Stand-Alone Lab 11: Switch Basics Part I

Objective
Learn the commands necessary to configure a Cisco Catalyst 1912 switch. Configure the appropriate settings on
Switch1.

Lab 11 Topology
The lab topology displays information about the network devices in the lab.

e0

e0

R o u te r2

e1

e0
R o u te r3

s1
R o u te r1

s0
R o u te r5

s0

e0

s0

fa 0 /1

R o u te r4

S w itch 2

e0

e 0 /1
e 0 /2
S w itch1
P C1

Command Summary
Command
configure terminal
disable
enable password level level password
enable secret [level level] password
enable

Description
enters global configuration mode from privileged EXEC mode
returns to user EXEC mode
sets the enable password on a switch with a level for which the password
applies
sets the enable secret password on a switch with an optional level for
which the password applies
enters privileged EXEC mode

Boson NetSim for CCNA Lab Manual

Command
end
hostname host-name
show running-config

Description
ends and exits configuration mode
sets the device name
displays the active configuration file

Lab Tasks
Task 1: Load the Initial Network Configuration
Make sure that the correct topology and configuration files for this lab are loaded. This will occur automatically when
you load this lab buy using the Lab Navigator.

Task 2: Connect to a Switch

Become familiar with the command-line interface (CLI), user EXEC mode, and privileged EXEC mode.
Perform the following steps on Switch1:
1.

When the lab has finished loading, select Switch1. Click inside the Switch1 window, and press the ENTER key.
Press Enter to Start
>

2.

Notice that, by default, the Cisco Catalyst 1912 switch contains no host name at the prompt. Type a question
mark (?) to display a list of commands that can be issued from user EXEC mode.
>?
enable
exit
help
ping
show
traceroute

3.

Turn on privileged commands

Exit from the EXEC
Description of the interactive help system
Send echo messages
Show running system information
Trace route to destination

Like on routers, you can enter privileged EXEC mode by issuing the enable command. Enter privileged EXEC
mode.
>enable
#

Boson NetSim for CCNA Lab Manual

4.

Display the commands that can be issued in privilege EXEC mode.

#?
clear
configure
copy
delete
disable
exit
ping
reload
show
traceroute

5.

Reset functions
Enter configuration mode
Copy configuration or firmware
Reset configuration
Turn off privileged commands
Exit from the EXEC
Send echo messages
Halt and perform warm start
Show running system information
Trace route to destination

Like on routers, you can issue the configure terminal command to enter global configuration mode on a switch.
Enter the configure terminal command.
#configure terminal
(config)#

6.

Issuing the question mark will display the list of commands available in the global configuration mode.
(config)#?
banner
cdp
enable
end
exit
hostname
interface
ip
line
mac-address-table
rip
service
spantree
switching-mode
uplink-fast
vlan
vlan-membership
vtp

Define a login banner

Global CDP configuration subcommands
Modify enable password parameters
Exit from configure mode
Exit from configure mode
Set the systems network name
Select an interface to configure
Global IP configuration subcommands
Configure a terminal line
Configure the mac address table
Routing information protocol configuration
Configuration Command
Spanning tree subsystem
Sets the switching mode
Enable Uplink fast
VLAN configuration
VLAN membership server configuration
Global VTP configuration commands

Boson NetSim for CCNA Lab Manual

7.

The majority of the commands that you find on a switch have the same function as those on a router. The host
name of a switch is typically configured to enable you to determine the switchs location or function within the
network. Configure Switch1 with a host name of Switch1.
(config)#hostname Switch1
Switch1(config)#

8.

Issue the end command to return to privileged EXEC mode.

Switch1(config)#end
Switch1#

9.

Exit the current session by issuing the disable command.

Swich1#disable
Switch1>

Task 3: Configure Basic Security

In this task, you will perform the tasks necessary to configure basic security for Switch1.
Perform the following steps on Switch1:
1.

Enter global configuration mode.

Switch1>enable
Switch1#configure terminal

2.

There is a difference in the syntax used to set the password for a router and the syntax used to set the password
for a switch. On the 1900 series switches, levels need to be set when a password is declared. The different
levels allow different sets of people to enter different commands on the switch. The password levels range from
1 through 15. Level 1 allows the user to log in to the router and use basic show commands. Level 15 allows
the user to do anything. The levels in between can be customized by the network administrator to allow certain
commands. Configure level 15, and set the enable password to boson.
Switch1(config)#enable password level 15 boson

3.

The enable password is stored in plain text in the switchs configuration file. If you need to obtain assistance
while troubleshooting a problem, you might inadvertently compromise the security of the system by revealing
the password. The enable secret password is stored as encrypted text in the switchs configuration file. Set the
enable secret password to cisco. Configuring enable secret passwords also requires that you configure a level.
Switch1(config)#enable secret level 15 cisco

Boson NetSim for CCNA Lab Manual

4.

Exit to user EXEC mode.

Switch1(config)#end
Switch1#disable
Switch1>

5.

Enable passwords and enable secret passwords work the same as they do on routers. Since both the enable
password and the enable secret password are configured on Switch1, which password will be used when a user
attempts to enter privileged EXEC mode? _________________________________________________

6.

Enter privileged EXEC mode by using the password you configured above.
Switch1>enable
Password:
Switch1#

Lab Solutions
Task 1: Load the Initial Network Configuration
No solution is required.

Task 2: Connect to a Switch

No solution is required.

Task 3: Configure Basic Security

1.

No solution is required.

2.

No solution is required.

3.

No solution is required.

4.

No solution is required.

5.

No solution is required.

6.

When both an enable password and enable secret password are configured on a switch, the enable secret
password will be used.

Boson NetSim for CCNA Lab Manual

Sample Configuration Script

Switch1
Switch1#show running-config
Building configuration...
Current configuration:
!
hostname Switch1
!
enable secret 5 89E$$3634D$sdf0923SD1227
enable password level 15 boson
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Ethernet0/8
!
interface Ethernet0/9
!
interface Ethernet0/10
!
interface Ethernet0/11
!
interface Ethernet0/12
!
interface FastEthernet0/26
!
interface FastEthernet0/27
!
line console
!
End

Boson NetSim for CCNA Lab Manual