Basic Switch & End-Device Configuration – Comprehensive Study Notes
Topic & Structure of the Lesson
- Course code: AICT012-4-2 – Networking Technologies; Version VE3.
- Focus: Basic Switch & End-Device Configuration.
- Eight sub-topics (each later expanded):
- Cisco IOS Access
- IOS Navigation
- Command Structure
- Basic Device Configuration
- Save Configurations
- Ports & Addresses
- Configure IP Addressing
- Verify Connectivity
- Objectives for the entire lesson:
- Explain purpose and access methods of Cisco IOS.
- Navigate IOS to configure network devices (CLI focus).
- Understand & employ command structure.
- Perform initial switch/router configuration via CLI.
- Save, back-up and restore configurations.
- Describe how devices communicate over media (interfaces, ports, IP addressing).
- Configure hosts with IP information (manual & DHCP).
- Verify connectivity (e.g., PING, traceroute).
Learning Outcomes (Post-Topic Competency)
- Accurately use technical terms in assignments/exams:
- startup-configuration, running-configuration, console, Telnet, auxiliary (AUX), user & privileged EXEC, interfaces/ports, PING, IP address, DHCP, etc.
- Practical skills: hostname assignment, password protection, encryption, banner messages, IP configuration, connectivity testing.
Key Terms You Must Be Able to Use
- startup-configuration, running-configuration, console, Telnet, auxiliary
- Privileged EXEC access vs. User EXEC access
- Interfaces & Ports, PING
- IP address, DHCP
Cisco IOS Access
Operating-System Components
- Shell – user interface (CLI or GUI) accepting commands.
- Kernel – mediator between hardware & software; allocates resources.
- Hardware – physical electronics.
GUI vs. CLI
- GUIs (Windows, macOS, Linux KDE, iOS, Android): friendly, icon-based, but can fail/crash.
- Network devices are predominantly administered via CLI for reliability, scriptability & low overhead.
Purpose of an OS in Different Contexts
- PC OS enables mouse interaction, text entry, graphical output.
- Network OS (CLI-based) enables keyboard interaction, textual commands, console/terminal output.
Access Methods to Network Devices
- Console – dedicated physical mgmt port; used for first-time config & disaster recovery.
- SSH – secure remote CLI over network; encryption & authentication; recommended.
- Telnet – insecure remote CLI (plaintext); legacy; avoid in production.
- AUX – out-of-band serial dial-up port (noted as "Aux???" in slide; still exists on many routers).
Terminal-Emulation Programs
- Provide local or remote CLI session (serial or IP): PuTTY, Tera Term, SecureCRT, etc.
IOS Navigation
Primary Command Modes
- User EXEC
- Limited monitoring commands.
- Prompt ends with > (e.g.,
Switch>).
- Privileged EXEC
- Full command set;
enable moves into this mode. - Prompt ends with # (e.g.,
Switch#).
Configuration & Sub-configuration Modes
- Global Configuration (
(config)#) – device-wide settings. - Line Configuration (
(config-line)#) – console, VTY (SSH/Telnet), AUX. - Interface Configuration (
(config-if)#) – physical/virtual ports (e.g., VLAN 1, FastEthernet0/1).
Moving Between Modes
enable : User EXEC → Priv. EXEC.configure terminal : Priv. EXEC → Global Config.line console 0, line vty 0 15, interface vlan 1 : Global → corresponding sub-mode.exit : back up one level.end or Ctrl+Z : any Config mode → Priv. EXEC.- Shortcut: directly type target sub-mode command to jump (e.g., from
(config-line)# to (config-if)#).
NetAcad Syntax-Checker Activity (commands sequence)
enable, disable, enable, configure terminal, exit, configure terminal, line console 0, exit, line vty 0 15, exit, interface vlan 1, line console 0, end.
Hot Keys & Shortcuts
- Command abbreviation to unique substring (e.g.,
conf for configure). - Editing/navigation keystrokes:
- Tab: auto-complete.
- Backspace: delete char left of cursor.
- Ctrl+B / Left Arrow: cursor left.
- Ctrl+F / Right Arrow: cursor right.
- Ctrl+P / Up Arrow: previous command history.
- Paging control (when “--More--” appears):
- Enter: next line.
- Space: next screen.
- Any other key: abort display & return to Priv. EXEC.
- Exit/Break:
- Ctrl+C or Ctrl+Z: terminate config & return to Priv. EXEC.
- Ctrl-Shift-6: universal break (abort ping, traceroute, DNS lookup, etc.).
The Command Structure
Keywords vs. Arguments
- Keyword: predefined literal in IOS (e.g.,
ip, router, hostname). - Argument: user-supplied variable (e.g.,
192.168.10.5).
Command-Syntax Conventions
- Bold = type exactly as shown.
- Italics = replace with your own value.
[x] optional element.{x} required element.[x {y | z}] choice list within optional element.- Spaces separate command parts – mandatory.
Examples
ping *ip-address* ⇒ e.g., ping 10.10.10.5.traceroute *ip-address* ⇒ e.g., traceroute 192.168.254.254.- Complex syntax displayed in documentation with same conventions.
Help & Validation Mechanisms
- Context-sensitive help (
?)- Lists available commands/keywords in current mode.
- Partial command +
? shows completions (e.g., sh?).
- Command-syntax check
- IOS parser returns error/usage hint if command malformed.
Basic Device Configuration
Device Names (Hostnames)
- First step in any config.
- Default switch name is Switch.
- Naming rules:
- Start with letter; end with letter/digit.
- No spaces; allowed: letters, digits, dashes.
- < 64 characters.
hostname *NEWNAME* in global config.no hostname returns to default.
Password Security & Guidelines
- Protect User EXEC, Priv. EXEC & remote (VTY) access.
- Recommendations:
- Length > 8 characters.
- Mix upper/lowercase, digits, symbols.
- Avoid reuse across devices & common words.
- Classroom labs often use simple
cisco / class (only for practice).
- Console (User EXEC) access
line console 0password *P*login
- Privileged EXEC
- From global config:
enable secret *P* (encrypted, MD5).
- VTY lines (SSH/Telnet)
line vty 0 15password *P*login- Up to 16 VTY lines (0-15).
Encrypt All Passwords
service password-encryption : converts plaintext passwords to type 7.- Verify via
show running-config.
Banner Messages (Legal Notification)
- Deterrent to unauthorized access.
banner motd # *Your message here* ## = delimiting character; same char must enclose text.
NetAcad Activity – Secure Mgmt Access
- Steps practiced: hostname, console pwd, enable secret, VTY pwd, encrypt pwds, login banner.
Save Configurations
Config Files & Memory Types
- running-config : stored in RAM; volatile; active immediately.
- startup-config : stored in NVRAM/flash; preserved after reboot.
- Save changes:
copy running-config startup-config (or write memory).
Reverting / Erasing
- If running-config unsaved, reload to revert (
reload). - If faulty config already saved, erase & reload:
erase startup-configreload (clears running-config from RAM).- Note: causes brief network outage.
Capture Config to Text File (Archiving)
- Open terminal emulator (connected via console/SSH).
- Enable logging; choose filename/location (e.g., MySwitchLogs.txt).
- Issue
show running-config or show startup-config; output captured. - Stop logging (set to None).
- File serves as backup; may need minor edits before pasting back.
Ports and Addresses
IPv4 Basics
- Address = 32 bits; dotted-decimal (four octets 0!–!255).
- Subnet mask = 32-bit value distinguishing network vs. host portion.
- Default gateway = router’s IP used for off-subnet traffic.
IPv6 Basics
- Address = 128 bits; written as 32 hex digits grouped by colons.
- Case-insensitive (a-f / A-F).
- Designed to replace IPv4; both referred to as “IP” in course.
- Communication relies on:
- End-device NICs / interfaces.
- Networking-device ports (switch ports, router interfaces).
- Physical media: twisted-pair, fiber, coax, wireless.
- Media selection criteria: distance, environment, bandwidth/speed, cost.
Manual (Static) Configuration on Windows PC
- Control Panel → Network & Sharing Center → Change adapter settings.
- Right-click adapter → Properties.
- Select Internet Protocol Version 4 (TCP/IPv4) → Properties.
- Enter IP, subnet mask, default gateway (and DNS if required).
- IPv6 equivalent in Internet Protocol Version 6 (TCP/IPv6).
Automatic (Dynamic) Configuration
- DHCP provides IPv4 info automatically.
- Default Windows setting is DHCP.
- Steps identical to manual until IPv4 properties; choose:
- Obtain an IP address automatically.
- Obtain DNS server address automatically.
- IPv6 uses DHCPv6 or SLAAC.
Switch Virtual Interface (SVI) Configuration
- Enables remote mgmt of Layer-2 switch.
- Global config commands:
interface vlan 1ip address *ip-addr* *subnet-mask*no shutdown
Verification Activities & Videos
- NetAcad labs: Verify Windows IP, Configure SVI, Test Interface Assignment, Test End-to-End Connectivity (e.g.,
ping PC ↔ PC).
Ethical / Practical Considerations
- Use strong passwords & encrypted protocols (SSH) to prevent unauthorized access.
- Banner MOTD serves legal notice; potentially admissible evidence.
- Care with
erase startup-config & reload; downtime implications. - Type 7 password encryption is weak—use enable secret (MD5) or newer algorithms where available.
Summary of Main Teaching Points (Chapter 2)
- Cisco IOS functions & features.
- Initial device setup via CLI: hostname, passwords, banner, SVI.
- Saving/restoring configuration files.
- IP addressing on hosts & switches enabling small/medium business connectivity.
Upcoming Module
- Protocols and Models (sets conceptual foundation for later configuration topics).