Basics of Cisco Switch Administration

[LEFT][CODE]http://www.petri.co.il/csc_basics_of_cisco_switch_administration_01.htm[/CODE][B][B][SIZE=3]Part 1[/SIZE][/B][/B]


Perhaps you are asked to configure a switch port or see what MAC address is on what port. Maybe this isn’t something you do every day and need a refresher course on the most basic Cisco switch administration tasks. Let’s find out how to perform some basic Cisco switch administration tasks.

[B]Log in[/B]

Before you can administer the switch you are going to need some basic information:

[LIST][*]What is the switches IP address or DNS name?[*]What is the username/password you can use to login?[*]What Ethernet switch port is the device in question connected to?[/LIST]
One option to configure the switch might be a web-based administration interface. If this is the case, basic configurations aren’t going to be that difficult and perhaps you don’t need much more help. On the other hand, GUI interfaces aren’t always available, but on Cisco IOS switches, the Cisco IOS always is. Plus, in a GUI interface, you won’t be able to do every possible configuration. In the command-line interface you will be able to perform every possible configuration. For that reason, I encourage you to use the IOS command-line interface. I will be performing these common switch administration tasks on the Cisco IOS command-line interface.
[B]Showing the switch configuration[/B]

Just like on a router, the most command-switch IOS command is to show the switch’s configuration. This will show you the configuration for the entire switch, including all the Ethernet ports on the switch. To see switch configuration, just type [B]show running-config[/B], like this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_01.jpg"][IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_01_small.jpg[/IMG][/URL]
[B]Showing interface port status[/B]

Most of the time you are going to a switch, you want to troubleshoot a switch port, or change a switch port configuration. The quickest way to see the status of your switch ports is to use the [B]show interfaces status[/B], like this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_02.jpg"][IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_02_small.jpg[/IMG][/URL]

This command shows each port: if the port is connected to the device, the VLAN the port is in, the port duplex, the port speed, and port type. This is an excellent quick way to see status for your switch ports.
[B]Changing interface speed & duplex[/B]

Say that you see that interface Fa0/21 is set to auto (auto negotiate) for its speed but it needs to be set to 10Mb/sec. To change the speed of any port, you go to interface configuration mode and use the speed command, like this:

[URL="http://ad.doubleclick.net/click;h=v8/393e/0/0/%2a/i;44306;0-0;0;43710412;3823-300/100;0/0/0;u=,ns-49428673_1265916261,116e203c778f34e,ce_mobile_blackberry,;%7Eaopt=2/0/ff/1;%7Esscs=%3f"][IMG]http://s0.2mdn.net/viewad/817-grey.gif[/IMG][/URL] [URL="http://ad4.netshelter.net/jump/ns.petri/bieb;kw=;tile=2;sz=300x100;ord=123456789?"][IMG]http://ad4.netshelter.net/ad/ns.petri/bieb;kw=;tile=2;sz=300x100;ord=123456789?[/IMG][/URL] [URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_03.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_03_small.jpg[/IMG][/URL]

On this switch, the possible speeds for the 10/100 Ethernet ports are auto, 10, and 100. On the Gigabit Ethernet ports, you can only tell the switch to either negotiate port speed or not to negotiate port speed. Once the speed is configured to 10Mb, you can verify it with the show interfaces fa0/21 status, like this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_04.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_04_small.jpg[/IMG][/URL]

As you can see, the speed is now set to 10. To change the duplex of a port, you perform the same steps but use the [B]duplex[/B] command. Duplex can be set to [B]auto[/B], [B]full[/B], or [B]half[/B].
[B]Enabling and disabling interfaces[/B]

To enable and disable interfaces, you use the no shutdown and the shutdown command in interface configuration mode. Here is an example:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_05.jpg"][IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_05_small.jpg[/IMG][/URL]

Notice how when the port was shutdown, console messages appear that told you the administrative state had changed to down, and the line protocol changed to down. When the port was enabled (no shutdown), the link went down, then the line when up, then the line protocol changed to up.
You could now do a show interfaces status to see the state of the interface

[B]Article Summary[/B]

Here is what we have learned:

[LIST][*]How to show a switch’s configuration[*]How to show the status of switch interfaces[*]Change the speed and duplex of a switch port[*]How to disable (shutdown) and enable (no shutdown) ports on a Cisco IOS switch[/LIST]

[/LEFT]

[LEFT][CODE]http://www.petri.co.il/csc_basics_of_cisco_switch_administration_02.htm[/CODE][B][B][SIZE=3]Part 2[/SIZE][/B][/B]

In [B]Basics of Cisco Switch Administration - Part 1[/B], we covered some of the basics of Cisco switch administration – how to log in, how to show configuration, how to change interface speed & duplex, how to enable switch ports, and how to show switch port status. In Part 2, we will stick to the basics of switch administration by covering how to save your configuration, how to use the Cisco Network Assistant, how to speed up switch port startup, and basic VLAN commands.
[B]How to save your switch configuration[/B]

In Part 1 of this series, we talked about how to enable/disable ports and how to change speed & duplex settings. Those are necessary administrator functions but, when you are done, you must save your configuration. Cisco switches will not automatically save your changes. If you make these changes and the switch looses power, those changes are gone. You must save your changes when you are done. The minimum that is required is to save your changes to the local switch NVRAM. There are two ways to do this, let me demonstrate:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_01.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_01_small.jpg[/IMG][/URL]

The textbook method of savings your configuration is: Switch# [B]copy running-config startup-config[/B] However, a legacy command that is short and sweet is: Switch# [B]wr[/B] Both of these commands save your running configuration in RAM to the file NVRAM:startup-config. When the switch is powered off, the running-config is lost. The startup-config is read when the switch boots and the running-config is created. I also highly recommend that you save your configuration onto TFTP server, in case your switch’s local NVRAM is completely lost. Once you have a TFTP server running, you can easily save your configuration to it like this: Switch# [B]copy running-config tftp[/B]
[B]How to use the Cisco Network Assistant[/B]

The Cisco Network Assistant (CNA) is a free graphics tool included when you purchase a new switch. It is used to administer Cisco network devices. CNA is a feature-rich tool and I cannot possibly go into everything it can do in this short article. I recommend CNA to anyone who would like a graphical interface for their Cisco network devices. Basically, CNA gives you an overview screen of your Cisco devices, like this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_02.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_02_small.jpg[/IMG][/URL]

Once you click on Configure then Port Settings, you will see something like this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_03.jpg"][IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_03_small.jpg[/IMG][/URL]

From here, you can configure the state, duplex, speed, and other options for your switch ports. In fact, you can configure most switch features with the CNA. Keep in mind that for all Cisco switches, there is also the web-based interface. It may be more limited than what CNA offers. This interface can be accessed directly with your web browser, or it can be launched via CNA. Here is a sample screenshot of my Cisco 3550 web-based interface:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_04.jpg"][IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_04_small.jpg[/IMG][/URL]
[URL="http://ad.doubleclick.net/click;h=v8/393e/0/0/%2a/i;44306;0-0;0;43710412;3823-300/100;0/0/0;u=,ns-99738294_1265916263,116e203c778f34e,ce_mobile_blackberry,;%7Eaopt=2/0/ff/1;%7Esscs=%3f"][IMG]http://s0.2mdn.net/viewad/817-grey.gif[/IMG][/URL][B]How to speed up switch port startup[/B]

Switch ports could be connected to a variety of devices – other switches, routers, trunk ports, PC’s, or VoIP phones. Each of these devices has a different configuration. Sometimes, when a device is connected to a switch port, the switch will attempt to negotiate settings to match this device. This takes time and it will delay the ability of your device (such as a PC) to transmit and receive data from the network. Most of the time, you are connecting a PC to a switch and you just want to be able to use the network as soon as possible, right? The command I recommend enabling on all PC/laptop/printer switch ports is this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_05.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_05_small.jpg[/IMG][/URL]

The [B]switchport mode access[/B] command will configure this port not to go through the spanning-tree process and will get your PC access to the network faster.
[B]Basic VLAN commands[/B]

Most companies today use [URL="http://www.petri.co.il/csc_setup_a_vlan_on_a_cisco_switch.htm"]Virtual LANs (VLANs)[/URL]. As an administrator, you should know how to 1) see what device is on what VLAN and 2) to change the VLAN that a device is in. As you know, if your device is in the wrong VLAN, it won’t be able to communicate with the servers that it needs to talk to and/or it may be on the wrong IP subnet. To see what VLAN a device is in, my favorite command is show vlan brief. Here is an example:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_08.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_08_small.jpg[/IMG][/URL]

As you can see, this command shows you what VLANs exist on this switch, and what switch ports are in what VLAN. Now, say that you want to change interface/port Fa0/21 from VLAN 1 (the default) to vlan 131. Let me show you how to do that:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_07.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_07_small.jpg[/IMG][/URL]

That’s right, you simply go into interface configuration mode on the interface you want to change the VLAN, and use the [B]switchport access vlan XXX[/B] command. Once you are done, to verify the vlan membership, just run the [B]show vlan brief[/B] command again, like this:

[URL="http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_06.jpg"] [IMG]http://www.petri.co.il/images/csc_basics_of_cisco_switch_administration_b_06_small1.jpg[/IMG][/URL]

You can see from the command output that Fa0/21 is now a member of VLAN 131

[B]Article Summary[/B]

Here is what we have learned:

[LIST][*]How to save your switch's configuration[*]How to use the Cisco Network Assistant[*]How to speed up your switch port startup[*]Basic VLAN commands[/LIST]

[/LEFT]