
380
Chapter 12: Initial Switch Configuration
CertPrs8
/CCNA
®
Cisco Certified Network Associate Study Guide/Richard Deal/149728-5/Chapter 12
CERTIFICATION SUMMARY
This chapter focused on basic configuration tasks specific to Cisco Catalyst switches.
The 2960 switches were introduced, including the meaning of their LEDs and the
use of the MODE button. When a switch boots up, it runs POST, loads the IOS,
and then loads its configuration. If the IOS can’t find a configuration file, it runs the
System Configuration Dialog.
To manage the switch remotely, minimally it will need an IP address associated
with a VLAN (
interface vlan
and
ip address
) and a default gateway
address (
ip default-gateway
). To view the MAC addresses the switch learns,
use the
show mac-address-table
command.
Port security can be used to prevent unauthorized access to a LAN. Addresses
can be learned dynamically (not saved), using sticky learning (saved), or statically
configured. A violation occurs when more MAC addresses are off of an interface
than are specified or when a MAC address is seen off of a different interface than
expected. Violation modes are restrict, protect, and shutdown. Port security can
be configured only on access (non-trunk) ports with the
switchport port-
security
commands.
ch12.indd 380
3/12/08 4:45:13 PM