Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Standard config of lan switches

Hi,

we

4 REPLIES
Hall of Fame Super Bronze

Re: Standard config of lan switches

Looks pretty good. You've adopted most, if not all, best practice on switch config.

Couple of things you may want to add:

1) ACL on the SNMP community

2) ACL on the VTY lines

Also, you don't need a password entry under VTY once you enable aaa-new model.

Same goes for enable secret and enable password.

New Member

Re: Standard config of lan switches

I need help

New Member

Re: Standard config of lan switches

I need information to describe the result of the show interface fastethernet

New Member

Re: Standard config of lan switches

Some add-on:-

1.You do not need "enable password" if you already have "enable secret".

2.If you need to manage this switch, you might need to assign ip on vlan1 or loopback0

3.You need to have a "spanning-tree portfast" command on each ports which connected to client. DO NOT apply this command to interface connected to router or another switch

Hope it help on your Standard doc. :-)

255
Views
5
Helpful
4
Replies