Basic Switch configuration: SW_AC3(config)#hostname SW_AC3 SW_AC3(config)#enable secret class SW_AC3(config)#line console 0 SW_AC3(config-line)#password cisco SW_AC3(config-line)#login SW_AC3(config-line)#exit SW_AC3(config)#line

vty 0 15 SW_AC3(config-line)#password cisco SW_AC3(config-line)#login SW_AC3(config-line)#exit SW_AC3(config)#banner motd #Authorized access only!# hostname SW_AC3 enable secret class line console 0 password cisco login exit line vty 0 15 password cisco login exit Step1: Configure switches for remote management: SW_AC3(config)#inteface vlan 43 SW_AC3(config-if)#ip address 172.16.43.13 255.255.255.0 SW_AC3(config-if)#no shutdown SW_AC3(config-if)#exit SW_AC3(config)#ip default-gateway 172.16.43.1 Step2: Configure Trunking. Note : Packet tracer now supports the use of the range argument for the interfac e command For interfaces FastEthernet 0/19 through FastEthernet 0/24 on all switches: -configure static trunking -Assigne VLAN 43 as the native VLAN SW_AC3(config)#interface range FastEthernet 0/19-24 SW_AC3(config-if-range)#switchport mode trunk SW_AC3(config-if-range)#switchport trunk native vlan 43 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#end Step 3: Configure VTP and VLANs. - Configure SW_DS1 as VTP server and the following VTP parameters: (ONLY SW_DS1) --SW_DS1 is the VTP server. --VTP domain name: CCNA --VTP password: cisco -Create and name the following VLANs on SW_DS1.(ONLY SW_DS1) --VLAN 10: Student --VLAN 20: Faculty

--VLAN 43: Management --VLAN 67: Wireless -Configure SW_AC2 and SW_AC3 as VTP clients to participate in the CCNA VTP domai n. SW_AC2(config)#vtp mode client SW_AC2(config)#vtp domain CCNA SW_AC2(config)#vtp password cisco -Verify that VTP is operational. SW_AC3#show vtp status SW_AC3#show vlan brief

SW_AC2(config)#interface range FastEthernet 0/18 SW_AC2(config-if-range)#switchport mode access SW_AC2(config-if-range)#switchport access vlan 67 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC3(config)#vtp mode client SW_AC3(config)#vtp domain CCNA SW_AC3(config)#vtp password cisco SW_AC3(config)#end d. Step 3 : Verify that VTP is operational SW_AC3#show vtp status SW_AC3#show vlan brief Step 8 : Configure port security Note: Best practice requires port security on all access ports. However, for this practice exercise you will only configure one port with security a. Configure SW_AC3 with port security on FastEthernet 0/2 - No more than 2 MAC addresses are allowed on the FastEthernet 0/2 port for SW_ AC3 - once learned , MAC addresses should be automatically added to the running conf iguration - if this policy is violated, the port should be disabled SW_AC3(config)#interface FastEthernet 0/2 SW_AC3(config-if)#switchport port-security SW_AC3(config-if)#switchport port-security maximum 2 SW_AC3(config-if)#switchport port-security mac-address sticky SW_AC3(config-if)#switchport port-security violation shutdown SW_AC3(config)#exit

===================================================== SW_AC3#configure terminal Enter configuration commands, one per line. End with CNTL/Z. SW_AC3(config)#vtp mode client Setting device to VTP CLIENT mode. SW_AC3(config)#vtp domain CCNA Domain name already set to CCNA. SW_AC3(config)#vtp password cisco Setting device VLAN database password to cisco SW_AC3(config)# %LINK-5-CHANGED: Interface Vlan43, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan43, changed state to up SW_AC3(config)# =====================================================