Konfigurasi Dasar Switch ================== switch> (user exec mode) switch>enable switch# (previledge mode) switch#disable switch> Konfigurasi

via terminal switch#configure terminal switch(config)# switch(config)#interface fastethernet 0/1 switch(config-if)# switch(config-if)#exit switch(config)# switch(config)#exit switch# Perintah-perintah umum di user exec mode Switch>? Switch>sh ? Perintah-perintah umum di previledge mode Switch# Switch#clock set 16:12:00 ? (hh:mm:ss) Switch#show running-config Switch#show startup-config Switch#show vlan Switch#show interface vlan1 Switch#show ip interface vlan1 Switch#show history Switch#terminal history size 50 Switch#terminal no history Switch#terminal no history size Switch#show interface fastethernet 0/1 Switch#dir flash: or Switch#show flash Switch#dir flash:c2960-lanbase-mz.122-25.SEE3 (sesuai dengan nama file yg ada di flash) Switch(config)#boot system flash:/c2960-lanbase-mz.122-25.SEE3.bin Switch# Switch#conf t Switch(config)#hostname S1

Switch# sh vlan
VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4 Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gig1/1, Gig1/2 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup VLAN ---1 1002 1003 1004 1005 Type ----enet fddi tr fdnet trnet SAID ---------100001 101002 101003 101004 101005 MTU ----1500 1500 1500 1500 1500 Parent -----RingNo -----BridgeNo -------Stp ---ieee ibm BrdgMode -------Trans1 -----0 0 0 0 0 Trans2 -----0 0 0 0 0

Remote SPAN VLANs -----------------------------------------------------------------------------Primary Secondary Type Ports ------- --------- ----------------- ------------------------------------------

Membuat VLAN S1(config)# S1(config)#vlan 10 S1(config)#name PSDM (nama dari vlan) S1(config)# S1(config)#vlan 99 S1(config)#name management (optional) Bisa juga membuat vlan melalui previledge mode S1#vlan database S1(vlan)#vlan 10 S1(config)#interface vlan 99 S1(config-if)#ip address 172.17.99.11 255.255.0.0 (optional) S1(config-if)#no shutdown S1(config-if)#end S1#configure terminal (conf t) S1(config)#interface fastethernet 0/1 S1(config-if)#switchport mode access S1(config-if)#switchport acces vlan 99 S1(config-if)#switchport port-security

S1(config-if)#switchport port-security maximum 50 or S1(config-if)#switchport port-security maximum 1 S1(config-if)#switchport port-security mac-address sticky S1(config-if)#switchport port-security violation shutdown S1(config-if)#end S1#sh mac (show mac address-table) S1#show port-security address S1#copy running-config startup-config or S1#co run star or S1#w mem S1#copy run tftp S1#copy tftp star

S1(config)#ip default-gateway 172.17.99.1 S1(config)#end S1#sh ip int br

S1#conf t S1(config)#interface range fa0/1 - 24 S1(config-if-range)#switchport access vlan 10 S1(config-if-range)#exit S1(config-if-range)# S1(config)#Interface fastethernet 0/1 S1(config-if)#duplex auto S1(config-if)#speed auto S1(config-if)#speed 100 S1(config)#ip http authentication enable S1(config)#ip http server S1(config)#ip http secure-server S1(config)#end S1#reload (untuk reboot switch) S1#erase nvram: or S1# erase startup-config S1#delete flash: S1(config)#banner login "Authorized Personnel Only!" S1(config)#no banner login S1(config)#banner motd "Device maintenance will be occurring on Friday!" S1(config)#no banner motd Cara Membuat Koneksi via SSH S1(config)# username namauser password password S1(config)#ip domain-name mydomain.com (optional) S1(config)#aaa new-model (bisa juga digunakan di router) S1(config)#aaa authentication login LOCAL_AUTH local (seperti yang digunakan di router) S1(config)#crypto key generate rsa .. [ok] S1(config)#ip ssh version 2 S1(config)# S1(config)#line vty 0 4 S1(config-line)#privilege level 15 S1(config-line)#login authentication WORD (kata yg di masukkan untuk autentikasi) S1(config-line)#transport input telnet (untuk telnet) atau S1(config-line)#transport input ssh (untuk ssh) S1(config-line)#version 2 or

S1 (config-line)#transport input all

Switch(config)#hostname S1 S1(config)#enable secret class S1(config)#no ip domain-lookup S1(config)#line console 0 S1(config-line)#password cisco S1(config-line)#login S1(config-line)#line vty 0 15 S1(config-line)#password cisco S1(config-line)#login S1(config-line)#end %SYS-5-CONFIG_I: Configured from console by console S1#copy running-config startup-config Destination filename [startup-config]? Building configuration... [OK]

S1(config)#enable password password S1(config)#enable secret password S1(config)#service password-encryption

S1(config)#interface range fa0/1-24 S1(config-if-range)#shutdown S1(config-if-range)#interface range gi0/1-2 S1(config-if-range)#shutdown S1(config)#interface range fa0/1-5 S1(config-if-range)#switchport mode trunk S1(config-if-range)#switchport trunk native vlan 99 S1(config-if-range)#no shutdown S1(config-if-range)#end S2(config)#interface fa0/6 S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#interface fa0/11 S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#interface fa0/18 S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#end

maximum 1 mac-address sticky maximum 10 mac-address sticky maximum 1 mac-address sticky

Setting VTP
S1(config)#vtp mode server Device mode already VTP SERVER. S1(config)#vtp domain Labcisco (optional) Changing VTP domain name from NULL to Lab4 S1(config)#vtp password cisco Setting device VLAN database password to cisco

S1(config)#end

Enable Password Recovery Step 1. Koneksi ke switch melalui console Step 2. Set line speed ke 9600 baud. Step 3. Matikan switch. Hidupkan kembali switch, selama 15 seconds, tekan tombol Mode sampai System LED menyala hijau. Lanjutkan tekan tombol Mode sampai System LED kuning sebentar dan kemudian kembali hijau. Lalu lepaskan tombol Mode. Step 4. Inisialisasi Flash file system menggunakan perintah flash_init Step 5. Load any helper files menggunakan perintah load_helper