Switch Configuration

1
Switch Configuration

• Module 6, Review

2
6.1.2 Switch LED indicators

• The default setting for the mode LED on a switch
  is STAT.
• The series of tests that execute every time a
  switch is powered on is called power-on self
  test.

3
6.1.3 Verifying port LEDs during switch POST

• The System LED indicates the success or failure
  of POST.
• If the System LED is off but the switch is
  plugged in, then POST is running.
• If the System LED is green, then POST was
  successful.
• If the System LED is amber, then POST failed.
• POST failure is considered to be a fatal error.

4
6.1.4 Viewing Initial bootup Output from the
switch

• Use a rollover cable to connect the console port
  on the back of the switch to a COM port on the
  back of the computer.
• The switch may be configured manually with or
  without the assistance of the System
  Configuration dialog.

5
6.1.4 Viewing Initial bootup Output from the
switch

• Hyperterminal configuration settings
• 9600 bits per second
• Hardware flow control
• No Parity

6
6.1.5 Examining help in the switch CLI

• To list keywords or arguments that are associated
  with a particular command, enter one or more
  words associated with the command, followed by a
  space and then a question mark (?). This form of
  help is called command syntax help, because it
  provides applicable keywords or arguments based
  on a partial command.
• Ex
• If a user wanted to know what the next set of
  arguments available in the syntax for configure
  they would use Switch configure ?

7
6.1.6 Switch Command Modes

• Access to Privileged EXEC mode should be password
  protected to prevent unauthorized use.

8
6.2.2 Configuring the catalyst switch

• To change from Global Configuration mode to
  Privileged EXEC mode use
• Ctrl z
• End
• exit
• Switch configuration mode is entered from
  privileged EXEC mode.
• To remove any previously programmed VLANs you
  must delete the vlan.dat file and reload the
  switch.
• The following steps will ensure that a new
  configuration will completely overwrite any
  existing configuration
• Remove any existing VLAN information by deleting
  the VLAN database file vlan.dat from the flash
  directory
• Erase the back up configuration file
  startup-config
• Reload the switch

9
6.2.2 Configuring the catalyst switch

• Switch access with a browser
• Once a switch is configured with an IP address
  and gateway, it can be accessed in this way.
• A web browser can access this service using the
  IP address and port 80, the default port for
  http.
• The HTTP service can be turned on or off, and the
  port address for the service can be chosen.
• Administrator host connectivity to Switch
  management VLAN.

10
6.2.3 Managing the MAC address table

• If no frames are seen with a previously learned
  address, the MAC address entry is automatically
  discarded or aged out after 300 seconds.
• When the switch is not learning the MAC address
  of a new host use the following commands to
  troubleshoot the switch
• Switch show port security
• Switch clear mac-address-table

11
6.2.5 Configuring Port Security

• Secure MAC addresses can be set statically.
• Set port security on a switch interface. The
  number of MAC address per port can be limited to
  1. The first address dynamically learned by the
  switch becomes the secure address.
• Shutdown unused ports.

12
6.2.5 Configuring Port Security

• When setting the action to be taken when a port
  security violation occurs on a switch port use
  the following options
• Trap
• Shutdown

13
6.2.7 Managing switch operating system file

• When the copy-tftp-flash command is used to
  upgrade the IOS on a switch the ! symbol
  indicates that the image was copied successfully.

14
6.2.8 1900/2950 Password Recovery

• To initiate password recovery, hold down the MODE
  button during switch startup.

15
6.2.9 1900/2900 Firmware Upgrade

• TFTP is the protocol used to copy a new image to
  a Catalyst switch during an upgrade procedure.
• In order to create a backup of the switch IOS
  image on a server use the following syntax
• Switchcopy flash tftp

16
Troubleshooting

• When adding a group of hosts to a new Fast
  Ethernet switch that has not yet been programmed
  the following will occur
• Hosts will negotiate bandwidth with the switch
  based on their NICs.
• All of the hosts will be in the same VLAN.
• All of the hosts should be able to send and
  receive ARP messages from each other.
• To insure that a workstation on a Switched
  Ethernet LAN is able to get access when it is
  upgraded with a new Fast Ethernet NIC, deactivate
  port security on the port until the new host has
  connected to the network