Cisco 2950 basic configuration

[drmohlen]

I was wondering if some one can explain in plain english and not Cisco language as to how I can configure the following switches as I described bellow:

Switch A ( cisco2970 - with 24 GB port)
Switch B,C and D (Cisco 2950 with 48 10/100 ports and 2 GB ports)
Switch A is used to feed other switches and the network servers.
switch B,C and D are just feeding desktops.

All my switches only being configured with the host name and IP addresse! and they all live and up and runing, what I would like to know is what would be the basic configuration that I need for all these switches to make them firstly secure and secondley utilised? do I need VLAN?if yes how can I configure it?

Any suggestion would be appriciated.

 

[vipergg]

We need a few parameters here . Is everything going to be in one subnet or are you going to have multiple vlans. If everything is one then it is pretty easy . You don't say if there are any external connections so this is just to tie everything into the same vlan. This put everything into vlan 1 .

2970
conf t
interface vlan 1
ip address xxx.xxx.xxx.xxx <netmask>
exit
hostname XXXXXXXXX,hit enter
lin con 0
password XXXX
type exit
lin vty 0 15
password XXXXXXX
exec-timeout 15
type exit
enable secret XXXXXXX
type exit,then type "copy run start"

"Do the same for all the 2950's giving them there own separate ip address from within the same subnet , reccomend using xxx.xxx.xxx.250 or above for your switch management . Make sure you keep track of all the passwords you use , if you lose them you won't like the password recovery for the switches .

 

[drmohlen]

Thank you for the rapid reponse, yes as you guessed all the switches are on one subnet.

Just couple things, you have mentioned that I should use the x.x.x.250 or above for my switch management, but I have reserved the first 10 x.x.x.2-11 ip addresses for switches, is that going to cause any problem?

also can you please explain what would the following line do:
lin con 0
lin vty 0 15

Many Thanks

 

[vipergg]

No you can use any address you want as management addresses as long as they are unique . Lin con 0 is the console port and you are putting password preotection it so anyone can't just plug into the back of the switch . lin vty 0 15 is your telnet sessions and you are password protecting those sessions.