This document discusses basic switch configuration steps for remote management, including configuring an IP address, subnet mask, and default gateway on a switch virtual interface; configuring switch ports at the physical layer; enabling MDIX auto-detection on ports; verifying port configuration; configuring secure SSH access; and connecting the switch to the internet. It provides detailed instructions for connecting to the switch, setting the hostname and passwords, restricting Telnet access by IP, assigning the management IP address and default gateway, and saving the configuration.

1. Presentation_ID 1
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Basic Switch Configuration
Preparing for Basic Switch Management
 In order to remotely manage a Cisco switch, it needs to
be configured to access the network
 An IP address and a subnet mask must be configured
 If managing the switch from a remote network, a default
gateway must also be configured
 The IP information (address, subnet mask, gateway) is
to be assigned to a switch SVI (switch virtual interface)
 Although these IP settings allow remote management
and remote access to the switch, they do not allow the
switch to route Layer 3 packets.

2. Presentation_ID 2
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Basic Switch Configuration
Preparing for Basic Switch Management

3. Presentation_ID 3
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Configure Switch Ports
Configure Switch Ports at the Physical Layer

4. Presentation_ID 4
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Configure Switch Ports
MDIX Auto Feature

5. Presentation_ID 5
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Configure Switch Ports
Verifying Switch Port Configuration

6. Presentation_ID 6
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Secure Remote Access
Configuring SSH

7. Presentation_ID 7
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Connecting to the Internet
Connecting Businesses to the Internet

8. Presentation_ID 8
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
STEP1: Connect to the device via console
 Use a terminal emulation software such as PuTTY and connect to the console of
the switch
STEP2: Set up a hostname
STEP3: Configure an administration password (enable secret password)
STEP4: Configure a password for Telnet and Console access
switch(config)# line vty 0 15
switch(config-line)# password <………..>
switch(config-line)# login
switch1(config-line)# exit
access-switch1(config)# line console 0
access-switch1(config-line)# password <…………………..>
access-switch1(config-line)# login
access-switch1(config-line)# exit

9. Presentation_ID 9
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
STEP5: Define which IP addresses are allowed to access the switch via Telnet
switch1(config)# ip access-list standard TELNET-ACCESS
switch1(config-std-nacl)# permit 10.1.1.100
switch1(config-std-nacl)# permit 10.1.1.101
switch1(config-std-nacl)# exit
!Apply the access list to Telnet VTY Lines
switch1(config)# line vty 0 15
switch1(config-line)# access-class TELNET-ACCESS in
switch1(config-line)# exit
switch1(config)#

10. Presentation_ID 10
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential
STEP6: Assign IP address to the switch for management
Management IP is assigned to Vlan 1 by default
switch1(config)# interface vlan 1
switch1(config-if)# ip address 10.1.1.200 255.255.255.0
switch1(config-if)# exit
switch1(config)#
STEP7: Assign default gateway to the switch
switch1(config)# ip default-gateway 10.1.1.254
STEP8: Save the configuration
switch1(config)# exit
switch1# wr