Configuring a network switch involves several key steps, and the CLI (Command Line Interface)
commands can vary slightly depending on the brand (Cisco, Juniper, Maipu, etc.). Below is a generic
step-by-step process along with common CLI commands:
1. Access the Switch
Direct Console Access: Use a serial cable and connect to the switch’s console port.
SSH or Telnet Access: For remote management, access the switch via SSH (more secure) or Telnet (less
secure) using an IP address.
bash
Kodu kopyala
ssh username@switch_ip
For a Cisco switch, for example, use a terminal emulator (PuTTY, Tera Term) to connect via the serial
port.
2. Enter Global Configuration Mode
Once logged in, enter the global configuration mode to make changes to the switch’s configuration.
bash
Kodu kopyala
enable
configure terminal
3. Set the Hostname
Setting the hostname is a basic configuration step. This identifies the switch in a network.
bash
Kodu kopyala
hostname SwitchName
4. Configure Management IP Address (for remote access)
Assign an IP address to the VLAN interface (usually VLAN 1).
bash
Kodu kopyala
interface vlan 1
ip address 192.168.1.10 255.255.255.0
no shutdown
This allows the switch to be accessed remotely over the network.
5. Set Up a Default Gateway
Configure a default gateway to allow the switch to communicate with devices outside its local subnet.
bash
Kodu kopyala
ip default-gateway 192.168.1.1
6. Configure VLANs
Creating VLANs for network segmentation.
bash
Kodu kopyala
vlan 10
name HR
exit
vlan 20
name IT
exit
Assign VLANs to ports:
bash
Kodu kopyala
interface range gigabitEthernet 0/1 - 24
switchport mode access
switchport access vlan 10
7. Configure Trunk Ports (for inter-VLAN communication)
For switches to communicate across VLANs, configure trunk ports.
bash
Kodu kopyala
interface gigabitEthernet 0/1
switchport mode trunk
switchport trunk allowed vlan 10,20
8. Configure Access Control Lists (ACLs)
To limit traffic between VLANs or certain devices, configure ACLs.
bash
Kodu kopyala
ip access-list standard HR_VLAN
permit 192.168.1.0 0.0.0.255
exit
interface vlan 10
ip access-group HR_VLAN in
9. Save the Configuration
It’s essential to save your changes so they persist after a reboot.
bash
Kodu kopyala
write memory
or
bash
Kodu kopyala
copy running-config startup-config
For Cisco Switches:
Cisco’s CLI commands typically start with enable to enter privileged EXEC mode. Here are some
additional specific Cisco commands:
Configure Port Speed:
bash
Kodu kopyala
interface gigabitEthernet 0/1
speed 1000
duplex full
Enable SSH Access:
bash
Kodu kopyala
ip domain-name example.com
crypto generate rsa
username admin privilege 15 secret adminpassword
line vty 0 4
transport input ssh
login local
For Juniper Switches:
Juniper switches use Junos OS. Here’s a sample configuration:
bash
Kodu kopyala
set system host-name SwitchName
set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members vlan-10
set vlans vlan-10 vlan-id 10
set vlans vlan-10 l3-interface irb.10
set routing-instances default routing-options static route 0.0.0.0/0 next-hop 192.168.1.1
commit
For Maipu Switches:
Maipu switches use similar commands to Cisco, but with slight variations. For example:
bash
Kodu kopyala
system-view
hostname SwitchName
interface vlanif 1
ip address 192.168.1.10 255.255.255.0
quit
Conclusion
While each switch brand has its nuances, the general steps—access, configuration of IP, VLANs,
trunking, and saving—are common. Make sure to follow the specific documentation for the brand of
switch you’re working with to ensure compatibility with your network’s architecture.
