Category: CCNA

🔐 Cisco Device Hardening & Security Best Practices
(Routers, Switches, IOS / IOS-XE / NX-OS – CCNA / CCNP / Real-World)

Device hardening reduces the attack surface and protects your Cisco infrastructure from unauthorized access, misconfiguration, and exploits.

1️⃣ Secure Device Access (Management Plane)

🔹 Use Strong Authentication (AAA)
- Prefer AAA with TACACS+ / RADIUS
- Fallback to local user if AAA fails
```
aaa new-model
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ local
```
🔹 Use Local User Accounts (Minimum)
```
username admin privilege 15 secret Str0ngP@ssw0rd
```
❌ Avoid:
```
enable password cisco
```
✔ Use:
```
enable secret En@bleS3cret
```
🔹 Secure VTY Access (SSH Only)
```
ip domain-name lab.local
crypto key generate rsa modulus 2048
ip ssh version 2

line vty 0 4
 transport input ssh
 login local
 exec-timeout 10 0
```
❌ Disable Telnet

2️⃣ Management Access Control (ACLs)

Allow only trusted IPs to access the device.
```
ip access-list standard MGMT-ACL
 permit 192.168.10.0 0.0.0.255

line vty 0 4
 access-class MGMT-ACL in
```
3️⃣ Disable Unused & Insecure Services
```
no ip http server
no ip http secure-server
no service pad
no ip source-route
no ip bootp server
```
✔ Keep device minimal

4️⃣ Password & Session Security
```
service password-encryption
security passwords min-length 10

line con 0
 exec-timeout 10 0

line vty 0 4
 exec-timeout 10 0
```
5️⃣ SNMP Hardening

❌ Avoid SNMP v1/v2c (community strings)

✔ Use SNMPv3
```
snmp-server group SECURE v3 priv
snmp-server user snmpadmin SECURE v3 auth sha AuthP@ss priv aes 256 PrivP@ss
```
6️⃣ Control Plane Protection (CoPP)

Protect CPU from attacks like DoS, scanning, routing floods
```
class-map match-any MGMT-TRAFFIC
 match protocol ssh
 match protocol snmp

policy-map CONTROL-PLANE-POLICY
 class MGMT-TRAFFIC
  police 64000

control-plane
 service-policy input CONTROL-PLANE-POLICY
```
7️⃣ Interface Hardening

🔹 Shut Unused Interfaces
```
interface range g0/2 - 4
 shutdown
```
🔹 Disable CDP on Untrusted Interfaces
```
no cdp enable
```
🔹 Enable Port Security (Switch)
```
interface g1/0/5
 switchport mode access
 switchport port-security
 switchport port-security maximum 1
 switchport port-security violation restrict
 switchport port-security mac-address sticky
```
8️⃣ Layer-2 Security (Switches)
```
ip dhcp snooping
ip dhcp snooping vlan 10

ip arp inspection vlan 10
spanning-tree portfast default
spanning-tree bpduguard default
```
9️⃣ Routing Protocol Security

🔹 OSPF Authentication
```
interface g0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 OSPFkey
```
🔹 BGP Security
- Use TTL security
- Use MD5 authentication
- Prefix filtering
🔟 Logging, Time & Monitoring

🔹 Enable Logging
```
logging buffered 64000
logging host 192.168.10.50
```
🔹 Use NTP with Authentication
```
ntp authenticate
ntp authentication-key 1 md5 NTPkey
ntp trusted-key 1
ntp server 192.168.10.1 key 1
```
1️⃣1️⃣ IOS & Configuration Protection

🔹 Secure Configuration Files
```
service config
archive
 path flash:backup
 write-memory
```
🔹 Disable Password Recovery (Physical Security)
```
no service password-recovery
```
⚠️ Use carefully (lab vs production)

1️⃣2️⃣ Firmware & Patch Management

✔ Keep IOS updated
✔ Remove unused images
✔ Verify image integrity (MD5/SHA)
```
verify /md5 flash:image.bin
```
1️⃣3️⃣ Best Practice Summary Checklist

✅ SSH v2 only
✅ AAA + TACACS+/RADIUS
✅ Strong passwords & secrets
✅ ACL-restricted management
✅ SNMPv3 only
✅ Disable unused services
✅ Interface & L2 security
✅ Logging + NTP
✅ Regular backups

🧠 CCNA / CCNP / Interview Focus
- Difference between Control Plane / Data Plane / Management Plane
- Why CoPP is important
- SSH vs Telnet risks
- SNMPv3 vs v2c
December 24, 2025
🌐 NAT Types & PAT Configuration in Cisco Routers
NAT (Network Address Translation) allows private IP addresses to communicate with public networks like the Internet. PAT (Port Address Translation) is a form of NAT that uses port numbers to map multiple private IPs to a single public IP.

🔁 Types of NAT in Cisco

1️⃣ Static NAT (One-to-One)
- One private IP ↔ One public IP
- Used for servers (web, mail, VPN)
Configuration Example
```
interface g0/0
 ip address 203.0.113.2 255.255.255.252
 ip nat outside

interface g0/1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside

ip nat inside source static 192.168.1.10 203.0.113.10
```
2️⃣ Dynamic NAT (Many-to-Many)
- Private IPs mapped to a pool of public IPs
- No port translation
Configuration Example
```
access-list 1 permit 192.168.1.0 0.0.0.255

ip nat pool PUBLIC_POOL 203.0.113.10 203.0.113.20 netmask 255.255.255.0

ip nat inside source list 1 pool PUBLIC_POOL
```
3️⃣ PAT (NAT Overload) – Many-to-One
- Multiple private IPs share one public IP
- Uses TCP/UDP port numbers
- Most common for Internet access
⚙️ PAT Configuration (Most Common)

🔹 Using Interface IP (Recommended)
```
access-list 1 permit 192.168.1.0 0.0.0.255

ip nat inside source list 1 interface g0/0 overload
```
🔹 Using Public IP Pool
```
ip nat pool PAT_POOL 203.0.113.50 203.0.113.50 netmask 255.255.255.0

ip nat inside source list 1 pool PAT_POOL overload
```
🔄 Inside vs Outside Interfaces (Mandatory)
```
interface g0/0
 ip nat outside

interface g0/1
 ip nat inside
```
📌 NAT Terms (Quick Reference)

Term Meaning
Inside Local Private IP (192.168.x.x)
Inside Global Public IP assigned by NAT
Outside Local Public IP as seen inside
Outside Global Actual Internet IP

🧪 Verification & Troubleshooting
```
show ip nat translations
show ip nat statistics
clear ip nat translation *
debug ip nat
```
🚦 Real-World Scenario (Home / Lab)
- LAN: 192.168.1.0/24
- ISP IP on g0/0
- Goal: Internet access for all LAN users
```
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface g0/0 overload
```
✔ This single command enables Internet for the entire LAN.

⚠️ Common Mistakes

❌ Forgetting ip nat inside / outside
❌ ACL mismatch (wrong subnet)
❌ NAT applied on wrong interface
❌ Missing overload keyword for PAT

🧠 CCNA / CCNP Exam Tips
- Static NAT → servers
- Dynamic NAT → limited public IPs
- PAT (Overload) → Internet access
- Order matters: Static NAT > Dynamic NAT > PAT
December 24, 2025
🔐 What is an ACL?
An ACL is an ordered list of rules (statements) that a router checks top to bottom to decide whether to permit or deny traffic.

👉 Implicit deny exists at the end of every ACL (anything not matched is denied).

🧩 Types of Cisco ACLs

1️⃣ Standard ACL
- Filters only by source IP address
- Numbered: 1–99, 1300–1999
- Usually placed near the destination
Example
```
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 10 deny any
```
Apply to interface
```
interface g0/0
 ip access-group 10 in
```
2️⃣ Extended ACL
- Filters by:
  - Source IP
  - Destination IP
  - Protocol (TCP/UDP/ICMP)
  - Port numbers
- Numbered: 100–199, 2000–2699
- Placed near the source
Example
```
access-list 101 permit tcp 192.168.1.0 0.0.0.255 any eq 80
access-list 101 deny ip any any
```
Apply
```
interface g0/1
 ip access-group 101 out
```
3️⃣ Named ACL
- More readable and editable
- Can be standard or extended
Extended Named ACL Example
```
ip access-list extended WEB-FILTER
 permit tcp 192.168.10.0 0.0.0.255 any eq 443
 deny ip any any
```
Apply
```
interface g0/0
 ip access-group WEB-FILTER in
```
🎯 Wildcard Mask Basics

Wildcard mask is the inverse of subnet mask:

Subnet Mask Wildcard
255.255.255.0 0.0.0.255
255.255.255.255 0.0.0.0

Examples
- host 192.168.1.10 → same as 192.168.1.10 0.0.0.0
- any → same as 0.0.0.0 255.255.255.255
🔁 Inbound vs Outbound
- Inbound (in): Traffic checked before routing
- Outbound (out): Traffic checked after routing
```
ip access-group 101 in
ip access-group 101 out
```
⚠️ Important Rules to Remember

✔ ACLs are processed top-down
✔ First match wins
✔ One ACL per interface, per direction, per protocol
✔ Always add explicit permit if needed (else implicit deny blocks traffic)

🛠 Useful Show Commands
```
show access-lists
show ip access-lists
show run | section access-list
show ip interface g0/0
```
🔍 Common Use Cases
- Block specific IPs or subnets
- Allow only HTTP/HTTPS traffic
- Restrict management access (SSH/Telnet)
- Basic firewalling on routers
December 24, 2025
✅Basic Cisco Switch Vlan and interface Configuration
Basic VLAN and interface configuration on a Cisco switch involves creating VLANs, assigning ports, and managing trunk/access modes. The fundamental commands and workflow are outlined below.

Create a VLAN

To create VLANs (e.g., VLAN 10 and VLAN 20):
```
Switch> enable
Switch# configure terminal
Switch(config)# vlan 10
Switch(config-vlan)# exit
Switch(config)# vlan 20
Switch(config-vlan)# exit
```
This creates VLANs 10 and 20 if they do not already exist.

Assign Name to VLAN (Optional)

To name a VLAN:
```
Switch(config)# vlan 10
Switch(config-vlan)# name Sales
Switch(config-vlan)# exit
```
Naming helps with identification, especially in large environments.

Assign Switch Ports to VLAN

To assign a port to VLAN 10:
```
Switch(config)# interface fastethernet 0/1
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10
Switch(config-if)# exit
```
To assign another port to VLAN 20:
```
Switch(config)# interface fastethernet 0/2
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 20
Switch(config-if)# exit
```
Assigning ports assigns their traffic to the selected VLAN.

Assign Multiple Ports (Interface Range)

To assign several interfaces at once:
```
Switch(config)# interface range fastethernet 0/3 - 0/8
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 10
Switch(config-if-range)# exit
```
This saves time on large switches.

Configure Trunk Ports

For inter-switch links (carry multiple VLANs):
```
Switch(config)# interface gigabitEthernet 0/1
Switch(config-if)# switchport mode trunk
Switch(config-if)# exit
```
Trunk ports are required for connecting switches together and passing multiple VLANs.

Common Show Commands
- Check VLANs:
```
Switch# show vlan
```
- Check interface status:
```
Switch# show interfaces status
```
- Check port VLAN assignment:
```
Switch# show running-config
```
These commands help verify configuration and troubleshoot issues.

This basic command set prepares a Cisco switch for segmented, secure communication in most enterprise or learning lab environments
August 30, 2025
✅Basic Cisco Switch Configuration
A basic Cisco switch configuration involves initial setup tasks like setting the hostname, securing access, configuring management IP, and saving the configuration. Here are the main steps and key commands for a standard, unconfigured Cisco switch.

Basic Configuration Steps

Connect to the Switch
- Connect via console cable using a terminal emulator (like PuTTY) with settings: 9600 baud, 8 data bits, no parity, 1 stop bit.
Enter Privileged EXEC Mode
```
Switch> enable
```
- Moves from user mode to privileged (admin) mode.
Enter Global Configuration Mode
```
Switch# config t
```
- Allows access to configuration commands.
Set Hostname
```
Switch(config)# hostname SWITCH_NAME
```
- Changes the device’s name for identification.
Set Management IP Address
```
Switch(config)# interface vlan 1
Switch(config-if)# ip address 192.168.1.2 255.255.255.0
Switch(config-if)# no shutdown
Switch(config-if)# exit
Switch(config)# ip default-gateway 192.168.1.1
```
- Assigns an IP for access via Telnet/SSH and sets the gateway for remote management.
Set Console and Enable Passwords
```
Switch(config)# line con 0
Switch(config-line)# password YOUR_PASS
Switch(config-line)# login
Switch(config-line)# exit

Switch(config)# enable secret ENABLE_PASS
```
- Adds security for console and privileged access.
Configure Banner Message (Optional)
```
Switch(config)# banner motd #Unauthorized access prohibited#
```
- Displays a warning on login.
Save Configuration
```
Switch# copy running-config startup-config
```
- Writes the config to memory, so it persists after reboot.
Key Points
- Use the show run command to verify current configuration.
- Always save your configuration after any change.
- You can further configure VLANs, trunk/access ports, and add remote management (SSH/Telnet) as needed.
August 30, 2025
✅ OSI Model with each layer explained using the example of sending a WhatsApp message 📩.
Let’s walk through a real-world example:

👉 You send a WhatsApp text message to your friend.

📩 Step-by-Step Flow Through OSI Layers

At Your Side (Sender)
1. Application Layer (Layer 7)
  - You type “Hi!” in WhatsApp.
  - WhatsApp app uses HTTP/HTTPS + its own messaging protocols.
2. Presentation Layer (Layer 6)
  - Message is encrypted (end-to-end encryption).
  - Emojis, fonts, and formats are standardized.
3. Session Layer (Layer 5)
  - A secure session is established between your phone and WhatsApp servers.
  - Maintains your login session.
4. Transport Layer (Layer 4)
  - WhatsApp decides TCP (for reliability) for text OR UDP (for voice/video).
  - Message is divided into segments, with sequence numbers.
5. Network Layer (Layer 3)
  - Adds your IP address (source) and your friend’s IP (destination).
  - Routers decide the best path to the server or receiver.
6. Data Link Layer (Layer 2)
  - Adds MAC addresses (your phone → Wi-Fi router → ISP device).
  - Creates frames for local delivery.
7. Physical Layer (Layer 1)
  - Message is converted into electrical signals or Wi-Fi radio waves.
  - Sent over fiber/copper/wireless.
Across the Network
- The message travels through routers, switches, ISP networks, undersea cables, or satellites.
- At each stop, layers 1–3 (Physical, Data Link, Network) ensure correct forwarding.
At Your Friend’s Side (Receiver)
- The process is reversed:
  - Signals → Frames → Packets → Segments → Sessions → Decryption → WhatsApp app shows “Hi!”
✅ In short:
- Upper layers (7–5): Handle the meaning of your message.
- Middle (4): Handles reliability.
- Lower (3–1): Handle delivery.
August 23, 2025
✅ OSI Reference Model
The OSI Reference Model (Open Systems Interconnection Model) is a conceptual framework used to understand and describe how different networking protocols and systems communicate with each other.

It breaks down the complex process of data communication into 7 distinct layers, each with specific functions.

🔹 7 Layers of the OSI Model (Top to Bottom)

7. Application Layer
- What it does: Provides services directly to the user and applications.
- Examples: Web browsers, email clients, file transfer, remote login.
- Protocols: HTTP, HTTPS, FTP, SMTP, POP3, DNS.
6. Presentation Layer
- What it does: Ensures data is in a readable format for the application layer. Handles encryption, compression, translation.
- Examples: Data formatting, SSL/TLS encryption, JPEG, GIF, MP3.
5. Session Layer
- What it does: Establishes, manages, and terminates sessions (connections) between applications.
- Examples: Remote Procedure Calls (RPC), NetBIOS, managing login sessions.
4. Transport Layer
- What it does: Provides reliable or unreliable delivery of data between devices. Ensures proper sequencing and error checking.
- Protocols:
  - TCP (Transmission Control Protocol – reliable, connection-oriented)
  - UDP (User Datagram Protocol – faster, connectionless)
3. Network Layer
- What it does: Handles logical addressing, routing, and path determination.
- Examples: Routers operate here.
- Protocols: IP (IPv4, IPv6), ICMP, OSPF, RIP, BGP.
2. Data Link Layer
- What it does: Provides node-to-node communication, error detection, and framing. Uses MAC addresses.
- Examples: Switches, Ethernet, PPP, ARP.
- Sub-layers:
  - LLC (Logical Link Control)
  - MAC (Media Access Control)
1. Physical Layer
- What it does: Deals with raw bits transmission over physical media (cables, wireless signals). Defines hardware specs.
- Examples: Hubs, repeaters, cables, fiber optics, Wi-Fi signals.
🔹 Easy Way to Remember (Mnemonic)

All People Seem To Need Data Processing
(Application, Presentation, Session, Transport, Network, Data Link, Physical)

✅ In summary:
- Upper layers (7–5): Application-related
- Middle (4): End-to-end communication (Transport)
- Lower layers (3–1): Data delivery through network
August 23, 2025

Term	Meaning
Inside Local	Private IP (192.168.x.x)
Inside Global	Public IP assigned by NAT
Outside Local	Public IP as seen inside
Outside Global	Actual Internet IP

Subnet Mask	Wildcard
255.255.255.0	0.0.0.255
255.255.255.255	0.0.0.0

✅ What is an IP Address?

An IP Address (Internet Protocol Address) is a unique logical address assigned to each device in a network so that it can be identified and communicate with other devices.

👉 Think of it like the phone number of a device on a network.
Without it, devices cannot send/receive data properly.

✅ Types of IP Addresses

IPv4 (Internet Protocol version 4)

IPv6 (Internet Protocol version 6) – newer, because IPv4 addresses are running out.

✅ IPv4 (Internet Protocol version 4)

Most widely used IP version today.
32-bit address (4 bytes).
Written as 4 decimal numbers separated by dots.
Each number ranges from 0–255.
Example: 192.168.1.10 10.0.0.5 172.16.254.1

🔹 IPv4 Address Classes

IPv4 is divided into classes (for different network sizes):

Class	Range (First Octet)	Example	Usage
A	1 – 126	10.0.0.1	Very large networks
B	128 – 191	172.16.0.1	Medium networks
C	192 – 223	192.168.1.1	Small networks
D	224 – 239	224.0.0.1	Multicast
E	240 – 255	240.0.0.1	Experimental

✅ Types of IPv4 Addresses

Public IP – Unique, used on the internet.

Private IP – Used inside local networks (not routable on internet).

Ranges:

10.0.0.0 – 10.255.255.255

172.16.0.0 – 172.31.255.255

192.168.0.0 – 192.168.255.255

Loopback Address – 127.0.0.1 → Used to test your own machine.

✅ Difference Between IPv4 & IPv6 (Quick View)

Feature	IPv4	IPv6
Address Size	32-bit	128-bit
Example	192.168.1.1	2001:0db8:85a3::8a2e:0370:7334
Total Addresses	~4.3 billion	Almost unlimited
Usage	Still most common	Growing adoption

👉 In short:

IP Address = Unique logical address of a device.
IPv4 = 32-bit address, written in dotted decimal, still the most widely used.

August 21, 2025

✅ What is a Protocol?
A protocol in computer networking is a set of rules and standards that define how two or more devices communicate with each other over a network.

Think of it like a language:
- If two people don’t speak the same language, they can’t understand each other.
- Similarly, without protocols, computers can’t exchange data properly.
✅ Key Functions of Protocols
- Data Formatting → How data is structured for transmission.
- Addressing → Identifying source & destination (IP, MAC).
- Error Checking → Ensures data is not corrupted.
- Flow Control → Prevents fast sender from overwhelming slow receiver.
- Security → Encrypting or authenticating communication.
✅ Common Types of Protocols

🔹 Network Communication Protocols
- TCP (Transmission Control Protocol) – Reliable, connection-oriented.
- UDP (User Datagram Protocol) – Fast, no guaranteed delivery (used in streaming, gaming).
- IP (Internet Protocol) – Provides addressing and routing.
🔹 Web & Application Protocols
- HTTP/HTTPS – Web browsing.
- FTP/SFTP – File transfer.
- SMTP, POP3, IMAP – Email.
🔹 Security Protocols
- SSL/TLS – Secure web communication.
- IPSec – Secure VPN communication.
- SSH – Secure remote login.
🔹 LAN Protocols
- Ethernet – Wired LAN communication.
- Wi-Fi (IEEE 802.11) – Wireless LAN communication.
- ARP (Address Resolution Protocol) – Maps IP ↔ MAC.
✅ Example

When you open a website:
1. DNS finds the website’s IP address.
2. TCP/IP handles connection and data delivery.
3. HTTP/HTTPS transfers the webpage.
4. Ethernet/Wi-Fi carries data physically.
👉 In short:
Protocols = rules of communication for networks, just like grammar rules in a language.
August 21, 2025
✅ What is a MAC Address?
A MAC Address (Media Access Control Address) is a unique hardware identifier given to every network interface card (NIC), whether it’s wired (Ethernet) or wireless (Wi-Fi).

Think of it like a permanent serial number for your network card, used at the data link layer (Layer 2) of the OSI model.

✅ Format of a MAC Address
- 48-bit address (6 pairs of hexadecimal numbers).
- Written as: 00:1A:2B:3C:4D:5E (colon separated) 00-1A-2B-3C-4D-5E (hyphen separated)
- First 3 pairs → identify the manufacturer (called OUI – Organizationally Unique Identifier).
- Last 3 pairs → uniquely assigned to the device.
✅ Example
```
D4:6D:6D:A2:34:BC
```
- D4:6D:6D → Vendor (e.g., Intel, Cisco, etc.)
- A2:34:BC → Unique device ID.
✅ Uses of MAC Address
1. Device Identification – Every networked device has a unique MAC.
2. LAN Communication – Switches use MAC addresses to forward data within a local network.
3. Filtering & Security – Wi-Fi routers can allow/block devices using MAC filtering.
4. Troubleshooting – Network admins track devices using their MAC.
5. ARP (Address Resolution Protocol) – Maps IP address → MAC address to deliver packets.
👉 In simple terms:
- IP Address = Logical address (can change, given by network).
- MAC Address = Permanent hardware address (burned into NIC).
August 21, 2025

Category: CCNA

1️⃣ Secure Device Access (Management Plane)

🔹 Use Strong Authentication (AAA)

🔹 Use Local User Accounts (Minimum)

🔹 Secure VTY Access (SSH Only)

2️⃣ Management Access Control (ACLs)

3️⃣ Disable Unused & Insecure Services

4️⃣ Password & Session Security

5️⃣ SNMP Hardening

6️⃣ Control Plane Protection (CoPP)

7️⃣ Interface Hardening

🔹 Shut Unused Interfaces

🔹 Disable CDP on Untrusted Interfaces

🔹 Enable Port Security (Switch)

8️⃣ Layer-2 Security (Switches)

9️⃣ Routing Protocol Security

🔹 OSPF Authentication

🔹 BGP Security

🔟 Logging, Time & Monitoring

🔹 Enable Logging

🔹 Use NTP with Authentication

1️⃣1️⃣ IOS & Configuration Protection

🔹 Secure Configuration Files

🔹 Disable Password Recovery (Physical Security)

1️⃣2️⃣ Firmware & Patch Management

1️⃣3️⃣ Best Practice Summary Checklist

🧠 CCNA / CCNP / Interview Focus

🔁 Types of NAT in Cisco

1️⃣ Static NAT (One-to-One)

2️⃣ Dynamic NAT (Many-to-Many)

3️⃣ PAT (NAT Overload) – Many-to-One

⚙️ PAT Configuration (Most Common)

🔹 Using Interface IP (Recommended)

🔹 Using Public IP Pool

🔄 Inside vs Outside Interfaces (Mandatory)

📌 NAT Terms (Quick Reference)

🧪 Verification & Troubleshooting

🚦 Real-World Scenario (Home / Lab)

⚠️ Common Mistakes

🧠 CCNA / CCNP Exam Tips

🧩 Types of Cisco ACLs

1️⃣ Standard ACL

2️⃣ Extended ACL

3️⃣ Named ACL

🎯 Wildcard Mask Basics

🔁 Inbound vs Outbound

⚠️ Important Rules to Remember

🛠 Useful Show Commands

🔍 Common Use Cases

Create a VLAN

Assign Name to VLAN (Optional)

Assign Switch Ports to VLAN

Assign Multiple Ports (Interface Range)

Configure Trunk Ports

Common Show Commands

Basic Configuration Steps

Connect to the Switch

Enter Privileged EXEC Mode

Enter Global Configuration Mode

Set Hostname

Set Management IP Address

Set Console and Enable Passwords

Configure Banner Message (Optional)

Save Configuration

Key Points

📩 Step-by-Step Flow Through OSI Layers

At Your Side (Sender)

Across the Network

At Your Friend’s Side (Receiver)

🔹 7 Layers of the OSI Model (Top to Bottom)

7. Application Layer

6. Presentation Layer

5. Session Layer

4. Transport Layer

3. Network Layer

2. Data Link Layer

1. Physical Layer

🔹 Easy Way to Remember (Mnemonic)

✅ Types of IP Addresses

✅ IPv4 (Internet Protocol version 4)