Editing Switch Control (section)

= Configure 2924 (castle) =

* reset
<pre>write erase
reload</pre>

* enter basic setup "setup"
* setup vlans
<pre>conf t
 interface VLAN1
 no ip address
 no ip directed-broadcast
 no ip route-cache
 shutdown

int vlan300
ip address 10.1.4.164 255.255.255.0
ip default-gateway 10.1.4.1
int vlan300
no shutdown
end</pre>

* setup trunk port
<pre>conf t
interface FastEthernet0/1
 description Uplink to p1a
 duplex full
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,50,300,1002-1005
 switchport mode trunk
 no spanning-tree portfast
end

conf t
interface FastEthernet0/2
 description Uplink to p1b
 duplex full
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,50,300,1002-1005
 switchport mode trunk
 no spanning-tree portfast
end</pre>

* setup ports
<pre>conf t
interface FastEthernet0/3
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/4
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/5
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/6
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/7
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/8
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/9
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/10
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/11
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/12
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/13
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/14
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/15
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/16
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/17
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/18
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/19
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/20
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/21
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/22
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/23
 switchport access vlan 50
 spanning-tree portfast
 no desc
!
interface FastEthernet0/24
 switchport access vlan 50
 spanning-tree portfast
 no desc
end</pre>

* config terminal. setup timeout, priv level
<pre>conf t
line con 0
exec-timeout 10
line vty 0 15
exec-timeout 10
privilege level 0
end</pre>

* setup web user
<pre>conf t
service password-encryption
username web privilege 15 password xxxxxxxx
end</pre>

* enable http passwd checking, disable http, 
<pre>conf t
ip http authentication local
#no ip http server (only http avail on 2950)
end</pre>

* lock down ssh/web/telnet access
<pre>conf t
access-list 1 permit 10.1.4.5
end</pre>

* time
<pre>conf t
clock summer-time PDT recurring 2 Sunday March 2:00 1 Sunday November 2:00
clock timezone PST -8
ntp server 10.1.4.1
service timestamps log datetime localtime show-timezone
end

conf t
no snmp-server community private RW
no snmp-server community public RO
snmp-server community jc292401 RO 1
end</pre>

 wr mem