Cisco WS-C2960G-8TC-L Quick guide

CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
Blind Folio 357
12
Initial Switch
Configuration
CERTIFICATION OBJECTIVES
12.01 2960 Overview
12.02 Switch Startup
12.03 Basic Switch Configuration
12.04 Basic Switch Operation and Verification
12.05 Port Security Feature
✓ Two-Minute Drill
Q&A Self Test
ch12.indd 357 3/12/08 4:45:00 PM

358 Chapter 12: Initial Switch Configuration
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
The 2940, 2955, and 2960 series of switches are Cisco’s current desktop and workgroup
switching solution; they replace the 1900 and 2950 switches. The new switches support
Fast Ethernet and Gigabit Ethernet interfaces. This book, and the CCNA exam, focus
on the end-of-sale 2950 and the newer 2960 switches, but the topics and configuration commands
discussed in this chapter apply to all of Cisco’s Catalyst switches running the Internetwork
Operating System (IOS).
CERTIFICATION OBJECTIVE 12.01
2960 Overview
The 2960 series of switches comes with the LAN-based software image, which
provides advanced quality of service, rate limiting, access control list (ACL), and
many other features. Table 12-1 compares the 2960 switches and their port types and
capacities. The dual-purpose Gigabit Ethernet (GE) port supports a 10/100/1000
port and an SFP (fiber) port, where one of the two ports (not both) can be used. If a
2960 supports dual-ports, this is displayed in the Dual-Purpose column of Table 12-1.
The 2960 series supports an optional external redundant power supply (RPS) that
can be attached to the rear of the chassis.
Switch 10/100 BaseTX
10/100/1000
BaseTX Dual-Purpose GE
WS-C2960-8TC-L 8 0 1
WS-C2950-24TT-L 24 2 0
WS-C2960-48TT-L 48 2 0
WS-C2950-24TC-L 24 0 2
WS-C2960-48TC-L 48 0 2
WS-C2960G-8TC-L 0 7 1
WS-C2960G-24TC-L 0 20 4
WS-2960G-48TC-L 0 44 4
TABLE 12-1
2960 Models
ch12.indd 358 3/12/08 4:45:01 PM

2960 Overview 359
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
Before you begin connecting any cables to your Cisco switches, you should
become familiar with their chassis and interfaces. First, you should understand how
to turn on your Cisco device, what interfaces it has, and the meanings of the various
LEDs (light-emitting diodes) on the chassis. The next few sections cover this in
more depth for the 2960.
2960 Chassis
Figure 12-1 shows illustrations of the front (at top) and rear (at bottom) views of a
2960-24TT switch. For the front view, the ports on the left are the 10/100 BaseTX
ports and the two on the right are the two 10/100/1000 BaseTX ports. For the
10/100 ports, the ports are numbered in the first column, 1 at the top and 2 at the
bottom; in the second column, 3 at the top and 4 at the bottom; and so on. The
front of the chassis contains the MODE button as well as the LEDs.
The rear of the chassis has the management connections. You’ll notice that no
toggle switch is included to turn the switch on or off. To turn the switch on, plug
one end of the power cable into the back of the switch and the other into a power
outlet. To turn the switch off, unplug the power cable from either end. The 2960
supports an RJ-45 console interface, which uses a rollover cable for connectivity to
a terminal or terminal emulation device for console access.
FIGURE 12-1
A 2950-24TT
switch
Ports and LEDs
SYST
RPS
STAT
DUPLX
SPEED
MODE
RJ-45
console port
Fan exhaust RPS outlet Power
2960 Front
2960 Rear
ch12.indd 359 3/12/08 4:45:01 PM

360 Chapter 12: Initial Switch Configuration
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
2960 LEDs and MODE Button
The front of the 2960 chassis has many LEDs
that you can use to monitor the switch’s activity
and performance. At the top-left of the 2960’s
front chassis are the SYSTEM and RPS LEDs.
The colors of these LEDs and their meanings
are shown in Table 12-2.
MODE Button
The meaning of the LED above each port on the front of the 2960’s chassis depends
on the LED’s mode setting. You can change the mode by pressing the MODE button
on the bottom-left side of the chassis front, below the SYSTEM and RPS LEDs. Just
above the MODE button are three port-mode LEDs: STAT, DUPLX, and SPEED. By
default, the STAT LED is lit, indicating that the LEDs above the Ethernet ports refer
to the status of the port. Table 12-3 shows the LED colors and descriptions for the
various port statuses.
If you push the MODE button once, the MODE LED will change from STAT
to DUPLX. The LEDs above each of the ports will reflect the duplex setting of the
associated port. If the LED above the port is off, the port is set to half-duplex; if the
LED is green, the port is set to full-duplex. By pressing the MODE button again,
the MODE LED will change from DUPLX to SPEED. The 2960 supports 10/100
and 10/100/1000 ports. When the mode LED is set to SPEED, the LEDs above the
port refer to the speed at which the port is operating. If the LED is off, the port is
operating at 10 Mbps; if solid green, 100 Mbps; and if blinking green, 1 Gbps.
TABLE 12-2
2960 SYSTEM
and RPS LEDs
LED Color Description
SYSTEM Green The system is up and operational.
Amber The system experienced a malfunction.
Off The system is powered down.
RPS Green The RPS is attached and operational.
Amber The RPS is installed but is not operational. Check the RPS
to ensure that it hasn’t failed.
Flashing
amber
Both the internal power supply and the external RPS are
installed, but the RPS is providing power.
Off The RPS is not installed.
Remember that if the
SYSTEM LED is amber, the switch is
experiencing a malfunction.
ch12.indd 360 3/12/08 4:45:02 PM

Switch Startup 361
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
If you press the MODE button again, the MODE LED will change back to
STAT. As you can see, the use of the MODE button allows you to cycle through
the different mode settings. If the MODE LED is either DUPLX or SPEED, it will
automatically change back to STAT after 1 minute.
CERTIFICATION OBJECTIVE 12.02
Switch Startup
Now that you have a basic understanding of the chassis of the 2960, you are ready to
learn about the bootup process of the switch: this includes the running of hardware
tests, loading the IOS, and finding and applying a configuration file. The following
sections discuss these processes.
TABLE 12-3
Status Mode and
Port LEDs
LED Color LED Meaning
Green A powered-up physical layer connection to the device is
attached to the port.
Flashing green Traffic is entering and/or leaving the port.
Flashing green and amber An operational problem is occurring with the port—perhaps
excessive errors or a connection problem.
Amber The port has been disabled manually (shut down), disabled
because it is in a blocking STP state, or disabled because of
a security issue.
Off No powered-up physical layer connection exists on the port.
If you don’t have
connectivity through the switch and the
switch port LEDs are all off, make sure
the switch is powered on. Reseat the cable
connectors in their ports. Also check the
cables to make sure they are the correct
type: straight versus cross-through.
ch12.indd 361 3/12/08 4:45:03 PM

362 Chapter 12: Initial Switch Configuration
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
Switch Bootup Process
For your initial access to the switch, make sure you plug the rollover cable into the
switch’s console port and the other end into the COM port of your computer. Start
up a terminal emulation program such as HyperTerminal, Tera Term, or PuTTY to
view the command-line interface (CLI) output of the switch. When power is applied
to the 2960, the switch will begin its bootup process. Flash is first validated, and
then the IOS is found, uncompressed, and loaded.
POST is then run to verify that the different components of the switch are
operational. When POST begins, the SYSTEM LED is off. Once POST completes
all testing, and all tests have passed, the SYSTEM LED should turn green. If the
LED is amber, you know that at least one test has failed during POST, which is
usually catastrophic for the switch: in other words, the switch won’t boot up.
Running POST takes about a minute.
Assuming that the POST tests pass, at least the critical ones, the IOS continues
executing. Once the IOS completely loads, a configuration is found and applied
to the switch, and you’ll be presented with the User EXEC prompt, assuming you
are connected to the console port of the switch. An example of the 2960’s bootup
process is shown here:
Base ethernet MAC Address: 00:1c:f6:89:97:00
Xmodem file system is available.
The password-recovery mechanism is enabled.
Initializing Flash...
flashfs[0]: 602 files, 19 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
.
.
.
flashfs[0]: flashfs fsck took 10 seconds.
...done Initializing Flash.
Boot Sector Filesystem (bs) installed, fsid: 3
done.
Loading "flash:c2960-lanbasek9-mz.122-40.SE/c2960-lanbasek9-
mz.12240.SE.bin"...@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
.
.
.
File "flash:c2960-lanbasek9-mz.122-40.SE/c2960-lanbasek9-mz.
122-40.SE.bin" uncompressed and installed, entry point:
0x3000
ch12.indd 362 3/12/08 4:45:03 PM

Switch Startup 363
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
executing...
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software – Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M),
Version 12.2(40)SE, RELEASE SOFTWARE (fc3)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Fri 24-Aug-07 01:55 by myl
Image text-base: 0x00003000, data-base: 0x00FC0000
Initializing flashfs...
flashfs[1]: 602 files, 19 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 32514048
.
.
.
flashfs[1]: Initialization complete....done Initializing
flashfs.
POST: CPU MIC register Tests : Begin
POST: CPU MIC register Tests : End, Status Passed
POST: PortASIC Memory Tests : Begin
POST: PortASIC Memory Tests : End, Status Passed
POST: CPU MIC interface Loopback Tests : Begin
POST: CPU MIC interface Loopback Tests : End, Status Passed
POST: PortASIC RingLoopback Tests : Begin
POST: PortASIC RingLoopback Tests : End, Status Passed
POST: PortASIC CAM Subsystem Tests : Begin
POST: PortASIC CAM Subsystem Tests : End, Status Passed
POST: PortASIC Port Loopback Tests : Begin
POST: PortASIC Port Loopback Tests : End, Status Passed
Waiting for Port download...Complete
ch12.indd 363 3/12/08 4:45:03 PM

364 Chapter 12: Initial Switch Configuration
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
This product contains cryptographic features and is subject
to United States and local country laws governing import,
export, transfer and use. Delivery of Cisco cryptographic
.
.
.
cisco WS-C2950-24TT-L (PowerPC405) processor (revision D0)
with 61440K/4088K bytes of memory.
Processor board ID FOC1131W4NR
Last reset from power-on
1 Virtual Ethernet interface
24 FastEthernet interfaces
2 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
64K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 00:1C:F6:89:97:00
Motherboard assembly number : 73-10390-04
Power supply part number : 341-0097-02
Motherboard serial number : FOC11305QDR
Power supply serial number : AZS113104M2
Model revision number : D0
Motherboard revision number : A0
Model number : WS-C2950-24TT-L
System serial number : FOC1131W4NR
Top Assembly Part Number : 800-27221-03
Top Assembly Revision Number : A0
Version ID : V03
CLEI Code Number : COM3L00BRB
Hardware Board Revision Number : 0x01
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 26 WS-C2950-24TT-L 12.2(40)SE C2960-LANBASEK9-M
Press RETURN to get started!
I prefer using PuTTY as my management program. It supports COM terminal
emulation, telnet, and SSH functions—and it’s free!
System Configuration Dialog
If no configuration is found, the IOS will run the setup script, commonly called the
System Configuration Dialog. This script asks you questions to help it create a basic
ch12.indd 364 3/12/08 4:45:04 PM

Switch Startup 365
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
configuration on the switch. When posing questions, the setup script uses brackets
([ and ]) to indicate default values. Leaving these answers blank (that is, not supplying
an answer) results in the script accepting the value indicated in brackets for the
configuration component. In the script, you can configure the switch’s hostname, set
up a Privilege EXEC password, assign a password for the virtual type terminals (VTYs),
and set up an IP address for a VLAN interface to manage the switch remotely.
Here’s an example of this script:
Would you like to enter the initial configuration dialog? [yes/no]: yes
At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system
Would you like to enter basic management setup? [yes/no]: yes
Configuring global parameters:
Enter host name [Switch]:
The enable secret is a password used to protect access to
privileged EXEC and configuration modes. This password, after
entered, becomes encrypted in the configuration.
Enter enable secret: cisco
The enable password is used when you do not specify an
enable secret password, with some older software versions, and
some boot images.
Enter enable password: boson
The virtual terminal password is used to protect
access to the router over a network interface.
Enter virtual terminal password: sanjose
Configure SNMP Network Management? [no]:
Current interface summary
If a switch boots up without
a configuration in NVRAM, the setup script
(System Configuration Dialog) will be
presented to the administrator.
ch12.indd 365 3/12/08 4:45:04 PM

366 Chapter 12: Initial Switch Configuration
CertPrs8/CCNA® Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned YES unset up down
FastEthernet0/1 unassigned YES unset down down
FastEthernet0/2 unassigned YES unset down down
.
.
.
FastEthernet0/24 unassigned YES unset down down
GigabitEthernet0/1 unassigned YES unset down down
GigabitEthernet0/2 unassigned YES unset down down
Enter interface name used to connect to the
management network from the above interface summary: vlan1
Configuring interface Vlan1:
Configure IP on this interface? [no]: yes
IP address for this interface: 192.168.1.253
Subnet mask for this interface [255.255.255.0] :
Class C network is 192.168.1.0, 24 subnet bits; mask is /24
Would you like to enable as a cluster command switch? [yes/no]: no
The following configuration command script was created:
hostname Switch
enable secret 5 $1$.N.L$t4q9Jw5DTffPTPE.KkKNX/
enable password boson
line vty 0 15
password sanjose
no snmp-server
interface Vlan1
no shutdown
ip address 192.168.1.253 255.255.255.0
!
interface FastEthernet0/1
.
.
.
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
end
[0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.
Enter your selection [2]: 2
ch12.indd 366 3/12/08 4:45:04 PM