For Writing King

homeworkstudy

2_3_3_5_Configuring_a_Switch_Management_Address.pdf

Home >Computer Science homework help >For Writing King

Lab - Co

Topology

Addressing

Objectives

Part 1: Co

 Cable

 Config

Part 2: Ve

 Displa

 Test e

 Test r

 Save

Backgroun

Cisco swi with an IP switch to d

In this lab console a demonstra one switc

Note: The switches a command

Note: Ma your instru

Required R

 1 Swi

d/or its affiliates.

onfigurin

g Table

Device

C-A N

onfigure a B

e the network

gure basic sw

gure an IP ad

erify and Tes

ay device con

end-to-end co

remote manag

the switch ru

nd / Scenar

tches have a P address, com display or con

b, you will buil and remote ac ate the use o h and one ho

e switches us and Cisco IOS ds and output

ke sure that t uctor.

Resources

tch (Cisco 29

All rights reserve

ng a Sw

Interface

LAN 1

asic Network

as shown in

witch settings

ddress on the

st Network C

nfiguration.

onnectivity wit

gement capa

nning configu

rio

special interf mmonly refer nfigure setting

d a simple ne ccess method f a managem

ost using only

ed are Cisco S versions ca produced mi

he switch has

960 with Cisco

ed. This docume

itch Man

IP A

192.16

k Device

the topology.

including hos

PC.

Connectivity

th ping.

bility with Tel

uration file.

face, known a rred to as the gs.

etwork using E ds. You will co

ment IP addres Ethernet and

Catalyst 296 an be used. D ght vary from

s been erased

o IOS Releas

ent is Cisco Publi

nageme

Address

68.1.2 2

68.1.10 2

stname, mana

net.

as a switch vi management

Ethernet LAN onfigure basic ss for remote d console port

0s with Cisco Depending on m what is show

d and has no

e 15.0(2) lanb

ic.

ent Addr

Subnet Mas

255.255.255.0

agement add

rtual interface t address tha

N cabling and c switch settin

switch mana ts.

o IOS Release the model an

wn in the labs

startup confi

basek9 image

ress

sk Defau

0 N/A

ress, and Tel

e (SVI). The S at is used for r

access a Cis ngs and IP ad agement. The

e 15.0(2) (lan nd Cisco IOS s.

guration. If yo

e or compara

ult Gateway

net access.

SVI can be co remote acces

sco switch usi ddressing, and topology con

nbasek9 imag version, the

ou are unsure

able)

Page 1 of 8

onfigured ss to the

ng the d nsists of

ge). Other available

e, contact

Lab - Configuring a Switch Management Address

 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)

 Console cables to configure the Cisco IOS devices via the console ports

 Ethernet cables as shown in the topology

Part 1: Configure a Basic Network Device

In Part 1, you will set up the network and configure basic settings, such as hostnames, interface IP addresses, and passwords.

Step 1: Cable the network.

a. Cable the network as shown in the topology.

b. Establish a console connection to the switch from PC-A.

Step 2: Configure basic switch settings.

In this step, you will configure basic switch settings, such as hostname and configuring an IP address for the SVI. Assigning an IP address on the switch is only the first step. As the network administrator, you must specify how the switch will be managed. Telnet and Secure Shell (SSH) are two of the most common management methods; however, Telnet is a very insecure protocol. All information flowing between the two devices is sent in plain text. Passwords and other sensitive information can be easily looked at if captured by a packet sniffer.

a. Assuming the switch had no configuration file stored in nonvolatile random-access memory (NVRAM), you will be at the user EXEC mode prompt on the switch with a prompt of Switch>. Enter privileged EXEC mode.

Switch> enable

Switch#

b. Verify a clean configuration file with the show running-config privileged EXEC command. If a configuration file was previously saved, it will have to be removed. Depending on the switch model and IOS version, your configuration may look slightly different. However, there should be no configured passwords or IP address set. If your switch does not have a default configuration, ask your instructor for help.

c. Enter global configuration mode and assign the switch hostname.

Switch# configure terminal

Switch(config)# hostname S1

S1(config)#

d. Configure the switch password access.

S1(config)# enable secret class

S1(config)#

e. Prevent unwanted Domain Name System (DNS) lookups.

S1(config)# no ip domain-lookup

S1(config)#

f. Configure a login message-of-the-day (MOTD) banner.

S1(config)# banner motd #

Enter Text message. End with the character ‘#’. Unauthorized access is strictly prohibited. #

Lab - Configuring a Switch Management Address

g. Verify your access setting by moving between modes.

S1(config)# exit

S1# S1# exit

Unauthorized access is strictly prohibited.

S1>

What shortcut keys are used to go directly from global configuration mode to privileged EXEC mode?

h. Return to privileged EXEC mode from user EXEC mode.

S1> enable

Password: class

S1#

Note: Password will not show up on screen when entering.

i. Enter global configuration mode to set the SVI IP address to allow remote switch management.

S1# config t

S1#(config)# interface vlan 1

S1(config-if)# ip address 192.168.1.2 255.255.255.0

S1(config-if)# no shut

S1(config-if)# exit

S1(config)#

j. Restrict console port access. The default configuration is to allow all console connections with no password needed.

S1(config)# line con 0

S1(config-line)# password cisco

S1(config-line)# login

S1(config-line)# exit

S1(config)#

k. Configure the virtual terminal (VTY) line for the switch to allow Telnet access. If you do not configure a VTY password, you will not be able to Telnet to the switch.

S1(config)# line vty 0 4

S1(config-line)# password cisco

S1(config-line)# login

S1(config-line)# end

S1#

*Mar 1 00:06:11.590: %SYS-5-CONFIG_I: Configured from console by console

Lab - Configuring a Switch Management Address

Step 3: Configure an IP address on PC-A.

a. Assign the IP address and subnet mask to the PC, as shown in the Addressing Table on page 1. The procedure for assigning an IP address on a PC running Windows 7 is described below:

1) Click the Windows Start icon > Control Panel.

2) Click View By: > Category.

3) Choose View network status and tasks > Change adapter settings.

4) Right-click Local Area Network Connection and select Properties.

5) Choose Internet Protocol Version 4 (TCP/IPv4), click Properties > OK.

6) Click the Use the following IP address radio button and enter the IP address and subnet mask.

Part 2: Verify and Test Network Connectivity

You will now verify and document the switch configuration, test end-to-end connectivity between PC-A and S1, and test the remote management capability of the switch.

Step 1: Display the S1 device configuration.

a. Return to your console connection using Tera Term on PC-A to display and verify your switch configuration by issuing the show run command. A sample configuration is shown below. The settings you configured are highlighted in yellow. The other configuration settings are IOS defaults.

S1# show run Building configuration...

Current configuration : 1508 bytes

! Last configuration change at 00:06:11 UTC Mon Mar 1 1993

version 15.0

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname S1

boot-start-marker

boot-end-marker

enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2

no aaa new-model

system mtu routing 1500

no ip domain-lookup

spanning-tree mode pvst

Lab - Configuring a Switch Management Address

spanning-tree extend system-id

vlan internal allocation policy ascending

interface FastEthernet0/1

interface FastEthernet0/2

interface FastEthernet0/24

interface GigabitEthernet0/1

interface GigabitEthernet0/2

interface Vlan1

ip address 192.168.1.2 255.255.255.0

ip http server

ip http secure-server

banner motd ^C

Unauthorized access is strictly prohibited. ^C

line con 0

password cisco

line vty 0 4

password cisco

line vty 5 15

end

b. Verify the status of your SVI management interface. Your VLAN 1 interface should be up/up and have an IP address assigned. Notice that switch port F0/6 is also up because PC-A is connected to it. Because all switch ports are initially in VLAN 1, by default, you can communicate with the switch using the IP address you configured for VLAN 1.

S1# show ip interface brief Interface IP-Address OK? Method Status Protocol

Vlan1 192.168.1.2 YES manual up up

FastEthernet0/1 unassigned YES unset down down

FastEthernet0/2 unassigned YES unset down down

FastEthernet0/3 unassigned YES unset down down

FastEthernet0/4 unassigned YES unset down down

FastEthernet0/5 unassigned YES unset down down

FastEthernet0/6 unassigned YES unset up up

Lab - Configu

FastE

Gigab

Step 2: Tes

Open a co the Searc This comm the manag

a. Ping y

C:\Us

Your

uring a Switc

d/or its affiliates.

Ethernet0/7

Ethernet0/8

Ethernet0/9

Ethernet0/10

Ethernet0/11

Ethernet0/12

Ethernet0/13

Ethernet0/14

Ethernet0/15

Ethernet0/16

Ethernet0/17

Ethernet0/18

Ethernet0/19

Ethernet0/20

Ethernet0/21

Ethernet0/22

Ethernet0/23

Ethernet0/24

bitEthernet0

st end-to-en

ommand prom ch for progra mand display gement addre

your own PC-

sers\NetAc

output should

ch Managem

All rights reserve

una

0 una

1 una

2 una

3 una

4 una

5 una

6 una

7 una

8 una

9 una

0 una

1 una

2 una

3 una

4 una

0/1 una

0/2 una

nd connectiv

mpt window (c ams and files s the PC hos ess of S1.

-A address fir

cad> ping 1

d be similar to

ment Address

ed. This docume

assigned

vity.

cmd.exe) on s field. Verify t tname and th

rst.

192.168.1.

o the following

ent is Cisco Publi

YES unse

PC-A by click the IP addres

he IPv4 addre

g screen:

ic.

et down

king the Wind ss of PC-A by ess informatio

dows Start ic y using the ipc on. Ping PC-A

down

con and enter config /all co

A’s own addre

Page 6 of 8

cmd into ommand. ess and

Lab - Configu

b. Ping t

C:\Us

Your basic

Step 3: Tes

You will n PC-A and floor while will use it command remotely a

Note: Win Telnet clie

C:\Us

a. With t SVI m

C:\Us

Your

uring a Switc

d/or its affiliates.

the SVI mana

sers\NetAc

output should device config

st and verify

ow use Telne d S1 reside sid e your manag in this lab to

ds, is sent acr access netwo

ndows 7 does ent, open a co

sers\NetAc

the command management a

sers\NetAc

output should

ch Managem

All rights reserve

agement addr

cad> ping 1

d be similar to gurations. You

y remote ma

et to remotely de by side. In

gement PC is test remote a

ross the sessi ork devices.

s not natively ommand prom

cad> pkgmgr

d prompt wind address. The

cad> telnet

d be similar to

ment Address

ed. This docume

ress of S1.

192.168.1.

o the following u should chec

anagement

y access the s n a production

located on th access. All info ion in plain te

support Telne mpt window a

r /iu:”Tel

dow still open password is

t 192.168.

o the following

ent is Cisco Publi

g screen. If pi ck both the ph

of S1.

switch S1 usin n network, the he ground floo ormation sen

ext. In subseq

et. The admin and type pkgm

lnetClient”

on PC-A, iss cisco.

1.2

g screen:

ic.

ng results are hysical cablin

ng the SVI ma e switch could or. Telnet is n t by Telnet, in uent labs, yo

nistrator must mgr /iu:“T

”

sue a Telnet c

e not success ng and IP add

anagement a d be in a wirin not a secure p ncluding pass u will use Sec

t enable this p TelnetClien

command to c

sful, troublesh dressing, if ne

ddress. In thi ng closet on th protocol. How swords and cure Shell (SS

protocol. To in nt”.

connect to S1

Page 7 of 8

hoot the ecessary.

s lab, he top ever, you

SH) to

nstall the

via the

Lab - Configu

b. After promp

Step 4: Sav

a. From

S1# c

Desti

Build

S1#

b. Exit th

Reflection

Why must Telnet or

uring a Switc

d/or its affiliates.

entering the c pt. Enter the c

ve the confi

your Telnet s

copy run s

ination fi

ding confi

he Telnet ses

t you use a co SSH?

ch Managem

All rights reserve

cisco passwo class passwo

guration fil

session, issue

start

ilename [st

iguration .

ssion by typing

onsole conne

ment Address

ed. This docume

ord, you will b ord to enter p

e the copy ru

tartup-con

g quit. You w

ection to initial

ent is Cisco Publi

be at the user rivileged EXE

un start comm

nfig]? [Ent

will be returned

lly configure t

ic.

r EXEC mode EC mode and

mand at the p

ter]

d to the Wind

the switch? W

e prompt. Typ issue a show

prompt.

dows 7 comm

Why not conne

e enable at th w run comma

mand prompt.

ect to the swit

Page 8 of 8

he and.

tch via

Text1:
2: