CISCO SWITCH BEST PRACTICES GUIDE

Size: px
Start display at page:

Download "CISCO SWITCH BEST PRACTICES GUIDE"

Transcription

1 CISCO SWITCH BEST PRACTICES GUIDE Table of Contents (After Clicking Link Hit HOME to Return to TOC) 1) Add Hostname ) Add Username and Password ) Create Secret Password ) Encrypt Password ) Add SSH Certificate and Enable SSH Version ) Add Local Login and SSH to Line and Console Ports ) Disable AUX Port ) Disable VTP ) Disable http/s Server ) Enable Keepalives for TCP ) IOS Configuration Lock ) Reserve Memory for Console Access ) Add VLANS ) Add DHCP Snooping... 4 Add to VLANS... 4 Add to Interfaces (Trunks and DHCP Server)... 4 Remove Option ) Default Interface Configuration ) Interface Range for Programming Multiple Identical Ports ) Configure Access/Edge Port ) Add QOS at Interface Level ) Configure Voice Port ) Configure Trunk Port with VLAN Pruning (802.1Q) ) Configure Etherchannel Trunk with LACP and VLAN Pruning (802.1Q)... 5 Configure Ports on Both Switches for Etherchannel... 5 Configure Etherchannel Trunk... 5 Review ) Add L3 Interface to VLAN (IP and Subnet Mask) ) Enable InterVLAN Routing ) Add Default Gateway L2 Switch ) Add Default Route L3 Switch... 6

2 26) Add Banner ) Add DNS Servers ) Add SSH ) Add NTP servers ) Enable Logging ) Don't Log Console and Monitor ) Backup Config to TFTP ) Restore Config from TFTP ) Setting an Alias for Config Mode ) SFP Commands ) Troubleshooting Cisco PoE with built-in TDR features ALL Commands are from Global Configuration Mode Unless Otherwise Specified- 1) Add Hostname hostname <switch> 2) Add Username and Password aaa new-model username <username> privilege 15 secret <password> aaa local authentication attempts max-fail 3 aaa authentication login default local 3) Create Secret Password enable secret <password> 4) Encrypt Password service password-encryption 5) Add SSH Certificate and Enable SSH Version 2 ip domain-name <domain name> crypto key generate rsa

3 2048 ip ssh time-out 60 ip ssh authentication-retries 2 ip ssh version 2 6) Add Local Login and SSH to Line and Console Ports line vty 0 15 exec-timeout 3 transport input ssh login authentication default line con 0 exec-timeout 3 login authentication default 7) Disable AUX Port line aux 0 transport input none transport output none no exec exec-timeout 0 1 no password 8) Disable VTP vtp mode transparent 9) Disable http/s Server no ip http server no ip http secure-server 10) Enable Keepalives for TCP service tcp-keepalives-in service tcp-keepalives-out

4 11) IOS Configuration Lock configuration mode exclusive auto 12) Reserve Memory for Console Access memory reserve console ) Add VLANS vlan <number> name <VLAN name> 14) Add DHCP Snooping ip dhcp snooping Add to VLANS ip dhcp snoop vlan <VLAN s comma separated> Add to Interfaces (Trunks and DHCP Server) ip dhcp server trust Remove Option 82 no ip dhcp snooping information option 15) Default Interface Configuration default interface <interface> 16) Interface Range for Programming Multiple Identical Ports interface range <interface number-number> ex. interface range gigabitethernet 1/0/ ) Configure Access/Edge Port description <VLAN name> switchport mode access switchport access vlan <number> spanning-tree portfast

5 spanning-tree guard root storm-control broadcast level 20 storm-control multicast level 20 storm-control action trap 18) Add QOS at Interface Level auto qos voip cisco-phone 19) Configure Voice Port description <VLAN name> switchport access <untagged VLAN> switchport mode access switchport voice vlan <VOICE VLAN number> auto qos trust spanning-tree portfast 20) Configure Trunk Port with VLAN Pruning (802.1Q) description Trunk to <define switch and port> switchport mode trunk switchport trunk allowed vlan <VLAN s comma separated) switchport nonegotiate ip dhcp snooping trust 21) Configure Etherchannel Trunk with LACP and VLAN Pruning (802.1Q) Configure Ports on Both Switches for Etherchannel interface range <interface number-number> channel-group <number> mode active channel-protocol lacp Configure Etherchannel Trunk interface port-channel <number> switchport mode trunk switchport trunk allowed vlan <VLAN s comma separated) switchport nonegotiate ip dhcp snooping trust

6 Review show interfaces trunk 22) Add L3 Interface to VLAN (IP and Subnet Mask) int vlan <number> ip address <ip-address> <subnet mask> no shut 23) Enable InterVLAN Routing ip routing 24) Add Default Gateway L2 Switch ip default-gateway <ip-address> 25) Add Default Route L3 Switch ip route <ip-address> 26) Add Banner banner motd # **************************************************************************** PROPERTY OF COMPANY Anytown, USA USE OF THIS COMPANY SYSTEM, AUTHORIZED OR UNAUTHORIZED, CONSTITUTES CONSENT TO MONITORING OF THIS SYSTEM. UNAUTHORIZED USE MAY SUBJECT YOU TO CRIMINAL PROSECUTION. EVIDENCE OF UNAUTHORIZED USE COLLECTED DURING MONITORING MAY BE USED FOR ADMINISTRATIVE, CRIMINAL OR OTHER ADVERSE ACTION. USE OF THIS SYSTEM CONSTITUTES CONSENT TO MONITORING FOR THESE PURPOSE **************************************************************************** # 27) Add DNS Servers

7 ip name-server <ip-address> ip name-server <ip-address> 28) Add SSH ip domain-name <domain name> crypto key generate rsa 1024 ip ssh time-out 60 ip ssh authentication-retries 2 29) Add NTP servers ntp server <ip-address> ntp server <ip-address> 30) Enable Logging logging buffered ) Don't Log Console and Monitor no logging console no logging monitor 32) Backup Config to TFTP copy running-config tftp: prompted for TFTP server prompted for filename 33) Restore Config from TFTP copy tftp: running-config prompted for TFTP server prompted for filename destination filename 34) Setting an Alias for Config Mode alias exec c configure terminal

8 35) SFP Commands sh inv sh interface sh controller sh diag sh hard 36) Troubleshooting Cisco PoE with built-in TDR features From # test cable-diagnostics tdr interface gigabitethernet 0/16 sh cable-diagnostics tdr interface g0/16

Lab 8.5.2: Troubleshooting Enterprise Networks 2

Lab 8.5.2: Troubleshooting Enterprise Networks 2 Lab 8.5.2: Troubleshooting Enterprise Networks 2 Topology Diagram Addressing Table Device Interface IP Address Subnet Mask Default Gateway Fa0/0 192.168.10.1 255.255.255.0 N/A R1 Fa0/1 192.168.11.1 255.255.255.0

More information

Lab 1. CLI Navigation. Scenario. Initial Configuration for R1

Lab 1. CLI Navigation. Scenario. Initial Configuration for R1 Lab 1 CLI Navigation This lab covers the most basic skills for accessing and using the command-line interface (CLI) on a Cisco router or switch. Many of the small, picky details of how the CLI works cannot

More information

Lab 7 Configuring Basic Router Settings with IOS CLI

Lab 7 Configuring Basic Router Settings with IOS CLI Lab 7 Configuring Basic Router Settings with IOS CLI Objectives Part 1: Set Up the Topology and Initialize Devices Cable equipment to match the network topology. Initialize and restart the router and switch.

More information

Lab 1-2Connecting to a Cisco Router or Switch via Console. Lab 1-6Basic Graphic Network Simulator v3 Configuration

Lab 1-2Connecting to a Cisco Router or Switch via Console. Lab 1-6Basic Graphic Network Simulator v3 Configuration MODULE1 GETTING STARTED WITH YOUR CISCO LAB Lab 1-1Identifying Router Components and Accessories Lab 1-2Connecting to a Cisco Router or Switch via Console Lab 1-3Identifying Router & Switch IOS Software

More information

Chapter 3 Lab 3-1, Assembling Maintenance and Troubleshooting Tools

Chapter 3 Lab 3-1, Assembling Maintenance and Troubleshooting Tools Chapter 3 Lab 3-1, Assembling Maintenance and Troubleshooting Tools Physical Topology All contents are Copyright 1992 2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

More information

Lab Configuring Switch Security Features Topology

Lab Configuring Switch Security Features Topology Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 172.16.99.1 255.255.255.0 N/A S1 VLAN 99 172.16.99.11 255.255.255.0 172.16.99.1 PC-A NIC 172.16.99.3

More information

Lab Using the CLI to Gather Network Device Information Topology

Lab Using the CLI to Gather Network Device Information Topology Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 192.168.1.1 255.255.255.0 N/A Lo0 209.165.200.225 255.255.255.224 N/A S1 VLAN 1 192.168.1.11 255.255.255.0

More information

CCNA Semester 2 labs. Labs for chapters 2 10

CCNA Semester 2 labs. Labs for chapters 2 10 CCNA Semester 2 labs Labs for chapters 2 10 2.2.2.5 Lab - Configuring IPv4 Static and Default Routes 2.3.2.4 Lab - Troubleshooting Static Routes 3.2.1.9 Lab - Configuring Basic RIPv2 5.2.2.9 Lab - Configuring

More information

Getting Started with Your Device Configuration

Getting Started with Your Device Configuration Quick Setup Tasks, page 1 Quick Setup Tasks On the first day with your new device, you can perform a number of tasks to ensure that your device is online, reachable and easily configured. The Day 0 wizard

More information

Note that you can also use the password command but the secret command gives you a better encryption algorithm.

Note that you can also use the password command but the secret command gives you a better encryption algorithm. Router Device Security Lab Configuring Secure Passwords 1. Configure the enable secret and password enable password TRUSTME enable secret letmein Look at the configuration: show config terminal Note the

More information

Implementing and Configuring the Cell/Area Zone

Implementing and Configuring the Cell/Area Zone CHAPTER 5 Implementing and Configuring the Cell/Area Zone Overview This chapter outlines the configurations and configuration options to implement the recommendations and best practices described in Chapter

More information

Lab Troubleshooting VTP Configuration

Lab Troubleshooting VTP Configuration Lab 4.4.3 Troubleshooting VTP Configuration Topology Diagram Addressing Table Device (Hostname) Interface IP Address Subnet Mask S1 VLAN 99 172.17.99.11 255.255.255.0 S2 VLAN 99 172.17.99.12 255.255.255.0

More information

Catalyst 4500 Series IOS Commands

Catalyst 4500 Series IOS Commands CHAPTER Catalyst 4500 Series IOS Commands New Commands dot1x guest-vlan supplicant ip dhcp snooping information option allow-untrusted port-security mac-address port-security mac-address sticky port-security

More information

Actual4Test. Actual4test - actual test exam dumps-pass for IT exams

Actual4Test.   Actual4test - actual test exam dumps-pass for IT exams Actual4Test http://www.actual4test.com Actual4test - actual test exam dumps-pass for IT exams Exam : 300-115 Title : Implementing Cisco IP Switched Networks Vendor : Cisco Version : DEMO Get Latest & Valid

More information

Lab Configuring EtherChannel

Lab Configuring EtherChannel Topology Addressing Table Objectives Device Interface IP Address Subnet Mask S1 VLAN 99 192.168.99.11 255.255.255.0 S2 VLAN 99 192.168.99.12 255.255.255.0 S3 VLAN 99 192.168.99.13 255.255.255.0 PC-A NIC

More information

Lab Managing Router Configuration Files with Terminal Emulation Software

Lab Managing Router Configuration Files with Terminal Emulation Software Lab Managing Router Configuration Files with Terminal Emulation Software Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 192.168.1.1 255.255.255.0 N/A

More information

4(b): Assign the IP address on the Serial interface of Router. Console Cable

4(b): Assign the IP address on the Serial interface of Router. Console Cable Lab#4 Router Basic IOS 4(a). Router Basic Commands & Configuration 4(b) Assign the IP address on the Serial interface of Router Console Cable R1 PC1 Objectives Be familiar with use of different Configuration

More information

Chapter 10 Configure Clientless Remote Access SSL VPNs Using ASDM

Chapter 10 Configure Clientless Remote Access SSL VPNs Using ASDM Chapter 10 Configure Clientless Remote Access SSL VPNs Using ASDM Topology Note: ISR G1 devices use FastEthernet interfaces instead of GigabitEthernet Interfaces. 2016 Cisco and/or its affiliates. All

More information

Lab - Troubleshooting VLAN Configurations (Instructor Version Optional Lab)

Lab - Troubleshooting VLAN Configurations (Instructor Version Optional Lab) (Instructor Version Optional Lab) Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Optional activities are designed to enhance understanding and/or

More information

Chapter 10 Configure AnyConnect Remote Access SSL VPN Using ASDM

Chapter 10 Configure AnyConnect Remote Access SSL VPN Using ASDM Chapter 10 Configure AnyConnect Remote Access SSL VPN Using ASDM Topology Note: ISR G1 devices use FastEthernet interfaces instead of GigabitEthernet interfaces. 2015 Cisco and/or its affiliates. All rights

More information

CyberPatriot Packet Tracer Tool Kit

CyberPatriot Packet Tracer Tool Kit CyberPatriot Packet Tracer Tool Kit https://www.uscyberpatriot.org/competition/training-materials/training-modules https://www.netacad.com/ http://www.uscyberpatriot.org/documents/training%20documents/cyberpatriot%20route

More information

Lab - Configuring a Switch Management Address

Lab - Configuring a Switch Management Address Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway S1 VLAN 1 192.168.1.2 255.255.255.0 N/A PC-A NIC 192.168.1.10 255.255.255.0 N/A Part 1: Configure a Basic Network

More information

Lab Configuring Per-Interface Inter-VLAN Routing (Solution)

Lab Configuring Per-Interface Inter-VLAN Routing (Solution) (Solution) Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/0 192.168.20.1 255.255.255.0 N/A G0/1 192.168.10.1 255.255.255.0 N/A S1 VLAN 10 192.168.10.11

More information

CONFIGURATION DU SWITCH

CONFIGURATION DU SWITCH Current configuration : 2037 bytes version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption hostname Switch no aaa new-model ip subnet-zero

More information

BraindumpsIT. BraindumpsIT - IT Certification Company provides Braindumps pdf!

BraindumpsIT.  BraindumpsIT - IT Certification Company provides Braindumps pdf! BraindumpsIT http://www.braindumpsit.com BraindumpsIT - IT Certification Company provides Braindumps pdf! Exam : 300-115 Title : Implementing Cisco IP Switched Networks Vendor : Cisco Version : DEMO Get

More information

Chapter 10 Lab 10-2, Securing VLANs INSTRUCTOR VERSION

Chapter 10 Lab 10-2, Securing VLANs INSTRUCTOR VERSION CCNPv7.1 SWITCH Chapter 10 Lab 10-2, Securing VLANs INSTRUCTOR VERSION Topology Objectives Background Secure the server farm using private VLANs. Secure the staff VLAN from the student VLAN. Secure the

More information

Buy full file at

Buy full file at 14 Chapter 2 LAN Redundancy Chapter 2 LAN Redundancy 2.0.1.2 Class Activity Stormy Traffic ( ) Objective Explain the purpose of the Spanning Tree Protocol (STP) in a switched LAN environment with redundant

More information

Lab Configuring Per-Interface Inter-VLAN Routing (Instructor Version)

Lab Configuring Per-Interface Inter-VLAN Routing (Instructor Version) (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only. Topology Addressing Table Objectives Device Interface IP Address Subnet Mask

More information

Chapter 5 Lab 5-1 Inter-VLAN Routing INSTRUCTOR VERSION

Chapter 5 Lab 5-1 Inter-VLAN Routing INSTRUCTOR VERSION CCNPv7.1 SWITCH Chapter 5 Lab 5-1 Inter-VLAN Routing INSTRUCTOR VERSION Topology Objectives Implement a Layer 3 EtherChannel Implement Static Routing Implement Inter-VLAN Routing Background Cisco's switching

More information

CCNA Semester 3 labs. Labs for chapters 2 10

CCNA Semester 3 labs. Labs for chapters 2 10 CCNA Semester 3 labs Labs for chapters 2 10 2.1.4.5 Lab - Configure Extended VLANs, VTP, and DTP 2.2.2.5 Lab - Troubleshooting Inter-VLAN Routing 3.1.2.12 Lab - Building a Switched Network with Redundant

More information

Actual4Test. Actual4test - actual test exam dumps-pass for IT exams

Actual4Test.   Actual4test - actual test exam dumps-pass for IT exams Actual4Test http://www.actual4test.com Actual4test - actual test exam dumps-pass for IT exams Exam : 200-125 Title : CCNA Cisco Certified Network Associate CCNA (v3.0) Vendor : Cisco Version : DEMO Get

More information

Command Guide of WGSW-28040

Command Guide of WGSW-28040 1 Command Guide of WGSW-28040 Contents Command Guide of WGSW-28040 Chapter 1 COMMAND LINE INTERFACE... 12 1.1 Accessing the CLI... 12 1.2 Command Line Modes... 12 1.3 Cammand Help... 13 1.4 Command Line

More information

TL-SL2210/TL-SL2218/TL-SL2428/TL-SL2452. Smart Switch REV

TL-SL2210/TL-SL2218/TL-SL2428/TL-SL2452. Smart Switch REV TL-SL2210/TL-SL2218/TL-SL2428/TL-SL2452 Smart Switch REV1.2.1 1910011603 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO.,

More information

Cisco Network Academy CCNA 1 Introduction to Networks

Cisco Network Academy CCNA 1 Introduction to Networks Cisco Network Academy CCNA 1 Introduction to Networks Packet Tracer Practice with Dans Sample http://www.danscourses.com/ In this lab, you will learn how to configure the following tasks: IPv4 Addressing

More information

Catalyst 4500 Series IOS Commands

Catalyst 4500 Series IOS Commands CHAPTER Catalyst 4500 Series IOS Commands New Commands call-home (global configuration) call-home request call-home send call-home send alert-group call-home test clear energywise neighbors clear errdisable

More information

Lab Securing Network Devices

Lab Securing Network Devices Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 192.168.1.1 255.255.255.0 N/A S1 VLAN 1 192.168.1.11 255.255.255.0 192.168.1.1 PC-A NIC 192.168.1.3

More information

T PCT. Smart PoE Switch REV

T PCT. Smart PoE Switch REV T1500-28PCT Smart PoE Switch REV1.0.0 1910011255 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and

More information

Chapter 10 Configure Clientless Remote Access SSL VPNs Using ASDM

Chapter 10 Configure Clientless Remote Access SSL VPNs Using ASDM Chapter 10 Configure Clientless Remote Access SSL VPNs Using ASDM This lab has been updated for use on NETLAB+ Topology Note: ISR G1 devices use FastEthernet interfaces instead of GigabitEthernet Interfaces.

More information

Configuring Private VLANs

Configuring Private VLANs CHAPTER 15 This chapter describes how to configure private VLANs on the Cisco 7600 series routers. Note For complete syntax and usage information for the commands used in this chapter, refer to the Cisco

More information

SWITCH Lab Guide Labs powered by

SWITCH Lab Guide Labs powered by SWITCH Lab Guide 300-115 ii SWITCH 300-115 Lab Guide LM20170908/BV1.0 iii 25 C e n tur y Blvd., S te. 5 0 0, N a s hvill e, T N 37214 B o s o n.c o m To perform the labs referenced in this book, please

More information

TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452. Gigabit Smart Switch REV

TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452. Gigabit Smart Switch REV TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452 Gigabit Smart Switch REV2.0.0 1910011094 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES

More information

Configuring Local Authentication

Configuring Local Authentication This chapter describes local authentication. This chapter also describes procedures to configure local authentication and privilege levels. This chapter includes the following topics: Understanding Authentication,

More information

Configuring VLAN Trunks

Configuring VLAN Trunks Finding Feature Information, page 1 Prerequisites for VLAN Trunks, page 1 Information About VLAN Trunks, page 2 How to Configure VLAN Trunks, page 5 Configuration Examples for VLAN Trunking, page 20 Where

More information

Lab Configuring 802.1Q Trunk-Based Inter-VLAN Routing (Instructor Version Optional Lab)

Lab Configuring 802.1Q Trunk-Based Inter-VLAN Routing (Instructor Version Optional Lab) (Instructor Version Optional Lab) Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Optional activities are designed to enhance understanding and/or

More information

Lecture (06) Design and Configuration LAN Practicing, working on CISCO equipment. By: Dr. Ahmed ElShafee

Lecture (06) Design and Configuration LAN Practicing, working on CISCO equipment. By: Dr. Ahmed ElShafee Lecture (06) Design and Configuration LAN Practicing, working on CISCO equipment By: Dr. Ahmed ElShafee ١ Dr. Ahmed ElShafee, ACU : Fall 2015, Practical App. Networks II Part I ٢ ٣ SW01 steps firstly connect

More information

Configuring Private VLANs

Configuring Private VLANs Finding Feature Information, on page 1 Prerequisites for Private VLANs, on page 1 Restrictions for Private VLANs, on page 1 Information About Private VLANs, on page 2 How to Configure Private VLANs, on

More information

Lab Configuring Basic RIPv2 (Solution)

Lab Configuring Basic RIPv2 (Solution) (Solution) Topology 2017 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 15 Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway

More information

CG-MSW2402TXR CG-MSW1601TXR コマンドリファレンス

CG-MSW2402TXR CG-MSW1601TXR コマンドリファレンス CG-MSW2402TXR CG-MSW1601TXR コマンドリファレンス CLI Reference Guide Y613-10993-02 Rev.A Table of Contents Table of Contents Preface... 10 Intended Audience...11 Document Conventions...11 Chapter 1.Using the CLI...

More information

Basic Router Configuration

Basic Router Configuration This section includes information about some basic router configuration, and contains the following sections: Default Configuration, on page 1 Configuring Global Parameters, on page 2 Configuring Gigabit

More information

Configuring Secure Shell

Configuring Secure Shell Configuring Secure Shell Last Updated: October 24, 2011 The Secure Shell (SSH) feature is an application and a protocol that provides a secure replacement to the Berkeley r-tools. The protocol secures

More information

CCNA Routing & Switching

CCNA Routing & Switching CCNA Routing & Switching 1.0 LAN Switching Technologies 1. VLANs,Trunk, DTP 2. VLANs, Trunks and DTP Configuration 3. Voice Vlan Configuration 4. VTP 5. VTP - Configuration 6. Spanning-tree 7. STP - PVST+

More information

Lab Designing and Implementing a VLSM Addressing Scheme. Topology. Objectives. Background / Scenario

Lab Designing and Implementing a VLSM Addressing Scheme. Topology. Objectives. Background / Scenario CSNB214 Packet Tracer Lab Designing and Implementing a VLSM Addressing Scheme Topology Objectives Part 1: Examine Network Requirements Part 2: Design the VLSM Address Scheme Part 3: Cable and Configure

More information

CISCO SG300 WHITEPAPER

CISCO SG300 WHITEPAPER Cisco SG300 Whitepaper - Just Add Power CISCO SG300 WHITEPAPER Revised 2018-07-01 2018 Just Add Power All rights reserved Unauthorized use or disclosure hibited Last updated Jul-18 Cisco SG300 Whitepaper

More information

Interconnecting Cisco Networking Devices Part 1 (ICND1) Course Overview

Interconnecting Cisco Networking Devices Part 1 (ICND1) Course Overview Interconnecting Cisco Networking Devices Part 1 (ICND1) Course Overview This course will teach students about building a simple network, establishing internet connectivity, managing network device security,

More information

3. What could you use if you wanted to reduce unnecessary broadcast, multicast, and flooded unicast packets?

3. What could you use if you wanted to reduce unnecessary broadcast, multicast, and flooded unicast packets? Nguyen The Nhat - Take Exam Exam questions Time remaining: 00: 00: 51 1. Which command will give the user TECH privileged-mode access after authentication with the server? username name privilege level

More information

Device Interface IP Address Subnet Mask Default Gateway. Ports Assignment Network

Device Interface IP Address Subnet Mask Default Gateway. Ports Assignment Network Felix Rohrer Topology Diagram Addressing Table Device Interface IP Address Subnet Mask Default Gateway S1 VLAN 99 172.17.99.11 255.255.255.0 N/A S2 VLAN 99 172.17.99.12 255.255.255.0 N/A S3 VLAN 99 172.17.99.13

More information

UniNets CCNA Security LAB MANUAL UNiNets CCNA Cisco Certified Network Associate Security LAB MANUAL UniNets CCNA LAB MANUAL

UniNets CCNA Security LAB MANUAL UNiNets CCNA Cisco Certified Network Associate Security LAB MANUAL UniNets CCNA LAB MANUAL UNiNets CCNA Cisco Certified Network Associate Security LAB MANUAL Contents: UniNets CCNA Security LAB MANUAL Section 1 Securing Layer 2 Lab 1-1 Configuring Native VLAN on a Trunk Links Lab 1-2 Disabling

More information

Lab - Configuring VLANs and Trunking (Solution)

Lab - Configuring VLANs and Trunking (Solution) (Solution) Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway S1 VLAN 1 192.168.1.11 255.255.255.0 N/A S2 VLAN 1 192.168.1.12 255.255.255.0 N/A PC-A NIC 192.168.10.3

More information

Configuring Voice VLAN

Configuring Voice VLAN CHAPTER 15 This chapter describes how to configure the voice VLAN feature on the Catalyst 3750 switch. Unless otherwise noted, the term switch refers to a standalone switch and a switch stack. Voice VLAN

More information

Table of Contents. isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ

Table of Contents. isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ king Between a Catalyst 3550 and Catalyst Switches Running isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ Table of Contents Configuring

More information

CLI Guide. JetStream 8-Port Gigabit Smart Switch T1500G-10MPS/T1500G-8T (TL-SG2008) T1500G-10PS (TL-SG2210P) REV

CLI Guide. JetStream 8-Port Gigabit Smart Switch T1500G-10MPS/T1500G-8T (TL-SG2008) T1500G-10PS (TL-SG2210P) REV CLI Guide JetStream 8-Port Gigabit Smart Switch T1500G-10MPS/T1500G-8T (TL-SG2008) T1500G-10PS (TL-SG2210P) REV1.0.2 1910012064 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice.

More information

Lab Configuring and Verifying Extended ACLs Topology

Lab Configuring and Verifying Extended ACLs Topology Topology 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 8 Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 192.168.10.1

More information

CCNA Security 1.0 Student Packet Tracer Manual

CCNA Security 1.0 Student Packet Tracer Manual 1.0 Student Packet Tracer Manual This document is exclusive property of Cisco Systems, Inc. Permission is granted to print and copy this document for non-commercial distribution and exclusive use by instructors

More information

Configuring the Cisco NAM 2220 Appliance

Configuring the Cisco NAM 2220 Appliance CHAPTER 5 This section describes how to configure the Cisco NAM 2220 appliance to establish network connectivity, configure IP parameters, and how to perform other required administrative tasks using the

More information

ASA Version 7.2(4)30! hostname vpn domain-name hollywood.com enable password BO5OGdtIUElAVJc7 encrypted passwd BO5OGdtIUElAVJc7 encrypted names name

ASA Version 7.2(4)30! hostname vpn domain-name hollywood.com enable password BO5OGdtIUElAVJc7 encrypted passwd BO5OGdtIUElAVJc7 encrypted names name ASA Version 7.2(4)30 hostname vpn domain-name hollywood.com enable password BO5OGdtIUElAVJc7 encrypted passwd BO5OGdtIUElAVJc7 encrypted names name 172.30.232.128 XL description XL / idot name 172.28.28.0

More information

TestOut Routing and Switching Pro - English 6.0.x COURSE OUTLINE. Modified

TestOut Routing and Switching Pro - English 6.0.x COURSE OUTLINE. Modified TestOut Routing and Switching Pro - English 6.0.x COURSE OUTLINE Modified 2017-07-10 TestOut Routing and Switching Pro Outline- English 6.0.x Videos: 133 (15:42:34) Demonstrations: 78 (7:22:19) Simulations:

More information

Skills Assessment (OSPF) Student Training Exam

Skills Assessment (OSPF) Student Training Exam Skills Assessment (OSPF) Student Training Exam Topology 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 17 Addressing Table Assessment Objectives Device

More information

Lab - Examining Telnet and SSH in Wireshark

Lab - Examining Telnet and SSH in Wireshark Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 192.168.1.1 255.255.255.0 N/A PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1 Part 1: Configure the Devices

More information

Lab Configuring Dynamic and Static NAT (Solution)

Lab Configuring Dynamic and Static NAT (Solution) (Solution) Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway Gateway G0/1 192.168.1.1 255.255.255.0 N/A S0/0/1 209.165.201.18 255.255.255.252 N/A ISP S0/0/0 (DCE)

More information

Numerics INDEX. 2.4-GHz WMIC, contrasted with 4.9-GHz WMIC g 3-6, x authentication 4-13

Numerics INDEX. 2.4-GHz WMIC, contrasted with 4.9-GHz WMIC g 3-6, x authentication 4-13 INDEX Numerics 2.4-GHz WMIC, contrasted with 4.9-GHz WMIC 1-8 802.11g 3-6, 3-9 802.1x authentication 4-13 A AAA server group 4-25 aaa authentication login command 4-24 aaa authorization command 4-27 aaa

More information

PT Activity: Configure AAA Authentication on Cisco Routers

PT Activity: Configure AAA Authentication on Cisco Routers PT Activity: Configure AAA Authentication on Cisco Routers Instructor Version Topology Diagram Addressing Table Device Interface IP Address Subnet Mask R1 Fa0/0 192.168.1.1 255.255.255.0 S0/0/0 10.1.1.2

More information

Troubleshooting Network analysis Software communication tests and development Education. Protocols used for communication (10 seconds capture)

Troubleshooting Network analysis Software communication tests and development Education. Protocols used for communication (10 seconds capture) Lab 1 Wireshark Wireshark is an open source and free packet analyser used for many purposes, such as: Troubleshooting Network analysis Software communication tests and development Education This reports

More information

Skills Assessment (EIGRP) Student Training Exam

Skills Assessment (EIGRP) Student Training Exam Skills Assessment (EIGRP) Student Training Exam Topology 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 16 Addressing Table Assessment Objectives Device

More information

Console Port, Telnet, and SSH Handling

Console Port, Telnet, and SSH Handling Console Port Overview, on page 1 Connecting Console Cables, on page 1 Installing USB Device Drivers, on page 1 Console Port Handling Overview, on page 2 Telnet and SSH Overview, on page 2 Persistent Telnet,

More information

Lab Configuring Dynamic and Static NAT (Instructor Version Optional Lab)

Lab Configuring Dynamic and Static NAT (Instructor Version Optional Lab) (Instructor Version Optional Lab) Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Optional activities are designed to enhance understanding and/or

More information

1 of :22

1 of :22 Feedback: Help us help you Please rate this document. Excellent Good Average Fair Poor This document solved my problem. Yes No Just Browsing Suggestions to improve this document. (512 character limit)

More information

Lab 5: Basic VLAN Configuration

Lab 5: Basic VLAN Configuration Topology Diagram Addressing Table Device (Hostname) Interface IP Address Subnet Mask Default Gateway S1 VLAN 99 172.17.99.11 255.255.255.0 N/A S2 VLAN 99 172.17.99.12 255.255.255.0 N/A S3 VLAN 99 172.17.99.13

More information

Configuring EtherChannel

Configuring EtherChannel L4 Configuring EtherChannel Global Knowledge Training LLC L4-1 Objectives In this lab you will first verify that one of the parallel connections to the core switch is blocked by STP. You will then configure

More information

Payload Types At Different OSI Layers: Layer 2 - Frame Layer 3 - Packet Layer 4 - Datagram

Payload Types At Different OSI Layers: Layer 2 - Frame Layer 3 - Packet Layer 4 - Datagram Payload Types At Different OSI Layers: Layer 2 - Frame Layer 3 - Packet Layer 4 - Datagram Default Cisco Terminal Options: 9600 bits/second No hardware flow control 8-bit ASCII No parity 1 stop bit Setting

More information

Interconnecting Cisco Networking Devices Part 1 ( )

Interconnecting Cisco Networking Devices Part 1 ( ) Interconnecting Cisco Networking Devices Part 1 (100-101) Exam Description: The 100-101 Interconnecting Cisco Networking Devices Part 1 (ICND1) is a 1.5- hour exam with 50 60 questions. The 100-101 Interconnecting

More information

Lab - Troubleshooting Standard IPv4 ACL Configuration and Placement Topology

Lab - Troubleshooting Standard IPv4 ACL Configuration and Placement Topology Lab - Troubleshooting Standard IPv4 ACL Configuration and Placement Topology 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 8 Addressing Table Objectives

More information

CCNA Routing and Switching (NI )

CCNA Routing and Switching (NI ) CCNA Routing and Switching (NI400+401) 150 Hours ` Outline The Cisco Certified Network Associate (CCNA) Routing and Switching composite exam (200-125) is a 90-minute, 50 60 question assessment that is

More information

ICND1. Switch Configuration Lab. All configurations have been set to factory defaults for these labs

ICND1. Switch Configuration Lab. All configurations have been set to factory defaults for these labs ICND1 Switch Configuration Lab TOPOLOGY 3xPC (hosts) 2x2950 (Layer 2 Switches) 1x3560 (Layer 3 Switch) 5x2811 (Routers, unused in this set of labs) All configurations have been set to factory defaults

More information

CCNA. Murlisona App. Hiralal Lane, Ravivar Karanja, Near Pethe High-School, ,

CCNA. Murlisona App. Hiralal Lane, Ravivar Karanja, Near Pethe High-School, , CCNA Cisco Certified Network Associate (200-125) Exam DescrIPtion: The Cisco Certified Network Associate (CCNA) Routing and Switching composite exam (200-125) is a 90-minute, 50 60 question assessment

More information

Skills Assessment (OSPF) Student Training Exam

Skills Assessment (OSPF) Student Training Exam Skills Assessment (OSPF) Student Training Exam Topology Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 16 Addressing Table Device Interface IP Address Subnet

More information

Configuring Private VLANs

Configuring Private VLANs 36 CHAPTER This chapter describes private VLANs (PVLANs) on Catalyst 4500 series switches. It also provides restrictions, procedures, and configuration examples. This chapter includes the following major

More information

Network security session 9-2 Router Security. Network II

Network security session 9-2 Router Security. Network II Network security session 9-2 Router Security Network II Router security First line of defense of the network Compromise of a router can lead to many issues: Denial of network services Degrading of network

More information

Cisco Networking Academy CCNP

Cisco Networking Academy CCNP Semester 3 v5 -Chapter 8 Cisco Networking Academy CCNP Minimizing Service Loss and Data Theft in a Campus Network Switch security concerns Network security coverage often focuses on edge-routing devices

More information

itexamdump 최고이자최신인 IT 인증시험덤프 일년무료업데이트서비스제공

itexamdump 최고이자최신인 IT 인증시험덤프   일년무료업데이트서비스제공 itexamdump 최고이자최신인 IT 인증시험덤프 http://www.itexamdump.com 일년무료업데이트서비스제공 Exam : 642-813 Title : Implementing Cisco IP Switched Networks Vendor : Cisco Version : DEMO Get Latest & Valid 642-813 Exam's Question

More information

Using Cisco IOS XE Software

Using Cisco IOS XE Software This chapter describes the basics of using the Cisco IOS XE software and includes the following section: Accessing the CLI Using a Router Console, on page 1 Accessing the CLI Using a Router Console Before

More information

Understanding and Configuring Private VLANs

Understanding and Configuring Private VLANs CHAPTER 8 This chapter describes private VLANs on the Catalyst 4000 family switches. It also provides guidelines, procedures, and configuration examples. This chapter includes the following major sections:

More information

AutoSecure. Finding Feature Information. Last Updated: January 18, 2012

AutoSecure. Finding Feature Information. Last Updated: January 18, 2012 AutoSecure Last Updated: January 18, 2012 The AutoSecure feature secures a router by using a single CLI command to disable common IP services that can be exploited for network attacks, enable IP services

More information

Lab Configuring IPv4 Static and Default Routes (Solution)

Lab Configuring IPv4 Static and Default Routes (Solution) (Solution) Topology Addressing Table Device Interface IP Address Subnet Mask Default Gateway R1 G0/1 192.168.0.1 255.255.255.0 N/A S0/0/1 10.1.1.1 255.255.255.252 N/A R3 G0/1 192.168.1.1 255.255.255.0

More information

T e c h n i c a l D o c u m e n t. Cisco 2960G, 2960S, and 2960X Configuration for WheatNet-IP

T e c h n i c a l D o c u m e n t. Cisco 2960G, 2960S, and 2960X Configuration for WheatNet-IP 1 T e c h n i c a l D o c u m e n t Cisco 2960G, 2960S, and 2960X Configuration for WheatNet-IP Overview Let s take a look at what needs to be done to get your Cisco 2960 ready for the installation of

More information

Configuring the SSL Services Module

Configuring the SSL Services Module CHAPTER 3 This chapter describes how to configure the SSL Services Module from the Line Interface (CLI) of the module: Using the CLI, page 3-1 Preparing to Configure the SSL Services Module, page 3-1 Upgrading

More information

Configuring Web-Based Authentication

Configuring Web-Based Authentication This chapter describes how to configure web-based authentication on the switch. It contains these sections: Finding Feature Information, page 1 Web-Based Authentication Overview, page 1 How to Configure

More information

Written by Alexei Spirin Wednesday, 02 January :06 - Last Updated Wednesday, 02 January :24

Written by Alexei Spirin Wednesday, 02 January :06 - Last Updated Wednesday, 02 January :24 This is a pretty complex but robust switch configuration with almost maximum access layer security in mind. I call it L2-security and it includes: - 802.1x (used with Microsoft Radius service for user

More information

MR2228-S2C. Stack Fast Ethernet Switch Management Guide

MR2228-S2C. Stack Fast Ethernet Switch Management Guide MR2228-S2C Stack Fast Ethernet Switch Management Guide Management Guide Stackable Fast Ethernet Switch with 24 10/100BASE-TX (RJ-45) Ports, 2 1000BASE-T Combination Ports (RJ-45/SFP), and 2 1000BASE-T/Stacking

More information

Retake - Skills Assessment Student Training (Answer Key)

Retake - Skills Assessment Student Training (Answer Key) Retake - Skills Assessment Student Training (Answer Key) Name:. Topology Assessment Objectives Part 1: Develop the IPv4 Address Scheme (15 points, 0 minutes) Part 2: Configure Device IPv4 and Security

More information

Layer 2 Ethernet Switch Allied Telesyn AT-8000S

Layer 2 Ethernet Switch Allied Telesyn AT-8000S Layer 2 Ethernet Switch Allied Telesyn AT-8000S CLI Reference Guide Allied Telesyn AT-8000S CLI Reference Guide Table of Contents Table of Contents Preface... 10 Intended Audience...11 Document Conventions...11

More information