DCO-SOGs/Switch Configuration.md at main

Files

Matthew Iverson 5a1ba70263 Upload files to "1 Switch/(2) Switch"

2024-10-26 23:53:33 -04:00

5.2 KiB

Raw Permalink Blame History

Starting with a blank 48 port Cisco switch you need to connect with a serial connection using the Mini USB connecter on the front of the switch. From here you can open Moba Xterm and begin configuration.

enable

configure terminal

hostname 2ndPlt

ip routing

VLAN Configuration

To configure the VLANs that will be used within your network. A good baseline to start with is:

VLAN 3
- Description: Domain
- ip address 10.2.1.1 255.255.255.0
VLAN 5
- Description: VCSA Management
- ip address 10.2.5.1 255.255.255.0
VLAN 10
- Description: ESXi Management
- ip address 10.2.10.1 255.255.255.0
VLAN 11
- Description: ESXi vMotion
- ip address 10.2.11.1 255.255.255.0
VLAN 12
- Description: ESXi Provisioning
- ip address 10.2.12.1 255.255.255.0
VLAN 20
- Description: Tools DMZ
- ip address 10.2.20.1 255.255.255.0
VLAN 25
- Description: Tool Web Interface
- ip address 10.2.25.1 255.255.255.0
VLAN 30
- Description: Workstations
- ip address 10.2.30.1 255.255.255.0
VLAN 40
- Description: Test VLAN
- ip address 10.2.40.1 255.255.255.0
VLAN 666
- Description: Trunk
- ip address 10.2.100.1 255.255.255.0

Configuring the VLANs

enable

conf t

interface vlan (VLAN ID)

ip address (ip address) (subnet mask)

description ***(VLAN Description)***

Complete for each VLAN
```
exit
```
```
do show run
```
- check configuration
```
do write memory
```
Enabling the VLANs
- For each VLAN made you need to Enable them to start functioning. You will need to choose a random interface that is not in use.
```
enable
```
```
configure terminal
```
```
do sh ip int brief
```
  - this checks to see what VLANs are enabled
  - !
    - In the Status column, if it says down, then it needs to be enabled
```
interface <randomly chosen interface>
```
```
switchport mode access
```
```
 switchport access vlan <VLAN to be enabled>
```
```
exit 
```
  ***Repeat for every down VLAN
  
  Once Completed you can Turn the interface used back off.
```
no switchport mode access
```
```
no switchport access vlan <last vlan to be enabled>
```
```
exit
```
```
do write memory
```
  - Check VLANs are Enabled
```
do sh ip int brief
```

Interface Configuration

Your interfaces will be configured differently depending on what gear you are using i.e. CyberPac, MiniRax, different switches, or different firewalls.

Server Interfaces

These Interfaces will have access to all of the VLANs except one, the Tools VLAN. Trunk Ports allow this.
This separation in the VLANs creates a logical separation in your network not allowing outside network traffic to your infrastructure containing VLANs. Setup:

enable

configure terminal

interface g1/0/1

switchport mode trunk

switchport trunk allowed vlan 3,5,10,11,12,25,30,40

switchport trunk native vlan 666

Repeat for interface g1/0/2
This allows all network traffic that is coming through to be assigned to your trunking VLAN.

description <name of server that is being used to remain orgainized>

exit

do sh run

do write memory

***Do this twice for every server being used, one for management and one for your tools.

Tool Interfaces

Your Tool Interfaces have a logical separation from the rest of your interfaces. This keeps internal infrastructure traffic separated from external traffic.
Tool Interfaces require a separate switch port connected to a standalone port on the Server

Setup:

enable

configure terminal

interface g1/0/13

switchport mode access

switchport access vlan 20

exit

do write memory

Workstation Interfaces

Workstation Interfaces are the switch ports that the host machines (Laptops) are connected to. These will be configured to connect to the workstations VLAN. Setup:

enable

configure terminal

interface range g1/0/25 - 48

switchport mode access

switchport access vlan 30

exit

do sh run

do write memory

After setting up your interfaces if wanted you can configure DHCP so your workstations will pull an IP automatically.

enable

configure terminal

ip dhcp pool USERS

network 10.2.30.1 255.255.255.0

default-router <Workstation VLAN default gateway>

exit

do write memory

This is all that is needed for basic functionality of the switch

More Configuration will be needed

Post Domain Controller(s) Setup

After your Domain controller(s) have been configured follow these steps to setup DNS.

enable

configure terminal

ip name-server <DC IP #1> <DC IP #2>
ip domain name <domain.name>

exit

write memory

5.2 KiB Raw Permalink Blame History