
32
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 8: INSTALLING THE SOFTWARE
8.10 CONFIGURING THE USERNAME AND PASSWORD
To access the system remotely, configure a system username and password.
• Configure a username and password to access the system remotely.
CONFIGURATION mode
username username password [encryption-type]
8.11 CONFIGURING THE ENABLE PASSWORD
Access EXEC Privilege mode using the enable command. EXEC Privilege mode is unrestricted by default.
As a basic security measure, configure a password. There are two types of enable passwords:
• enable password — stores the password in the running/startup configuration using a data encryption standard (DES)-encryption
method.
• enable secret — stores the password in the running/startup configuration using a stronger, MD5-encryption method.
Black Box recommends using the enable secret password.
• Create a password to access EXEC Privilege mode.
CONFIGURATION mode
Installing the Software 21
enable [password | secret] [level level] [encryption-type] password
8.12 CREATING A PORT-BASED VLAN
The default local area network (VLAN), VLAN 1, is part of the system startup configuration and does not require configuration.
To configure a port-based VLAN, create the VLAN and then add physical interfaces or port channel (LAG) interfaces to the VLAN.
• Configure a port-based VLAN (if the vlan-id is different from the default VLAN ID) and enter INTERFACE VLAN mode.
CONFIGURATION mode
interface vlan vlan-id
After you create a VLAN, assign interfaces in Layer 2 mode to the VLAN to activate the VLAN.
To view the configured VLANs, use the
show vlan
command in EXEC Privilege mode.
8.13 ASSIGNING INTERFACES TO A VLAN
You can only assign interfaces in Layer 2 mode to a VLAN using the
tagged
and
untagged
commands.
To place an interface in Layer 2 mode, use the
switchport
command.
You can designate Layer 2 interfaces as tagged or untagged. When you place an interface in Layer 2 mode using the
switchport
command, the interface automatically designates untagged and is in the default VLAN.
To tag frames leaving an interface in Layer 2 mode, assign that interface as tagged to a port-based VLAN to tag it with that VLAN
ID.
To move untagged interfaces from the default VLAN to another VLAN, use the untagged command.