Network Switching - Configuration
& Troubleshooting
Colorful Command Reference for Network Engineers
VLAN Configuration Commands
• `vlan 10` – Create VLAN 10
• `name HR` – Name the VLAN
• `interface range fa0/1 - 5` – Select a range of ports
• `switchport mode access` – Set ports to access mode
• `switchport access vlan 10` – Assign VLAN 10 to ports
• `show vlan brief` – Display VLANs and port assignments
VLAN Troubleshooting Commands
• `show vlan brief` – Verify if VLAN exists
• `show interfaces switchport` – View port VLAN details
• `show running-config` – Verify port VLAN configuration
• `show interface fa0/1 status` – Check port status
Trunk Port Configuration
• `interface fa0/24` – Select trunk port
• `switchport trunk encapsulation dot1q` – Set 802.1Q trunking
• `switchport mode trunk` – Configure port as trunk
• `switchport trunk allowed vlan 10,20` – Allow specific VLANs
Trunk Port Troubleshooting
• `show interfaces trunk` – View trunk interface details
• `show vlan` – Ensure VLANs are active
• `show interfaces fa0/24 switchport` – Check trunk configuration
STP (Spanning Tree Protocol)
Configuration
• `spanning-tree vlan 10 priority 24576` – Set VLAN priority
• `spanning-tree portfast` – Enable fast STP on access ports
• `show spanning-tree` – Display STP information
• `show spanning-tree vlan 10` – STP info for VLAN 10
STP Troubleshooting
• `show spanning-tree detail` – Analyze STP root and roles
• `debug spanning-tree events` – View live STP activity
MAC Address Table Commands
• `show mac address-table` – Display MAC learning table
• `clear mac address-table dynamic` – Clear dynamic MAC entries
Port Security Configuration
• `switchport port-security` – Enable port security on interface
• `switchport port-security maximum 2` – Limit MAC addresses
• `switchport port-security violation shutdown` – Action on violation
• `switchport port-security mac-address sticky` – Sticky MACs
• `show port-security interface fa0/1` – Verify configuration
Port Security Troubleshooting
• `show port-security` – View all secure ports
• `show port-security address` – View learned secure MACs
• `errdisable recovery cause security-violation` – Enable recovery
EtherChannel (L2) Configuration
• `interface range fa0/1 - 2` – Select EtherChannel interfaces
• `channel-group 1 mode active` – Enable LACP
• `show etherchannel summary` – View EtherChannel status
Interface Diagnostics Commands
• `show interfaces fa0/1` – Detailed interface statistics
• `show running-config interface fa0/1` – Config of specific port
• `show ip interface brief` – Summary of all interfaces
Device Discovery (CDP/LLDP)
• `show cdp neighbors` – Cisco Discovery Protocol info
• `show lldp neighbors` – Link Layer Discovery info
Common Troubleshooting
Commands
• `show logging` – Review device logs
• `show version` – Check software/hardware info
• `ping`, `traceroute` – Test network connectivity
• `show arp` – View MAC to IP mappings
Summary for Real-time Use
• Use `show` and `debug` to narrow issues
• Always double-check configurations
• Focus on interfaces first when troubleshooting
• Build internal knowledge by documenting issues & fixes