Access Switch Setup

Setting up an access switch involves connecting to the device, configuring basic parameters, securing access, assigning VLANs, and enabling management interfaces for network integration.

Step 1: Inspect and Connect Hardware

Before configuration, check the switch hardware for any damage, ensure all cables are properly connected, and power on the device. Verify that the system and port LEDs indicate normal operation (green for operational, blinking green for software loading) . Connect to the switch via the console port using a terminal emulator like PuTTY, selecting a 9600 baud serial connection .

Step 2: Enter Privileged EXEC Mode

At the console prompt, type enable to enter Privileged EXEC mode (Switch#). This mode allows you to execute configuration commands .

Step 3: Set Hostname and Domain

Assign a hostname to identify the switch in the network:

Switch(config)# hostname AccessSwitch1

Optionally, set a domain name for SSH and certificate purposes .

Step 4: Configure Passwords and Access Security

Set a Privileged EXEC password:

Switch(config)# enable secret YourStrongPassword

Secure console and VTY (Telnet/SSH) access:

Switch(config)# line console 0Switch(config-line)# password ConsolePassSwitch(config-line)# loginSwitch(config)# line vty 0 15Switch(config-line)# password VTYPassSwitch(config-line)# login

For enhanced security, consider using an AAA server for centralized authentication .

Step 5: Configure Management IP

Assign an IP address to the management VLAN to allow remote access:

Switch(config)# interface vlan 1Switch(config-if)# ip address 192.168.1.10 255.255.255.0Switch(config-if)# no shutdown

Set a default gateway for network connectivity:

Switch(config)# ip default-gateway 192.168.1.1

This enables Telnet or SSH access from other network segments .

Step 6: Configure VLANs and Access Ports

Create VLANs and assign ports:

Switch(config)# vlan 10Switch(config-vlan)# name SalesSwitch(config)# interface range g0/1 - 12Switch(config-if-range)# switchport mode accessSwitch(config-if-range)# switchport access vlan 10

For trunk ports connecting to other switches:

Switch(config)# interface g0/24Switch(config-if)# switchport mode trunkSwitch(config-if)# switchport trunk encapsulation dot1q

Check port capabilities with show int g0/1 capabilities .

Step 7: Disable Unused Ports

For security, shut down unused ports:

Switch(config)# interface range g0/13 - 23Switch(config-if-range)# shutdown

Step 8: Save Configuration

Save your configuration to prevent loss after reboot:

Switch# copy running-config startup-config

Optional: Advanced Features

• SSH Setup: Generate RSA keys for secure remote access:

Switch(config)# crypto key generate rsa

• NetFlow or Port Security: Monitor traffic and restrict unauthorized devices . By following these steps, your access switch will be secure, manageable, and ready for integration into your network environment. Proper VLAN assignment, port security, and management IP configuration ensure efficient traffic handling and network reliability.