Core switches require initial setup including hostname assignment, password configuration, VLAN setup, and management IP configuration to ensure secure and efficient network operation.

Step 1: Access the Switch

Connect to the switch using one of the following methods:

• Console Cable: Direct connection via the console port using terminal emulation software like PuTTY or Tera Term .
• SSH: If the switch already has an IP address and SSH enabled, remote login is possible .
• Web Interface: Some modern switches allow browser-based management by entering the switch's IP address .

Step 2: Set Hostname

Assign a meaningful hostname to identify the switch in the network:

CodeCopySwitch> enableSwitch# configure terminalSwitch(config)# hostname Core-Switch

Use a consistent naming convention for multiple switches, e.g., SFO-SW-01 or NYC-SW-01 .

Step 3: Configure Passwords

• Enable Secret Password: Protects privileged EXEC mode.

CodeCopyCore-Switch(config)# enable secret YourStrongPassword

• Console Password: Secures local console access.

CodeCopyCore-Switch(config)# line con 0Core-Switch(config-line)# password ConsolePasswordCore-Switch(config-line)# loginCore-Switch(config-line)# exit

• VTY Password: Secures remote access via Telnet or SSH.

CodeCopyCore-Switch(config)# line vty 0 4Core-Switch(config-line)# password VTYPasswordCore-Switch(config-line)# loginCore-Switch(config-line)# exit

For enhanced security, consider using an external AAA server .

Step 4: Configure Management IP

Assign an IP address to the management VLAN to enable remote management:

CodeCopyCore-Switch(config)# interface vlan 1Core-Switch(config-if)# ip address 192.168.1.10 255.255.255.0Core-Switch(config-if)# no shutdown

Ensure the default gateway is set for network reachability:

CodeCopyCore-Switch(config)# ip default-gateway 192.168.1.1

Step 5: VLAN and Trunk Configuration

• Create VLANs:

CodeCopyCore-Switch(config)# vlan 10Core-Switch(config-vlan)# name SalesCore-Switch(config-vlan)# exit

• Configure Trunk Ports:

CodeCopyCore-Switch(config)# interface gig0/1Core-Switch(config-if)# switchport mode trunkCore-Switch(config-if)# switchport trunk encapsulation dot1q

This ensures proper VLAN tagging and inter-switch communication .

Step 6: Enable SSH for Secure Remote Access

Generate RSA keys and enable SSH:

CodeCopyCore-Switch(config)# crypto key generate rsaCore-Switch(config)# ip ssh version 2

This allows encrypted remote management and enhances security .

Step 7: Save Configuration

After completing the setup, save the configuration to prevent loss on reboot:

CodeCopyCore-Switch# write memory

or

CodeCopyCore-Switch# copy running-config startup-config

Step 8: Verification

Check the configuration and connectivity:

• show running-config – Verify current settings.
• ping <gateway> – Test network reachability.
• show vlan brief – Confirm VLAN assignments.
• show ip interface brief – Verify IP addresses and interface status . Following these steps ensures that your core switch is secure, manageable, and ready for integration into the network, providing a solid foundation for further advanced configurations like QoS, spanning-tree, and routing.