How to configure cisco catalyst switch

1
2
3
4
5

#Show current login users
show users

# terminal a user
clear line vty 0

1
2
3
4
5
6
7

config t
line vty 0 15
exec-timeout 10
session-timeout 10

#Check configure
sh run | be line vty

1

no service config

1
2
3
4

ip default-gateway 192.168.0.1

interface vlan 1
ip address 192.168.0.2 255.255.255.0

1
2
3

config t
hostname myswitch
ip domain-name mydomain.com

1
2
3
4
5
6
7
8

myswitch(config)# crypto key generate rsa
 The name for the keys will be: myswitch.thegeekstuff.com
 Choose the size of the key modulus in the range of 360 to 2048 for your
   General Purpose Keys. Choosing a key modulus greater than 512 may take
   a few minutes.

How many bits in the modulus [512]: 1024
 % Generating 1024 bit RSA keys, keys will be non-exportable...[OK]

1
2
3
4
5
6

line vty 0 4
session-timeout 10
transport input ssh
login local
password 7
exit

1
2
3

line console 0
logging synchronus
login local

1
2
3

config t
username $USERNAME password $MYPASSWORD
enable secret $MYENABLEPASSWORD

1

service password-encryption

1

show ip ssh

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

interface Port-channel1
 description testing
 switchport trunk allowed vlan 4-12
 switchport trunk encapsulation dot1q
 switchport mode trunk
 
 
 
 # network port settings
 interface GigabitEthernet1/0/27
 description lacp-wifi-network
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-protocol lacp
 channel-group 3 mode active
!
interface GigabitEthernet1/0/28
 description lacp-wifi-network
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-protocol lacp
 channel-group 3 mode active
 
 
 

1
2
3

interface GigabitEthernet1/0/29
 switchport access vlan 60
 switchport mode access

1

snmp-server community public RO

1
2

ntp source vlan 20
ntp server 10.32.0.2 source vlan 20

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# Enable PBR on cisco 3750x
sdm prefer routing

#save configuration
write

#Reload switch to let it works.
reload

#check sdm status
show sdm prefer


# Define access list
ip access-list extended wifi
 permit ip 10.32.200.0 0.0.0.255 any
 deny   ip any any

#define reout-map and set routing policy
route-map wifi-2rd-gw permit 10
 match ip address wifi
 set ip next-hop 192.168.99.2
 
 
 #select a vlan to apply PBR
 interface Vlan30
 ip policy route-map wifi-2rd-gw