vasupathome.blogg.se - Basic cisco switch configuration

#Basic cisco switch configuration password

An alternate port or backup port role excludes the port from the active topology.īH_SW1(config)# spanning-tree mode rapid-pvstīH_SW1(config)# spanning-tree link-type point-to-pointīH_SW1(config)# spanning-tree mst configurationīH_SW1(config-mst)# instance 2 vlan 1-1000.A root port or designated port role includes the port in the active topology.The system assigns port roles as follows: Disabled-A port that has no role within the operation of spanning tree.

Backup ports can exist only where two ports are connected together in a loopback mode or bridge with two or more connections to a shared LAN segment.

Backup-A backup for the path provided by a designated port toward the leaves of the spanning tree.

Alternate-An alternate path to the root bridge to that provided by the current root port.

Designated-A forwarding port elected for every switched LAN segment.

Root-A forwarding port elected for the spanning tree topology.

In RSTP, the port roles are defined as follows: NOTE: Although it is not recommended, you can turn off STP on a per-VLAN basis, or globally on the switch.īH_SW1(config)# spanning-tree vlan 15 root primaryīH_SW1(config)# spanning-tree vlan 20 root secondaryīH_SW1(config)# spanning-tree vlan 15 priority 8192īH_SW1(config-if)# spanning-tree port-priority 100 The spanning tree feature cannot be turned off in switches on a per-port basis. Note: By default, spanning tree runs on every port. The rule only applies to ports that connect to other bridges or switches STP Rule 4-All the other ports in all the switches (VLAN-specific) must be placed in blocking mode. STP Rule 3-In a single LAN segment, the port of the designated switch that connects to that LAN segment must be placed in forwarding mode. On each LAN segment, the switch that is best to use in order to move data from that segment to the root bridge is called the designated switch. STP Rule 2-The root port must be set to forwarding mode. STP Rule 1-All ports of the root switch must be in forwarding mode. Negotiate (negotiate either ISL or dot1q depending on capabilities of the neighboring interface)īH_SW1(config-if)# switchport trunk encapsulation

#Basic cisco switch configuration password

BH_SW1(config)# enable secret abc123 #MD5 hashīH_SW1(config)# enable password qaz123 #Clear textīH_SW1(config)# service password-encryptionīH_SW1(config-if)# ip address 10.1.1.253 255.255.255.248īH_SW1(config)# ip default-gateway 10.1.1.254īH_SW1# copy running-config startup-configīH_SW1(config)# ip domain-name īH_SW1(config)# username sw_admin password zaq321īH_SW1(config-line)# transport input telnet sshīH_SW1(config)# alias exec c configure terminalīH_SW1(config)# alias exec s show ip interface briefīH_SW1(config)# alias exec sr show running-configīH_SW1(config)# interface fastEthernet 0/1īH_SW1(config-if)# description Link to Subnet-1īH_SW1(config)# interface range fastEthernet 0/2 – 24īH_SW1(config-if-range)# switchport mode accessīH_SW1(config-if-range)# switchport access vlan 5īH_SW1(config-if)# switchport mode accessīH_SW1(config-if)# switchport port-security maximum 1īH_SW1(config-if)# switchport port-security violation shutdown | protect | restrictīH_SW1(config-if)# switchport port-security mac-address 68b5.9965.1195īH_SW1# show port-security interface fa0/5īH_SW1(config)# interface fastEthernet 0/2īH_SW1(config-if)# switchport access vlan 10Ĭonfigure switch port to allow voice and data:īH_SW1(config-if)# switchport voice vlan 11