Cisco Catalyst 6880-X Specifications download pdf (Page 31)

Access Layer April 2014

Step 1: Configure VLANs on the switch.

Configure the data, voice, and management VLANs on the switch so that connectivity to clients, IP phones,

and the in-band management interfaces can be configured. These are the most common examples, and

organizations can reduce or increase VLANs for access segmentation as needed to support security systems, IP

cameras, Wireless LANs, etc.

vlan [data vlan]

name Data

exit

vlan [voice vlan]

name Voice

exit

vlan [management vlan]

name Management

exit

If the switch is the only switch at the site and is directly connected to a router or

firewall, do not configure a management VLAN. Instead, use the data VLAN for both

data and switch management. When you use this configuration, the next step requires

that you also configure the in-band management interface VLAN using the data VLAN

ID. For example:

interface vlan [data vlan]

description In-band switch management using data VLAN

ip address [ip address] [mask]

no shutdown

Tech Tip

Step 2: Configure the switch with an IP address so that it can be managed via in-band connectivity.

interface vlan [management vlan]

ip address [ip address] [mask]

no shutdown

ip default-gateway [default router]

Do not use the ip default-gateway command on Cisco Catalyst 4500 because it has IP routing enabled by

default and this command will not have any effect. Instead use the following command on the Cisco Catalyst

4500.

ip route 0.0.0.0 0.0.0.0 [default router]

Step 3: Configure DHCP snooping and enable it on the data and voice VLANs. The switch intercepts and

safeguards DHCP messages within the VLAN. This ensures that an unauthorized DHCP server cannot serve up

addresses to end-user devices.

ip dhcp snooping vlan [data vlan]-[voice vlan]

no ip dhcp snooping information option

ip dhcp snooping

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 110 111

No comments

Cisco Catalyst 6880-X Specifications Page 31