Computer Access Switch Configuration

Configuring a computer access switch involves connecting via console, setting hostnames, securing access, assigning VLANs, and configuring ports for network access.

Initial Setup and Console Access

Inspect the hardware: Check the switch model, power cables, and indicator LEDs to ensure the device is operational (green LED indicates normal operation). Connect to the switch: Use a rollover or serial cable to connect your computer to the switch console. Launch PuTTY or a similar terminal emulator, select the serial connection, set the correct COM port, baud rate (typically 9600 or 115200), 8 data bits, 1 stop bit, no parity, and no flow control.

Basic Configuration

Enter privileged EXEC mode: Type enable to access higher-level commands. Set a hostname: Use configure terminal followed by hostname to assign a professional name to the switch. Secure access: Configure passwords for console and VTY lines using line console 0 and line vty 0 4, then set password and login.

Enable secret passwords for encrypted access with enable secret. Set a banner: Use banner motd #Your message# to display a message to users attempting access.

VLAN and Port Configuration

Create VLA

Ns: Enter vlan [vlan-number] in global configuration mode to define VLANs for network segmentation. Assign ports to VLANs: Use interface and switchport mode access followed by switchport access vlan [vlan-number] to assign ports to the correct VLAN. Trunk ports: For uplinks, configure trunking with switchport mode trunk and, if needed, switchport trunk encapsulation dot1q.

IP and Management Configuration

Assign management IP: Configure an IP address on the management VLAN using interface vlan [vlan-number] and ip address. Set default gateway: Use ip default-gateway to allow remote management.

Security and Maintenance

Disable unused ports: Shut down unused interfaces with interface and shutdown to prevent unauthorized access. Save configuration: Use write memory or copy running-config startup-config to save changes. Optional features: Enable SSH for secure remote access by generating RSA keys (crypto key generate rsa) and configuring ip ssh version 2.

By following these steps, your switch will be properly configured for secure and efficient network access, with VLAN segmentation, port assignments, and remote management capabilities.