How to configure an access layer switch

Configuring an access layer switch involves initial setup, VLAN creation, port assignment, security configuration, and management access setup.

Step 1: Connect to the Switch

Physically connect to the switch using a console cable and a terminal emulator like PuTTY. Set the connection to 9600 baud for serial communication. Power on the switch and verify that all indicator lights are functioning properly .

Step 2: Enter Privileged and Global Configuration Mode

At the command prompt, type enable to enter Privileged EXEC mode, then configure terminal to access Global Configuration mode. This allows you to make system-wide changes .

Step 3: Set Hostname and Domain Name

Assign a descriptive hostname using hostname and configure a domain name if needed. This helps identify the switch in the network .

Step 4: Configure Management Access

• Set an enable secret password for privileged access: enable secret .
• Configure console and VTY (Telnet/SSH) passwords for secure access.
• Assign an IP address to the management VLAN: interface vlan 1 followed by ip address .
• Set the default gateway: ip default-gateway .

Step 5: Create VLANs

Define Layer 2 VLANs to segment network traffic:

vlan 10name Salesvlan 20name HR

Assign ports to VLANs:

interface g0/1switchport mode accessswitchport access vlan 10interface g0/2switchport mode accessswitchport access vlan 20

This ensures that each port belongs to the correct VLAN and limits broadcast traffic .

Step 6: Configure Access Ports

Set each port to access mode for end devices:

interface g0/1switchport mode accessswitchport access vlan 10

Verify port capabilities and ensure trunking is disabled on access ports .

Step 7: Enable Security Features

• Disable unused ports to prevent unauthorized access.
• Configure port security to limit MAC addresses per port.
• Optionally, configure ACLs for additional traffic control .

Step 8: Save Configuration

After completing all configurations, save the running configuration to startup configuration:

copy running-config startup-config

This ensures that settings persist after a reboot .

Step 9: Verify Configuration

Use commands like show vlan brief, show running-config, and show interfaces status to confirm VLAN assignments, port status, and overall switch configuration .

Step 10: Optional Advanced Configurations

Depending on network requirements, you may configure:

• Spanning Tree Protocol (STP) for loop prevention
• SSH for secure remote management
• VTP for VLAN propagation across switches
• SNMP for monitoring . Following these steps ensures a properly configured access layer switch that is secure, manageable, and ready to support end devices in a segmented network.