Cisco 4948-10ge Configuration Guide |verified| ⚡

DataCenter-SW1(config)# enable secret MyStrongSecretPassword DataCenter-SW1(config)# username admin privilege 15 secret AdminPass123 This secures physical access (Console) and remote access (VTY).

DataCenter-SW1(config)# crypto key generate rsa ! When prompted, choose 1024 or 2048 bits for better security. DataCenter-SW1(config)# ip ssh version 2 The 4948-10GE is a Layer 3 switch, but it functions as a Layer 2 switch by default. Creating VLANs You must create VLANs before assigning ports to them. cisco 4948-10ge configuration guide

DataCenter-SW1(config)# vlan 99 DataCenter-SW1(config-vlan)# name Management DataCenter-SW1(config-vlan)# exit For ports connecting to end devices (servers, workstations), configure them as access ports. DataCenter-SW1(config)# ip ssh version 2 The 4948-10GE is

However, taking a used 4948-10GE from a default state to a fully functional, secure, and optimized network appliance requires a specific set of commands and an understanding of Cisco’s IOS architecture. However, taking a used 4948-10GE from a default

! Secure the console port DataCenter-SW1(config)# line console 0 DataCenter-SW1(config-line)# password ConsolePass DataCenter-SW1(config-line)# login DataCenter-SW1(config-line)# logging synchronous DataCenter-SW1(config-line)# exit ! Secure remote Telnet/SSH access DataCenter-SW1(config)# line vty 0 4 DataCenter-SW1(config-line)# transport input ssh telnet DataCenter-SW1(config-line)# login local DataCenter-SW1(config-line)# exit To enable SSH, you must generate RSA keys. This requires the domain name set earlier.

DataCenter-SW1(config)# vlan 10 DataCenter-SW1(config-vlan)# name Servers DataCenter-SW1(config-vlan)# exit DataCenter-SW1(config)# vlan 20 DataCenter-SW1(config-vlan)# name Users DataCenter-SW1(config-vlan)# exit

DataCenter-SW1(config)# interface range gigabitethernet 1/1 - 24 DataCenter-SW1(config-if-range)# switchport mode access DataCenter-SW1(config-if-range)# switchport access vlan 10 DataCenter-SW1(config-if-range)# spanning-tree portfast DataCenter-SW1(config-if-range)# exit *Note: spanning-tree portfast allows