The new basic switch configuration command
Switch
Switch # the configure Terminal
Switch (config) # hostname name 9F-4 switch is set to 4-9F
9F-4 (config) # username test Secret 1234.com cipher text password to set the user named test
9F- 4 (config) # enable secret 1234.com provided enable the cipher text password
9F-4 (config) # vlan 800 new vlan
9F. 4-(config-vlan) # name Mgmt provided vlan name
9F-4 (config) # vlan 200
4-9F (config-vlan) # name the User
9F-4 (config-vlan) # ip address 172.16.112.5 255.255.255.0 set vlan 800 of the IP (managed IP)
9F-4 (config-vlan) # vlan exit exit editor
. 4-9F (config) #interface gigabitEthernet 1/0/23
9F. 4-(config-IF) # switchport configuration MODE Access VLAN
9F. 4-(config-IF) # switchport Access VLAN 200 is
9F. 4-(config-IF) # spanning-tree portfast setting port fast start
9F-4 (config-if) # description menjin port configuration name for menjin
(config-IF) Speed # 10 to set the speed 9F-4 1OM
9F-4 (config-IF) Full Duplex # set the port for full-duplex
9F- 4 (config-if) # switchport trunk native vlan 200 disposed port Native
9F-. 4 (config) # interface port-channel11 provided port Channel. 11
9F-. 4 (config-IF) # switchport MODE Trunk
9F-. 4 (config) # 1/0/28 gigabitEthernet interface
9F. 4-(config-IF) # switchport MODE Trunk port configured Trunk
9F. 4-(config-IF). 11 # channel-MODE Active group in the application channel port, typically for a group 2
Core Switch Configurations
Configuring the DHCP service
IP DHCP the pool the User
Network 172.16.200.0 255.255.255.0 DHCP address pool
default-router 172.16.200.1 gateway
DNS Server 202.96.209.133 8.8.8.8 the DNS-
Lease lease. 8 (if it is 04, that is, 4 hours)
IP DHCP excluded address -address 172.16.200.2 172.16.200.10 reserved
ip route 0.0.0.0 0.0.0.0 172.16.10.3 default route
ip route 0.0.0.0 0.0.0.0 172.16.11.3 20 Default Route
This route is arranged to automatically switch the means to cut off 172.16.10.3 172.16.11.3
ACL configuration (deny policy, to be applied in the direction of the vlan Guest)
ip Extended Access-List Guest
deny ip 10.112.250.0 0.0.0.255 10.112.10.0 0.0.0.255
deny ip IP IP wildcards access segments Guest anti-segment cover code
the deny IP 10.112.250.0 0.0.0.255 10.112.12.0 0.0.0.255
the deny IP 10.112.250.0 10.112.100.0 0.0.0.255 0.0.0.255
the deny IP 10.112.250.0 0.0.0.255 10.112.50.0 0.0.0.255
the deny IP 10.112.250.0 0.0. 192.168.11.0 0.0.0.255 0.255
deny ip 10.112.250.0 0.0.0.255 0.0.0.255 10.112.1.0
in permit ip the any the any
!
interface Vlan600
the Description the Guest
ip address 10.112.250.1 255.255.255.0
ip-Access in the Guest Group