2.9.2 Lab - Basic Switch and End Device Configuration

Summary

This instructional script outlines the process of configuring a basic network switch setup. It covers connecting devices, assigning static IP addresses, and establishing communication between two switches using either a crossover or straight-through cable. The script also details configuring switch settings via console access, setting hostnames, disabling DNS lookups, and securing access with passwords. It concludes with verifying connectivity and interface statuses.

Takeaways

• 🔌 Switches do not have a power switch; they power on automatically when the power cord is plugged in.
• 🖥️ Use straight-through cables to connect PCs to switches and either straight-through or crossover cables between switches.
• 💻 PCs should be configured with static IP addresses using the addressing table (e.g., PCA: 192.168.1.10, PCB: 192.168.1.11).
• 📝 Verify PC connectivity and settings with commands like `ipconfig` and `ping` to test between PCA and PCB.
• 🔐 Configure basic switch settings, including setting a hostname, disabling DNS lookups, and setting passwords (enable secret and line console passwords).
• 🔧 Use VLAN1 for basic switch interface configuration with an assigned IP address and ensure the interface is up.
• 🚫 Configure a message of the day banner to warn about unauthorized access using delimiters to encapsulate the message.
• 💾 Save the running configuration to the startup configuration using the `copy running-config startup-config` command.
• 📊 Use commands like `show running-config`, `show version`, and `show ip interface brief` to verify switch configurations, interface statuses, and iOS versions.
• 🖥️ Test connectivity between switches and PCs, checking for potential issues like wrong IP addresses, media disconnections, or firewall settings.

Q & A

What type of cable should be used to connect two PCs in this setup?

A straight-through cable should be used to connect the two PCs, PCA and PCB, to the switch.

How should you configure the IP addresses for PCA and PCB?

PCA should be configured with the IP address 192.168.1.10, subnet mask 255.255.255.0, and no default gateway or DNS. PCB should be configured with the IP address 192.168.1.11 and the same subnet mask.

How do you verify the IP settings and connectivity between the PCs?

You can verify the IP settings by using the 'ipconfig /all' command on each PC. Then, you can use the 'ping' command from PCA to ping PCB's IP address (192.168.1.11) and check for successful replies.

What is the process to configure a switch using the console cable?

Connect the console cable from PCA’s RS-232 port to the switch’s console port. Then, open a terminal on PCA and set the baud rate to 9600 with no parity. Enter global configuration mode on the switch by using 'enable' and 'configure terminal' commands.

What steps are necessary to prevent unwanted DNS lookups on the switch?

To prevent unwanted DNS lookups, you can disable DNS by entering the 'no ip domain-lookup' command in global configuration mode.

What commands are used to set up the passwords for switch security?

To set a password for privileged access, use the 'enable secret class' command. For the console line, use 'line console 0', then set the password with 'password Cisco' and enable login with 'login'.

How do you configure an IP address for the switch’s VLAN1 interface?

Enter interface configuration mode for VLAN1 using 'interface vlan 1'. Assign an IP address using 'ip address 192.168.1.1 255.255.255.0' and enable the interface with 'no shutdown'.

How can you configure a banner to warn unauthorized access to the switch?

To configure a banner, use the 'banner motd' command in global configuration mode. You can specify a custom message such as 'Unauthorized access is strictly prohibited'.

How do you save the switch’s configuration to ensure it persists after a reboot?

To save the configuration, use the 'copy running-config startup-config' command. This copies the current configuration into non-volatile memory (NVRAM).

What command shows the current configuration and status of the switch’s interfaces?

You can use the 'show running-config' command to display the current switch configuration and the 'show ip interface brief' command to see the status of all interfaces, including whether they are up or down.

Outlines

00:00

🔌 Basic Network Setup

This paragraph explains the basic setup of a network using switches and a crossover cable. It details the process of connecting devices and configuring static IP addresses on PCs. The switches are powered on by plugging in the power cord, and there's no power switch on them. The PCs are configured with static IP addresses using an addressing table, and the connectivity is verified using commands like 'ipconfig' or 'ipconfig /all'. The summary also touches on the use of straight-through cables for certain connections and the importance of correct cable types for network setup.

05:02

🛠️ Configuring Switch Settings

The second paragraph focuses on configuring the switch settings using a console cable connected to the switch's RS-232 port. It walks through the process of entering global configuration mode, setting the switch's hostname, and disabling DNS lookups to enhance security. The paragraph also covers setting up passwords for different levels of access, such as the enable secret for privileged access and the login password for console access. Additionally, it explains how to configure an interface with an IP address and subnet mask, and how to enable the interface and set a login banner to warn against unauthorized access.

10:03

📜 Saving and Reviewing Configuration

This section describes how to save the switch configuration and review it. It explains the process of exiting global configuration mode and using the 'copy running-config startup-config' command to save the current settings. The paragraph also details how to display the current configuration using 'show running-config' and how to view the IOS version and other switch information using 'show version'. Furthermore, it covers how to check the status of connected interfaces with 'show IP interface brief' and how to access the switch in user exec mode and global configuration mode.

15:05

🔄 Configuring Another Switch

The fourth paragraph continues the network setup by configuring a second switch. It covers similar steps as the first switch, including setting the hostname, disabling DNS lookups, and configuring passwords. It also explains how to configure an interface with an IP address and subnet mask, enable the interface, and set a banner message. The summary includes the process of saving the configuration and exiting from global configuration mode. Additionally, it mentions how to display the current configuration and check the status of connected interfaces.

20:18

🖥️ Verifying Network Connectivity

The final paragraph discusses the process of verifying network connectivity between switches and PCs. It explains how to check the status of connections and what factors can prevent a connection, such as wrong IP addresses, media disconnections, switch forwarding issues, administratively down ports, or firewalls on PCs. The paragraph also covers how to use commands to verify connectivity and suggests disabling firewalls on Windows PCs to allow pings. The summary emphasizes the importance of correct configuration and troubleshooting steps to ensure network connectivity.

Keywords

💡Switch

A network switch is a device that connects devices within a network and uses packet switching to forward data to the destination device. In the video, the switch is a central component in connecting PCs and configuring the network. It does not have a power switch and powers on when plugged in, playing a crucial role in facilitating communication between devices.

💡IP Address

An IP address is a unique identifier assigned to each device on a network, allowing it to communicate with other devices. In the video, IP addresses like '192.168.1.1' for PCA and '192.168.1.2' for PCB are configured to ensure proper network connectivity and communication between the PCs.

💡VLAN1

VLAN1 is the default virtual local area network (VLAN) on many switches, used to manage and segregate network traffic. In the video, the interface VLAN1 is assigned an IP address to enable communication on the network. This configuration is critical for ensuring that devices can communicate across the switch.

💡Subnet Mask

A subnet mask divides an IP address into network and host portions, determining how many devices can be addressed in the network. The subnet mask '255.255.255.0' used in the video defines a local network for both PCA and PCB, allowing them to communicate within the same subnet.

💡Crossover Cable

A crossover cable is a type of Ethernet cable used to connect two devices directly, such as switches or PCs, without a router. In the video, it is mentioned as an option for connecting two switches, emphasizing its role in network setup when direct communication is required.

💡Console Cable

A console cable is used to connect a computer to the console port of a switch or router for management and configuration purposes. In the video, the console cable is used to connect from PCA to the switch to access the switch's console and perform configuration tasks, such as setting IP addresses and passwords.

💡Enable Secret

The enable secret is a password that provides privileged access to a network device, such as a switch. It is encrypted for security. In the video, 'class' is set as the enable secret password to secure privileged access to the switch’s configuration, ensuring that only authorized users can modify settings.

💡Banner Message of the Day

A banner message of the day (MOTD) is a warning or informational message that appears when someone accesses a network device. In the video, a banner is configured to display 'Unauthorized access is prohibited' to warn anyone attempting to access the switch without permission.

💡Show Running Config

The 'show running-config' command displays the current active configuration on a network device, such as a switch. In the video, this command is used to review the switch's settings, including its hostname, IP configuration, and passwords, ensuring that the correct configurations are applied.

💡Ping

Ping is a network diagnostic tool used to test connectivity between devices by sending ICMP echo request packets. In the video, ping is used to verify communication between PCA and PCB after IP configuration, with successful replies confirming that the network is functioning correctly.

Highlights

Setting up basic switch and anti-base configuration using a straight-through cable between switches and crossover cable between PCs.

Powering on the switches automatically as soon as the power cord is plugged in; no power switch needed.

Configuring static IP addresses on PCA and PCB with specific IPs: PCA (11.1.10) and PCB (11.1.11), with subnet masks for both.

Verification of IP settings using 'ipconfig' and ping command to test connectivity between PCA and PCB.

Console access to switches using RS-232 ports on PCA, with terminal settings of 9600 bits per second and no parity.

Entering global configuration mode in switches using 'enable' command and setting hostname (S1 for switch 1).

Disabling unwanted DNS lookups on the switch using 'no ip domain-lookup' command.

Setting privileged access and control passwords using 'enable secret' and 'line console 0' commands.

Configuring VLAN1 interface with IP address 192.168.1.1 and enabling it using 'no shutdown' command.

Setting a banner message for unauthorized access warnings using 'banner motd' command.

Saving the configuration using 'copy running-config startup-config' command to save changes permanently.

Displaying current configuration using 'show running-config' to verify hostname, interface settings, and passwords.

Displaying the switch's iOS version and connected interfaces using 'show version' and 'show ip interface brief' commands.

Switch 2 configuration follows a similar process, including setting hostname (S2) and configuring VLAN1 interface with IP 192.168.1.2.

Successful ping tests between PCA and switches, as well as between PCA and PCB, indicating proper connectivity.

Transcripts

basic switch and anti base configuration

this topology turn a nice fixed a switch

as to PC PC a - a this will be now PCA -

faceted six use a straight through cable

for Saturn add to the Saturday at six

and from PCB facet on earth to pass

eternal 18 and between the switches you

can use a crossover cable or stray

through any I would use a stray through

further the not want to fuss at the not

work

this is the addressing terrible power on

the devices the switches do not have a

power switch

they will power on as soon as you plug

in the power cord okay

switches do not have a power switch

connect the two switches okay first the

red wire connected to facetted add one

on the other side okay lights green

indicates that the switches have been

connected correctly connect pcs

great so indicated busier he has been

connected currently also PCB configure

PC cause static IP addresses on PCs okay

use the addressing table PCA and PCB PCA

duck stop IP configuration one one that

Tang subnet mask 24 255 255 255 0 now

the forget way no DNS PCB 11 1.11 and

discipline mask then verify PC settings

and connectivity okay for example on PC

a

IP config the IP address and subnet mask

or ipconfig/all space the /all IP

addressing subnet mask same way PCB IP

config space slash all 11 pink from PCI

to PCB the IP address of PCB is xi 1 xi

ok success pockets and for receiveth for

lost 0 reply from 11

very nice configure amplify basic switch

settings consult into the switch okay

use the console cable to connect from

pca rs-232 port to as well console and

ports go to PCA and enter to terminal

beats per second

9600 data with a parody non-stop it's

one flow pattern on okay this is the

switch enter enter global configuration

mode okay before that use the enable

comment to access privilege exit mount

now you can see this now enter global

configuration mode with the configure

terminal commands give the switch name

according the address in table the

switch is s1 house name as one okay now

you can see the host name here s1

prevent unwanted DNS lookups to prevent

the switch from attempting to transfer

currently entered comments disable the

main name System DNS lookup now I peed

my lookup and the local passwords class

was the privileged access password and

cisco has the password for control axis

they enable secret class okay this is

the password class for the enable

comments enter enter to line console 0

there is only one line and set the

password Cisco and login to enable the

the password and you can see you are on

line configuration mode so you can exit

from from line configuration mode to

global configuration mode configure and

enable the switch portal interface

according to the addressing table okay

use this when I - as you see a 1-1 with

discipline mask

interface on interface vlan1 interface

belong one IP others 182 and 60 a 1-1

and subnet mask 24 or 255 255 255 0 ok

but this interface should be enabled no

no ok interface belong one change stay

to up line protocol on interface belong

one change stay - up enter a login

message of the day banner to warn about

unauthorized access

now as the message of the day

banner should be configured to warn

anyone accessing the switch the

notarized access will not be tolerated

okay for example when you enter

interface belong one you access to the

interface configuration world so you can

enter the you can configure the banner

here or not problem but I prefer to exit

from interface configuration world with

the exit common and now you are on

global configuration mode then set the

banner banner message of the day you can

use this for example this characters the

banner message of the day common

requires the use of telemeters to

identify the canal the content of the

banner message the delimiting character

can be any character as long as it does

not occur in the message for this reason

symbols are often used okay here the

message for example point out to rice

axis is strictly prohibited

okay this is the common enter this is

the message

the the limiters here and here now save

the configuration go to privilege exit

mode exit when you are on privilege exit

mount use the following command copy

running-config star up coffee use the

copy command to save the running

configuration to the startup file no

volatile random access memory mb ram

okay from the ROM to the MB ROM from the

running config to the asteroid confi

enter enter to configure ok

this display the current configuration

the current configuration is place it on

the running config so you can show the

running config show running config ok

look at this the hostname the enable

secret this is class password but is

encrypted might be the main look are the

interfaces the interface belong one with

IP address and subnet mask the banner

the password for line consult and

logging ok I will repeat the command

show running config and you can see more

here and press the the spacebar to

advanced paging space space space space

space bar

now display the iOS version and other

useful switch information they show

version 4 to show that ok this is the

version for the bootloader but the

version for the image is not present on

Pocket racer but I can I can show flash

content so this is my iOS image and the

person is 12.2 on show version commands

the version is is here 12.2 ok for the

switch for the Tony nice which display

the status of the connected interfaces

use privilege exit mount use the

following command show IP interface

brief you can see all interfaces

including the switch button interface

belong one configure switch to ok

repeat all but four switch to console

into the switch from rs-232 port on the

PC to the console port on the switch go

to PCB and terminal ok this is switch to

other in able to access the this is the

user except mode enabled to access the

high polish accent marks and third

global configuration mode with the

configure terminal commands now you are

on global configuration mode set the

hostname hostname as to prevent unwanted

DNS lookups no IP to make the cop you

can use - or space any of the any of

those options the passwords enable

secret class this is the password for

the enable comment and for the line

console 0 password is Cisco line console

0 password Cisco login login to enable

this password configure the switch

filter interface ok that's it ok to exit

from line configuration mode to the

global configuration mode the IP address

on million-one is 1.2 interface vlan1 IP

others 192 168 1 the 2 subnet mask 255

255 255 0 enable the interface with the

nation' down comment the banner ok exit

from interface configuration mode and

banner message of the day choose any

character like this on now to arise it

access is prohibited other save the

configurations they exit from global

configuration mode that's it and now you

are tribal - exit mult and copy from RAM

that is the running config

- MB RAM that is star up coffee enter

enter display the current configuration

and privilege exit mode shall running

coffee space spacebar spacebar the

interface burner possible on console

display that iOS version show version

turn that to status of the connected

interfaces show IP interface brief ok

remember the show comments are place it

privilege exit mount under now you can

see all all interfaces and switch

beautiful interface ok record the

interface status for the following

interfaces ok this is switch to and look

at this belong wrong up up ok status up

protocol up okay on switch to force it

another one up and up okay this is the

connection to another switch the

connection to pc+ not a teen status up

protocol up another port like faceted

six status down protocol down go to as

one from PCI this console okay the

connection to PC faceted six status up

protocol up the connection to the

another switch status up protocol up

switch built on interface up up for

settlement 18 that is not connected

start to stop protocol down from PCC

pink as well and as to no PCC but I will

use PCA to be if s1 and s2 this is the

terminal the connected to the console of

as well close this go to command prompt

okay this is PCA I become fixed to

verify one that Sam would take to switch

s1 that is one that one

success also switch to that is 1.2 okay

the pink from BCI to a swamp success PCA

to s to success finally from PC a pink

PCB PCB is that close this that is the

console to switch to command prompt I be

gone three this 1.11 go to PC a1 b2 1.11

success why some fuss settlement boards

on the switches are up and others are

done the faceted ports are up when

tables are connected to the ports unless

they were manually done by the

administrator

otherwise the ports would be down what

could prevent a pin from being sent

between the PCs wrong IP address media

disconnected switch forward off or ports

administratively down or firewall on the

PC okay remember unreal up disable the

firewall on Windows PCs to permit the

pink thank you