1. Configure Switch hostname as LOCAL-SWITCH
Switch(config)#hostname LOCAL-SWITCH
2. Configure the message of the day as "Unauthorized access is forbidden"
Switch(config)# banner motd #Unauthorized access is forbidden#
(the message displays when a user connects to the device prior to login, most network administrators are now using
it to display legal notices regarding access to the switch)
3. Configure the password for privileged mode access as "cisco". The password must be
md5 encrypted
Switch(config)#enable secret cisco
4. Configure password encryption on the switch using the global configuration command
Switch(config)#service password-encryption
(Enabling the password encryption service will encrypt all clear-text passwords in the config).
(The enable password is displayed with a “5” where the passwords encrypted by service password-encryption are
displayed with a “7”. That value represents the strength of the encryption, where “7” is a weak encryption
performed by service password-encryption and “5” indicates the somewhat stronger MD5 algorithm).
5. Configure CONSOLE access
Switch(config)#line con 0
Switch(config-line)#password ciscoconsole
Switch(config-line)#logging synchronous
(Turns on synchronous logging. Information items sent to console will not interrupt the command you are typing.
The command will be moved to a new line).
(Ever try to type in a command and an informational line appears in the middle of what you were typing? Lose your
place? Do not know where you are in the command, so you just press and start all over? The logging synchronous
command will tell the router that if any informational items get displayed on the screen, your prompt and command
line should be moved to a new line, so as not to confuse you.
The informational line does not get inserted into the middle of the command you are trying to type. If you were to
continue typing, the command would execute properly, even though it looks wrong on the screen).
(This command simply prevents breaking your line output especially when typing in commands).
Switch(config-line)#login
Switch(config-line)#history size 15
Switch(config-line)#exec-timeout 6 45
6. Configure TELNET access
Switch(config)#line vty 0 15
(line vty 0 15 allows 16 simultaneous connections)
Switch(config-line)#exec-timeout 8 20
(By default, an IOS device will disconnect a console or VTY user after 10 minutes of inactivity. You can specify a
different inactivity timer using the exec-timeout MINUTES SECONDS line mode command After 90 seconds of
inactivity, the session will be disconnected and the user will need to supply the console password to log back in)
Switch(config-line)#password ciscotelnet
Switch(config-line)#logging synchronous
Switch(config-line)#login
Switch(config-line)#history size 15
(Sets the number of previous commands stored in the session history).
7. Configure the IP address of the switch as 192.168.1.2/24 and it's default gateway IP
(192.168.1.1).
Switch(config)#interface Vlan1
Switch(config-if)#ip address 192.168.1.2 255.255.255.0
Switch(config-if)#no shutdown
Switch(config-if)#ip default-gateway 192.168.1.1