Maeve: Created entire page

2024-10-10T17:35:11Z

Created entire page

New page

! '''Enter configuration mode'''
en
conf t

! '''Turn on rapid spanning tree'''
spanning-tree mode rapid-pvst

! '''Set the hostname'''
hostname '''examplename'''

! '''Enables password encryption'''
service password-encryption

! '''Optional. Enable secret followed by a password will require console users to provide a password before they can "enable" the switch, allowing them to edit conf mode, run show run, etc'''
enable secret '''supersecretpassword'''

! '''Create a superuser / admin. The name can be anything'''.
username AdminUser priv 15 secret '''incrediblysecurepassword'''

! '''Set Timezone'''
clock timezone UTC 0 0

! '''Set NTP server. If DNS is functional, use one of these'''.
ntp server 0.north-america.pool.ntp.org
ntp server 1.north-america.pool.ntp.org
ntp server 2.north-america.pool.ntp.org
ntp server 3.north-america.pool.ntp.org
! '''Alternatively, if you want this device to instead pull NTP from another device in your network, supply an IP'''.
! ntp server '''10.0.0.1'''

! '''aaa new-model enables a suite of features that are now standard across all other Cisco devices.'''
aaa new-model
aaa authentication login default local
! '''Console connection'''
aaa authorization console
! '''SSH connection'''
aaa authorization exec default local

! '''Disables requirement for password on the console. If enabled, this would be one step behind enable secret.'''
line con 0
no password
exit

! '''This configures SSH access in the same way that we configured the above console connection. a vty is a remote connection. IOS supports 16 concurrently'''.
line vty 0 15
no password
transport input ssh
exit

! '''Disables default interface for VLAN 1. VLAN 1 should be avoided when possible as this is the default VLAN that ports will take when reset.'''
int vlan 1
no ip address
shutdown

! '''Define a default domain name.'''
!no ip domain-lookup
ip domain-name '''your-internal-domain-name'''
ip name-server '''your-local-dns-server'''
! Generates a cryptokey to enable SSH
crypto key generate rsa modulus 4096
ip ssh version 2
! ip ssh {timeout seconds | authentication-retries number}

! '''Here we add a port to VLAN 10. This assumes VLAN 10 is the VLAN you're going to use for your primary management. Adjust as appropriate.'''
int te 1/0/48
switchport access VLAN 10
int vlan 18
ip address 192.168.10.10 255.255.255.0
ip default-gateway 192.168.10.1
exit

! '''Ping the device from itself to ensure the interface has come alive.'''
ping 192.168.10.10

! '''Write to memory.'''
wr

Cisco Catalyst Template - Revision history

Maeve: Created entire page