CCNA 3 Week 6 Switch Configuration

Copyright © 2005 University of Bolton Physical Details Available in variety of sizes –12 port, 16 port, up to 48 port Data ports may be: –Ethernet/Fast Ethernet –Gigabit Ethernet –Fibre Optic Tend to do without power switch

Copyright © 2005 University of Bolton Switch LED Indicators Several different types of light on the front of a switch to provide diagnostic information: –System LED –Remote Power Supply (RPS) LED –Port Mode LEDs –Port Status LEDs Port mode lights determines how to interpret port status lights

Copyright © 2005 University of Bolton Port Mode: STAT Indicates status of each port: OffNo Link Solid GreenLink Operational Flashing GreenSending/Receiving Data Alternating Green/AmberLink Fault Solid AmberPort not forwarding/disabled

Copyright © 2005 University of Bolton Port Mode: UTIL Used to show bandwidth utilisation of the switch Read from right to left Each light out indicated reduction by 50% of bandwidth use Two lights out means only 25% in use

Copyright © 2005 University of Bolton DUPLX and SPEED modes Duplex mode indicates whether port if running half or full duplex: –Off: Half Duplex –On: Full Duplex Speed indicates Ethernet speed: –Off: 10 Mbps –On: 100 Mbps –Flashing Green: 1000 Mbps

Copyright © 2005 University of Bolton Status LEDs during POST When power is connected, switch enters Power-on Self Test (POST) mode System LED indicates POST status: –Off: POST is underway –Green: POST successful –Amber: POST failed – usually a critical error Port status LEDs change using post too –30 seconds Amber while detect network status –Green: Connected device found –Off: Nothing found

Copyright © 2005 University of Bolton Console Connection Cisco Switches have a console port on the rear Connect using Rollover cable –9600 Baud –8 bits –1 stop bit –No Parity –No Flow Control

Copyright © 2005 University of Bolton Switch Help Switch CLI similar to Router CLI Use the ? Character to get help e.g. –Sw> s? –Would show commands starting with s –Sw> sh ? –Would show all options that appear after show

Copyright © 2005 University of Bolton Command Modes As with a router, can use User Exec or Privileged Exec modes (> and # prompts respectively) Use enable command to enter Privileged Exec mode Both modes can (should) be password protected Use configure command to enter other command modes

Copyright © 2005 University of Bolton Default Configuration Hostname = "Switch" No passwords set All ports in same broadcast domain and assigned to one VLAN Switch can be assigned an IP address for management purposes Show commands reveal setup and hardware information

Copyright © 2005 University of Bolton Config basics (1) To delete config: Switch# delete flash:vlan.dat Switch# erase startup-config Switch# reload Passwords: Switch(Config)# hostname ABCswitch Switch(Config)# line con 0 Switch(Config-line)# password Switch(Config-line)# login Switch(Config-line)# line vty 0 15 Switch(Config-line)# password Switch(Config-line)# login

Copyright © 2005 University of Bolton Config basics (2) IP Address Switch(Config)# interface VLAN1 Switch(Config-if)# ip address Switch(Config-if)# ip default-gateway Interface Settings Switch(Config)# interface fastethernet 0/2 Switch(Config-if)# duplex full Switch(Config-if)# speed 100

Copyright © 2005 University of Bolton Config basics (3) Setup Web-based interface Switch# configure terminal Switch(Config)# ip http server Switch(Config)# ip http port 80

Copyright © 2005 University of Bolton MAC Address Information Switch automatically stores learned MAC addresses show mac-address-table Learned addresses are retained for 300s (5 minutes) Can clear earlier using clear mac-address-table

Copyright © 2005 University of Bolton Static MAC addresses Can manually define MAC address entries –The MAC address will not be aged out automatically by the switch. –A specific server or user workstation must be attached to the port and the MAC address is known. –Security is enhanced Switch(config)#mac-address-table static interface FastEthernet vlan

Copyright © 2005 University of Bolton Configuring Port Security Possible to provide secure access to network by regulating connections to switch ports Can statically assign MAC addresses to ports Alternatively setup ports to allow only 1 address, learning the first address connected Achieve using switchport commands on interface

Copyright © 2005 University of Bolton Changing Networks If a switch is added to a network the following config should take place: –Switch name –IP address for the switch in the management VLAN –A default gateway –Line passwords If a PC is moved from one switch to another, MAC address changes must be made

Copyright © 2005 University of Bolton Further Information In addition to the information presented here, there are additional labs which cover: –Backing up config files and IOS images using TFTP –Recovering passwords –Upgrading firmware There are lots of labs this week – do as many as you can, and read the rest