arc/notes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/main'

Browse Source
This commit is contained in:
zleyyij 2023-11-30 15:52:50 -07:00
commit 5459ce6c67
1 changed files with 26 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
IT/Configuring a Cisco IOS Switch.md
View File

@ -20,7 +20,7 @@ configure terminal
Shorthand: `conf t`
## Create/edit a vlan
[docs](https://community.cisco.com/t5/networking-knowledge-base/how-to-configure-vlans-on-the-catalyst-switches/ta-p/3131780)
[docs](https://community.cisco.com/t5/networking-knowledge-base/how-to-configure-vlans-on-the-catalyst-switches/ta-p/3131780)<br>
From configuration mode:
```
vlan [vlan-id]
@ -34,7 +34,7 @@ name [ascii name]
```
where `[ascii name]` is the name you want to assign (EG: `Accounting`)
## Assign interfaces to a vlan
[docs](https://community.cisco.com/t5/networking-knowledge-base/how-to-configure-vlans-on-the-catalyst-switches/ta-p/3131780)
[docs](https://community.cisco.com/t5/networking-knowledge-base/how-to-configure-vlans-on-the-catalyst-switches/ta-p/3131780)<br>
Enter interface config mode (from conf mode):
Single port:
```
@ -97,6 +97,27 @@ vlan [vlan-id]
no shutdown
```
# Access list management
Access lists are created implicitly when you apply the first configuration. More docs for access list management can be found at <https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3s/sec-data-acl-xe-3s-book/sec-create-ip-apply.html.xml>.
### Permitting a particular network for a numbered access list
From the privileged exec terminal:
```
access-list [access-list-num] permit [network] [wildcard-mask]
```
`permit` can be substituted with `deny` to instead explictly deny a network. An example of a valid network could be `192.168.1.0`, and a wildcard mask for a `/24` would be `0.0.0.255`. Unless explictly stated, an access list will deny all other traffic. You can explicitly allow traffic by default for a numbered access list with `access-list [access-list-num] permit any`.
### Denying traffic from a particular address for a numbered access list
From the privileged exec terminal:
```
access-list [access-list-num] deny [address]
```
### Applying a numbered access list to a particular interface
From `config-if` mode:
```
ip access-group [access-list-number]
```
# Viewing configs
### Vlan config
From the privileged exec terminal:
@ -120,9 +141,11 @@ From privileged exec:
```
show interface trunk
```
## Helpful Resources
Trying to figure out where in the command hierarchy you are?
- https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_46_se/command/reference/cr1/intro.pdf
Wondering more about the Cisco IOS CLI?
- https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_46_se/command/reference/cr1/intro.pdf
-
Wish you knew more about a command?
- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fundamentals/configuration/xe-16-5/fundamentals-xe-16-5-book/cf-cli-basics.html#:~:text=Filtering%20CLI%20Output-,Getting%20Context%2DSensitive%20Help,-Entering%20a%20question