Базовая настройка коммутатора Cisco с нуля: пошаговое руководство

Switch# enable
Switch# erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]

Switch# delete flash:vlan.dat
Delete filename [vlan.dat]? [confirm]
Delete flash:/vlan.dat? [confirm]
[OK]

Switch# reload
Proceed with reload? [confirm]

Switch> enable
Switch# configure terminal
Switch(config)# hostname SW-ACCESS-01
SW-ACCESS-01(config)#

SW-ACCESS-01# show run | include hostname
hostname SW-ACCESS-01

Switch(config)# enable secret Str0ngP@ss!2025

Switch(config)# username admin privilege 15 secret Admin!Secure123

Switch(config)# line console 0
Switch(config-line)# password ConPass!456
Switch(config-line)# login
Switch(config-line)# exec-timeout 5 0
Switch(config-line)# exit

Switch(config)# line vty 0 15
Switch(config-line)# login local
Switch(config-line)# transport input ssh
Switch(config-line)# exec-timeout 10 0
Switch(config-line)# exit

Switch(config)# ip domain-name company.local
Switch(config)# crypto key generate rsa modulus 2048
Switch(config)# ip ssh version 2

Switch# show ip ssh
SSH Enabled - version 2.0
Authentication timeout: 120 secs; Authentication retries: 3

Switch(config)# ip domain-name example.local
Switch(config)# crypto key generate rsa modulus 2048
Switch(config)# ip ssh version 2
Switch(config)# ip ssh time-out 60
Switch(config)# ip ssh authentication-retries 3

ssh admin@192.168.1.10

Switch(config)# vlan 11
Switch(config-vlan)# name MANAGEMENT
Switch(config-vlan)# exit

Switch(config)# interface vlan 11
Switch(config-if)# ip address 192.168.10.254 255.255.255.0
Switch(config-if)# no shutdown
Switch(config-if)# exit

Switch(config)# ip default-gateway 192.168.10.1

Switch# copy running-config startup-config
Destination filename [startup-config]? [Enter]
Building configuration...
[OK]

Switch# write memory

Switch# wr

Switch# reload
Proceed with reload? [confirm] [Enter]

Switch(config)# vlan 10
Switch(config-vlan)# name USERS
Switch(config-vlan)# exit

Switch(config)# vlan 20
Switch(config-vlan)# name SERVERS
Switch(config-vlan)# exit

Switch# show vlan brief

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gi0/1, Gi0/2, ..., Gi0/24
10   USERS                            active
20   SERVERS                          active

Switch(config)# interface range gigabitethernet 0/1 - 12
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 10
Switch(config-if-range)# description USER-PORTS
Switch(config-if-range)# spanning-tree portfast
Switch(config-if-range)# exit

Switch1(config)# interface gigabitethernet 0/24
Switch1(config-if)# description TRUNK-TO-SW2
Switch1(config-if)# switchport mode trunk
Switch1(config-if)# switchport trunk allowed vlan 10,20
Switch1(config-if)# switchport trunk native vlan 99
Switch1(config-if)# exit

Switch# show interfaces trunk

Port        Mode             Encapsulation  Status        Native vlan
Gi0/24      on               802.1q         trunking      99

Port        Vlans allowed on trunk
Gi0/24      10,20

Switch(config)# spanning-tree mode rapid-pvst

Switch(config)# interface range gigabitethernet 0/1 - 12
Switch(config-if-range)# spanning-tree portfast
Switch(config-if-range)# spanning-tree bpduguard enable
Switch(config-if-range)# exit

Switch(config)# interface gigabitethernet 0/5
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 2
Switch(config-if)# switchport port-security mac-address sticky
Switch(config-if)# switchport port-security violation restrict
Switch(config-if)# exit

Switch(config)# ntp server 192.0.2.1 prefer
Switch(config)# clock timezone MSK 3
Switch(config)# service timestamps log datetime msec localtime show-timezone

Switch(config)# logging host 192.0.2.10
Switch(config)# logging trap informational
Switch(config)# logging source-interface vlan 1

Switch# copy running-config tftp:
Address or name of remote host []? 192.0.2.50
Destination filename [switch-confg]? SW-ACCESS-01_2025-12-15.cfg
!!
3456 bytes copied in 1.234 secs (2801 bytes/sec)

Switch(config)# lldp run

Switch# show lldp neighbors
Device ID           Local Intf     Hold-time  Capability      Port ID
SW-CORE-01          Gi0/24         120        B,R             Gi1/0/1

Switch# show version
Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 15.0(2)SE11, RELEASE SOFTWARE (fc3)
...
Model number                   : WS-C2960-24TT-L
...