VLAN and Trunk
VLAN makes separate broadcast domain and divide one physical
broadcast domain to different virtual domains.
VLAN 1: It is the default vlan that all interfaces
are assigned to it. We can’t delete or rename the VLAN1.
VLAN Features:
·
Logical Group Users
·
Segments Broadcast Domain
·
Subnet correlation
·
Access Control
·
Quality of Service
·
Security
·
Management
·
Traffic Control
How to create a new VLAN
HRT-S1# vlan database
HRT-S1(vlan-if)#vlan 100
HRT-S1(vlan-if)#name finance
How to assign ports to a VLAN
HRT-S1(config-if)#switchport mode access
HRT-S1(config-if)#switchport access vlan 100
How to see VLANs
HRT-S1# show vlan 100
HRT-S1(config-if)#do show vlan brief
Trunk: Different VLANs can communicate with each
other through trunking. And it is used between two switches ports to allow the
same VLANs on each switch to communicate together.
Switch interface Mode
HRT-S1(config-if)#switchport mode access
HRT-S1(config-if)#switchport mode trunk
HRT-S1(config-if)#switchport trunk (auto, negotiable,
nonnegotiable, desirable)
Inter VLAN
Allow different of VLANs in a single switch to communicate
to each other through sub-interfaces of a router.
VTP
VTP stands for vlan trunking protocol. It is used to create
communication among vlan of different switches.
VTP Mode:
1.
Server: create, change and
update vlans(By default all VTP mode is server)
2.
Client: only update vlans
3.
Transparent: It is neutral
and just pass the updates
HTTP Activation
By activating of HTTP protocol in Cisco’s device, we can
login to them graphically and do configuration or changes.
Router (config)# ip http server
Router (config)# ip http secure-server
Router (config)#ip http authentication local
Router (config)# username admin privilege 15 password admin
or secret admin
Router (config)# line vty 0 15
Router (config-line)#password 12345
Router (config)# line console
Router (config-line)# password
Router (config)# interface fastethernet 0/1
Router (config-if)# ip address 10.10.10.1 255.0.0.0
Router (config)# do wr
Password Recovery for Cisco 2950
Switches
The default configuration for the
switch allows an end user with physical access to the switch to recover from a
lost password by interrupting the boot process during power-on and by entering
a new password. These recovery procedures require that you have physical access
to the switch.
Note
On these switches, a system administrator can disable some of
the functionality of this feature by allowing an end user to reset a password
only by agreeing to return to the default configuration. If you are an end user
trying to reset a password when password recovery has been disabled, a status
message shows this during the recovery process.
These sections describes how to
recover a forgotten or lost switch password:
•
Procedure with Password Recovery
Enabled
•
Procedure with Password Recovery
Disabled
You enable or disable password
recovery by using the service
password-recovery global configuration command. Follow the steps in this
procedure if you have forgotten or lost the switch password.
Step 1
Initialize the flash file system:
switch:
flash_init
Step 2
If you had set the console port speed to anything other than
9600, it has been reset to that particular speed. Change the emulation software
line speed to match that of the switch console port.
Step 3
Load any helper files:
swtch:
load_helper
Step 4
Display the contents of flash memory:
switch:
dir flash:
The switch file system appears:
Directory
of flash:
13
drwx 192 Mar 01 1993 22:30:48 c2960-lanbase-mz.122-25.FX
11
-rwx 5825 Mar 01 1993 22:31:59 config.text
18
-rwx 720 Mar 01 1993 02:21:30 vlan.dat
16128000
bytes total (10003456 bytes free)
Step 5
Rename the configuration file to config.text.old.
This file contains the password
definition.
switch:
rename flash:config.text flash:config.text.old
Step 6
Boot the system:
switch:
boot
You are prompted to start the setup
program. Enter N at the prompt:
Continue
with the configuration dialog? [yes/no]: N
Step 7
At the switch prompt, enter privileged EXEC mode:
Switch>
enable
Step 8
Rename the configuration file to its original name:
Switch#
rename flash:config.text.old flash:config.text
Step 9
Copy the configuration file into memory:
Switch#
copy flash:config.text system:running-config
Source
filename [config.text]?
Destination
filename [running-config]?
Press Return in response to the
confirmation prompts.
The configuration file is now
reloaded, and you can change the password.
Step 10
Enter global configuration mode:
Switch#
configure terminal
Step 11
Change the password:
Switch
(config)# enable secret password
The secret password can be from 1 to
25 alphanumeric characters, can start with a number, is case sensitive, and
allows spaces but ignores leading spaces.
Step 12
Return to privileged EXEC mode:
Switch
(config)# exit
Switch#
Step 13
Write the running configuration to the startup configuration
file:
Switch#
copy running-config startup-config
The new password is now in the
startup configuration.
Note
This procedure is likely to leave your switch virtual
interface in a shutdown state. You can see which interface is in this state by
entering the show running-config privileged EXEC command. To re-enable the
interface, enter the interface vlan vlan-id global configuration command, and
specify the VLAN ID of the shutdown interface. With the switch in interface
configuration mode, enter the no shutdown command.
Step 14
Reload the switch:
Switch#
reload
Step 1:
Power off the switch first, then press the mode button while
you are switching on the switch again. Hold it for 15 seconds until SYS is
solid green, and then release it.
Step 2:
Switch:
Switch: flash_init
Step 3:
Switch: dir flash:
Switch: config.text
Step 4:
Switch: rename flash:config.text flash: oldconfig.backup
Switch: boot
Step 5:
To recover the old configuration:
Switch# rename flash:oldconfig.backup flash:config.text
for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP
for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP
No comments:
Post a Comment