Collision domain: How many devices can send or receive at a same time.
Broadcast domain: How far broadcast will travel before it stops.
SWITCH> User mode
SWITCH# Privileged mode [command >enable]
SWITCH(CONFIG)# Global configuration mode [command #configure terminal]
Switch Security
sets enable password –> (config)# enable password cisco
encrypted enable password –> (config)# enable secret cisco
MOTD
Set motd –> (config)#banner motd [
*********************************************
DO NOT LOG IN
*********************************************[
Telnet
- Set password for telnet –> (config-line)# password cisco
- Enable login –> (config-line)#login
SSH
- Create User –> (config)# username nikhsil password cisco
- Assign domain name –> ip domain-name njoshi.com
- Create certificate –> crypto key generate rsa
- IP SSH V2 –> ip ssh version 2
- Force SSH –> trasport input ssh
Display all messages #terminal monitor
Port Security
- Way to lock down what devices can plugin to your switch or how many devices can plugin to your switch
- Prevent private devices to plugin to your network
List all mac address –> #show mac address table
Mac address security –> (config-if)# switchport mode access
Access mode means only end devices are allowed to connect to given port. No other switch can connect to given port.
Enable switch port security (config-if)# switchport port-security
Allow only one device to connect (config-if)# switchport port-security maximum 1
Policy violation action (config-if) # switchport port-security violation <protect/restrict/shutdown>
protect: Ignore if other devices are connected, don’t allow access other devices
restrict: Ignore and log it
Security by particular mac address (config-if)# switchport port-security mac-address <H.H.H/sticky>
H.H.H: particular mac address
sticky: get address of connected device and mark it for security
Check Security status for port –> # show port-security interface fastEathernet 0/5
Speed and Duplex
Usually switch detects speed correctly issues is with duplex.
Set duplex (config-if)# duplex half
Set speed (config-if)#speed <10/100/auto>