BASIC SWITCH CONFIGURATION

Verify Configuration

S1# show run

S1# show ip interface brief

Configure Duplex and Speed

Configure a Web Interface

To create a static mapping in the MAC address table, use the mac-address-table static <MAC address> vlan {1-4096,
ALL} interface interface-id command.

To remove a static mapping in the MAC address table, use the no mac-address-table static <MAC address> vlan {1-
4096, ALL} interface interface-id command.

Using the Show Commands

Back up and Restore Switch Configurations – (Backup Configuration)

Back up and Restore Switch Configurations – (Restore Configuration)

Back up Configuration Files to a TFTP Server

Clearing Configuration Information : Caution: You cannot restore the startup configuration file after it has been erased, so make
sure that you have a backup of the configuration in case you need to restore it at a later point.

To delete a file from Flash memory, use the delete flash:filename privileged EXEC command. Caution: You cannot
restore the startup configuration file after it has been deleted, so make sure that you have a backup of the configuration
in case you need to restore it at a later point.

Configure a Login Banner (to be displayed before the username and password login prompts)

S1(config)#banner login "Authorized Personnel Only!"

To Remove Banner - S1(config)#no banner login.

Configure a MOTD Banner

The MOTD banner displays on all connected terminals at login and is useful for sending messages that affect all network
users (such as impending system shutdowns). The MOTD banner displays before the login banner if it is configured.

S1(config)#banner motd "Device maintenance will be occurring on Friday!"

Configuring SSH

Static secure MAC addresses:

MAC addresses are manually configured by using the switchport port-security mac-address mac-address interface

Sticky MAC Addresses

switchport port-security mac-address sticky

Configure Dynamic Port Security

Configure Sticky Port Security

Verify Port Security Settings

To display port security settings for the switch or for the specified interface, use the ex: show port-security interface
fa0/18

Verify Secure MAC Addresses

show port-security [interface interface-id] address command.

to disable multiple ports on a switch. Navigate to each unused port and issue this Cisco IOS shutdown command. An
alternate way to shutdown multiple ports is to use the interface range command. If a port needs to be activated, you
can manually enter the no shutdown command on that interface.