select a 9600 baud serial connection to access the CLI. Erase Previous Configurations (if needed): For spare switches, delete the flash:vlan.dat file to remove old VLAN configurations.

Basic Configuration

Enter Privileged EXE

C Mode: Use the enable command to access privileged mode. Set Hostname and Domain Name: Assign a professional hostname and domain name for easier management and identification.

Configure Management I

P: Assign an IP address to the management VLAN to allow remote access via Telnet or SSH. Set Passwords: Configure console, Telnet/SSH, and enable passwords to secure access. Assign Default Gateway: Set a default gateway to allow the switch to communicate outside its local subnet.

VLAN and Port Configuration

Create VLA

Ns: Use the vlan [vlan-number] command to create VLANs and assign names. Verify with show vlan brief. Configure Access Ports: Assign switch ports to VLANs using interface and switchport mode access commands.

Each access port carries traffic for a single VLAN. Optional Trunk Ports: If connecting to another switch, configure trunk ports with switchport mode trunk to carry multiple VLANs using 802. 1Q tagging.

Security and Optimization

Disable Unused Ports: Shut down unused interfaces to prevent unauthorized access. Enable Port Security: Limit the number of MAC addresses per port to enhance security. Save Configuration: Use write memory or copy running-config startup-config to save changes.

Verification

Use show running-config to review current settings. Test connectivity by pinging devices within the VLAN or management network.

Confirm VLA

N assignments and port status with show vlan brief and show interfaces status. By following these steps, you can configure an access switch for secure, efficient operation in a network environment, ensuring proper VLAN segmentation, management access, and port security.