*** Getting Started Guide ***

Purpose

The purpose of this guide is to template the most basic edge switch installation.

Please note that creating additional VLANs will need to be manually added as will tagged and un-tagged switch ports, it is also assumed that this is a standalone switch and it is not stacked.

Pre-Requisites:

• The switch must be on switching firmware version 08.0.80

Edge Switch Template

Please replace anything that is in [ ] brackets.

For example

• ip address [x.x.x.x/xx]

• ip address 10.0.0.1/24

Should you wish to automate the process please download the word document at the bottom of the document.

Configuration

enable

configure terminal

!

vlan 999 name Testing by port

untagged ethernet [x/x/x]

 spanning-tree 802-1w

!

Crypto key generate rsa modulus 2048

No telnet server

!

IP dns domain-list [FQDN]

IP dns server-address [x.x.x.x]

!

errdisable recovery cause all

aaa authentication enable default local

aaa authentication login default local

console timeout 30

ip dhcp-client disable

enable acl-per-port-per-vlan

y

!

hostname [Hostname]

ip address [x.x.x.x/xx]

ip default-gateway [x.x.x.x]

!

service password-encryption sha256

y

username [Username] password [Password]

!

clock summer-time zone gmt GMT+00 start 3-31-2018 01:00:00 end 10-31-2018 01:00:00 offset 60

!

ntp

server [x.x.x.x]

!

banner motd ^
########################################################################
# Authorised Users Only                                                #
# The information on this computer and network is the property of      #
# [Customer Name] and is protected by intellectual property          #
# rights. You must be assigned an account on this computer to          #
# access the information and are only allowed to access information as #
# defined by the System Administrator(s). Your activities are          #
# monitored for security reasons.                                      #
########################################################################
^

!

hitless-failover enable

!

interface ethernet 1/1/1 to 1/1/[xx]

 spanning-tree 802-1w admin-edge-port

!

interface ethernet [x/x/x]

 spanning-tree 802-1w admin-pt2pt-mac

!

lldp run

!

ip ssh  timeout 60

ip ssh  idle-time 30

ip ssh encryption aes-only

ip ssh  encryption disable-aes-cbc

!

end

!

write mem

!