2.3.3.5 Lab - Configuring A Switch Management Address - ILM PDF
2.3.3.5 Lab - Configuring A Switch Management Address - ILM PDF
Lab - Co
onfigurin
ng a Switch Man
nageme
ent Addrress (Insstructor
V
Version)
Instructor No
ote: Red font color or Gray
y highlights ind
dicate text tha
at appears in the instructor copy only.
T
Topology
A
Addressing
g Table
Device
D Interface IP Address
A Subnet Mas
sk Defau
ult Gateway
S1 VLAN 1 192.16
68.1.2 2
255.255.255.0
0 N/A
PC
C-A NIC 192.16
68.1.10 2
255.255.255.0
0 N/A
O
Objectives
Part 1: Co
onfigure a Basic Network
k Device
Cable
e the network as shown in the topology.
Config witch settings including hos
gure basic sw stname, mana
agement address, and Telnet access.
Config
gure an IP ad
ddress on the PC.
Part 2: Ve
erify and Tes
st Network Connectivity
C
Displa
ay device con
nfiguration.
Test end-to-end
e co
onnectivity witth ping.
Test remote
r gement capability with Telnet.
manag
Save the switch running configu
uration file.
B
Backgroun
nd / Scenarrio
a a switch vi rtual interface
Cisco switches have a special interfface, known as e (SVI). The S SVI can be coonfigured
with an IP
P address, commmonly referrred to as the managementt address tha at is used for rremote accesss to the
switch to display
d or con
nfigure setting
gs.
In this lab
b, you will build a simple ne
etwork using Ethernet
E N cabling and access a Cissco switch using the
LAN
console and
a remote ac ccess method ds. You will co
onfigure basicc switch settin
ngs and IP ad
ddressing, and
d
demonstra ate the use of a managem ment IP addres ss for remote switch mana agement. The topology connsists of
one switch and one ho ost using only Ethernet and d console portts.
Note: The
e switches used are Cisco Catalyst 2960s with Cisco
o IOS Release e 15.0(2) (lan
nbasek9 imag
ge). Other
switches and
a Cisco IOS S versions ca
an be used. Depending
D on the model an nd Cisco IOS version, the available
command ds and output produced might vary from
m what is show
wn in the labss.
Note: Make sure that the switch has d and has no startup configuration. If yo
s been erased ou are unsure
e, contact
your instru
uctor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 10
Lab - Configuring a Switch Management Address
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 10
Lab - Configuring a Switch Management Address
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 10
Lab - Configuring a Switch Management Address
<output omitted>
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
!
ip http server
ip http secure-server
!
banner motd ^C
Unauthorized access is strictly prohibited. ^C
!
line con 0
password cisco
login
line vty 0 4
password cisco
login
line vty 5 15
login
!
end
b. Verify the status of your SVI management interface. Your VLAN 1 interface should be up/up and have an
IP address assigned. Notice that switch port F0/6 is also up because PC-A is connected to it. Because all
switch ports are initially in VLAN 1, by default, you can communicate with the switch using the IP address
you configured for VLAN 1.
S1# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Vlan1 192.168.1.2 YES manual up up
FastEthernet0/1 unassigned YES unset down down
FastEthernet0/2 unassigned YES unset down down
FastEthernet0/3 unassigned YES unset down down
FastEthernet0/4 unassigned YES unset down down
FastEthernet0/5 unassigned YES unset down down
FastEthernet0/6 unassigned YES unset up up
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 10
L
Lab - Configu
uring a Switc
ch Managem
ment Address
s
FastE
Ethernet0/7 una
assigned YES unse
et down down
FastE
Ethernet0/8 una
assigned YES et
unse down down
FastE
Ethernet0/9 una
assigned YES et
unse down down
FastE
Ethernet0/10
0 una
assigned YES et
unse down down
FastE
Ethernet0/11
1 una
assigned YES et
unse down down
FastE
Ethernet0/12
2 una
assigned YES et
unse down down
FastE
Ethernet0/13
3 una
assigned YES et
unse down down
FastE
Ethernet0/14
4 una
assigned YES et
unse down down
FastE
Ethernet0/15
5 una
assigned YES et
unse down down
FastE
Ethernet0/16
6 una
assigned YES et
unse down down
FastE
Ethernet0/17
7 una
assigned YES et
unse down down
FastE
Ethernet0/18
8 una
assigned YES et
unse down down
FastE
Ethernet0/19
9 una
assigned YES et
unse down down
FastE
Ethernet0/20
0 una
assigned YES et
unse down down
FastE
Ethernet0/21
1 una
assigned YES et
unse down down
FastE
Ethernet0/22
2 una
assigned YES et
unse down down
FastE
Ethernet0/23
3 una
assigned YES et
unse down down
FastE
Ethernet0/24
4 una
assigned YES et
unse down down
Gigab
bitEthernet0
0/1 una
assigned YES et
unse down down
Gigab
bitEthernet0
0/2 una
assigned YES et
unse down down
S
Step 2: Tes
st end-to-en
nd connectiv
vity.
Open a co
ommand prom mpt window (c
cmd.exe) on PC-A by clickking the Wind dows Start iccon and enter cmd into
the Searc
ch for progra
ams and files
s field. Verify the
t IP addresss of PC-A byy using the ipc
config /all co
ommand.
This comm
mand displays the PC hostname and th he IPv4 addre
ess informatio
on. Ping PC-AA’s own addre ess and
the managgement addre
ess of S1.
a. Ping your
y own PC--A address firrst.
C:\Us
sers\NetAc
cad> ping 192.168.1.
1 10
Your output should
d be similar to
o the following
g screen:
b. Ping the
t SVI mana
agement addrress of S1.
C:\Us
sers\NetAc
cad> ping 192.168.1.
1 2
Your output shouldd be similar to
o the following
g screen. If pi ng results are
e not successsful, troublesh
hoot the
basic device config
gurations. Youu should chec ck both the phhysical cablinng and IP adddressing, if neecessary.
S
Step 3: Tes
st and verify
y remote ma
anagement of S1.
You will now use Telne et to remotelyy access the switch
s S1 usin
ng the SVI ma anagement address. In this lab,
PC-A and d S1 reside sid de by side. In
n a productionn network, the
e switch could d be in a wirin
ng closet on th
he top
floor whilee your manag gement PC is located on th he ground flooor. Telnet is n
not a secure pprotocol. However, you
will use it in this lab to test remote access.
a ormation sen t by Telnet, in
All info ncluding passswords and
command ds, is sent acrross the sessiion in plain teext. In subseq uent labs, yo u will use Seccure Shell (SS
SH) to
remotely access
a netwoork devices.
Note: Win ndows 7 does s not natively support Telne
et. The admin
nistrator mustt enable this p
protocol. To in
nstall the
Telnet clie
ent, open a co
ommand prom mpt window and
a type pkgm mgr /iu:“T TelnetClien nt”.
C:\Us
sers\NetAc
cad> pkgmgr
r /iu:”Tel
lnetClient”
”
a. With the
t command d prompt wind
dow still open on PC-A, isssue a Telnet ccommand to cconnect to S1 via the
SVI management
m address.
a The password is cisco.
C:\Us
sers\NetAc
cad> telnet
t 192.168.1.2
Your output should
d be similar to
o the following
g screen:
S
Step 4: Sav
ve the configuration file.
a. From your Telnet session,
s issue
e the copy ru
un start comm
mand at the p
prompt.
S1# copy
c run start
s
Desti
ination fi
ilename [st
tartup-con
nfig]? [Ent
ter]
Build
ding confi
iguration ..
.
S1#
he Telnet ses
b. Exit th ssion by typing
g quit. You will d to the Wind
w be returned dows 7 comm
mand prompt.
R
Reflection
Why mustt you use a co
onsole conne
ection to initiallly configure tthe switch? W
Why not conne
ect to the swittch via
Telnet or SSH?
________
___________
____________
___________
___________
____________
____________
___________
________
No IP adddressing parameters are co
onfigured yet.. A switch firsst placed into service has n
no networking
g
configured
d.
D
Device Con
nfigs
S
Switch S1(Complete))
S
S1#show run
n
B
Building co
onfigurati
ion...
!
C
Current con
nfiguratio
on : 1508 bytes
b
!
v
version 15.
.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 10
Lab - Configuring a Switch Management Address
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
!
ip http server
ip http secure-server
!
banner motd ^C
Unauthorized access is strictly prohibited. ^C
!
line con 0
password cisco
login
line vty 0 4
password class
login
line vty 5 15
login
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 10