Spanning Tree Protocol Port Roles

October 1, 2013

The diagram below is the network in use:

Switch 3

FA0/1 – DP

FA1/1 – DP

Switch 1

FA1/1 – RP

FA0/1 DP

Switch 2

FA1/1 – RP

FA0/1 – DP

Switch 0

FA0/1 – RP

FA1/1 – ALTN

The lab for this example can be downloaded  by clicking here
01_Diagram 02_STP_Ports_Roles 03_STP_Port_Roles


Creating A VLAN Step By Step

August 26, 2013

Step 1 

 a. From configuration mode, use the vlan vlan-id global configuration

command to create the VLAN and to move the user into VLAN

configuration mode.

 

b. (Optional) Use the name name VLAN subcommand to list a name

for the VLAN. If not configured, the VLAN name is VLANZZZZ,

where ZZZZ is the 4-digit decimal VLAN ID.

 

Step 2  To configure a VLAN for each access interface, follow these steps:

 a. Use the interface command to move into interface configuration

mode for each desired interface.

 

b. Use the switchport access vlan id-number interface subcommand to

specify the VLAN number associated with that interface.

 

c. (Optional) To disable trunking on that same interface, ensuring that

the interface is an access interface, use the switchport mode access

interface subcommand.


Switch IP & Default Gateway Checklist

June 7, 2013
  1. Enter VLAN1 configuration mode using the Interface VLAN 1 global configuration command
  2. Assign an IP address and mask using the IP address ip address mask interface sub-command
  3. Enable the VLAN1 interface using No shutdown interface subcommand
  4. Add the IP default-gateway ip address global command to configure the default gateway

Port Security

April 28, 2013

Switches examine the source MAC address of the received frame, switches can take a few possible options if it discovers that the incoming MAC address on that port is NOT SECURE.

  •  shutdown (the switch shuts down the port and sends a log message and drops the frame/s , also the interface status will read err-disabled you have to run a no shutdown to open the port again) ON BY DEFAULT
  • restrict (drops the frames and transmits a log message but does not shutdown the port)
  • protect (only drops the frames)

When configuring Port security and the source MAC address is unknown switchport port-security mac-address sticky can be used and the switch will use the first mac address learned as the Secure MAC address

 


Basic Switch Security

April 28, 2013

Cisco Switch Defaults

  • All cisco switch ports are open by (DEFAULT)
  • Attempting to trunk (DEFAULT)
  • Remember all ports are in VLAN1

Best practice habits should include

  • Close Unused ports (shutdown command)
  • Stop the port from trunking with (switchport mode access command)
  • Place all unused Ports into an unused VLAN

Remember the switches should be locked away in a secure room and or a cabinet

 


GNS3 with setup and setting the telnet password

April 24, 2013

[youtube http://www.youtube.com/watch?v=rtiDfh-CILs&w=560&h=315]


Explore The Routing Table

April 23, 2013

I have just linked to a video i created on Youtube, it explores the routing table and also shows you how to change from prefix notation to dotted decimal. If you like i will continue to make more. Enjoy!

 

[youtube http://www.youtube.com/watch?v=pFilJ_Kvo3E&w=420&h=315]


DCE and Setting the Clock Rate

December 10, 2012
Serial Link

Serial Link

Setting the Clock Rate (CLOCK RATE INTERFACE COMMAND)

 

Router#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#int serial 1/0

Router(config-if)#clock rate ? (Can be either clockrate or clock rate depending on model)

With the exception of the following standard values not subject to rounding,

1200 2400 4800 9600 14400 19200 28800 38400

56000 64000 128000 2015232

 

accepted clockrates will be bestfitted (rounded) to the nearest value

supportable by the hardware.

 

<246-8064000>    DCE clock rate (bits per second)

 

Router(config-if)#clock rate 56000

Router(config-if)#^Z

 

Remember the DCE Provides the clock rate to the DTE and without this, your line protocol will remain down