Cisco config

[Zelandakh]

Not a Cisco expert! Running Macintosh and PC clients, here's a dump of the Cisco - all advice gratefully received.

Current configuration:
!
version 11.2
no service pad
no service udp-small-servers
no service tcp-small-servers
!
hostname Switch
!
enable secret
!
!
no spanning-tree vlan 1
ip name-server 192.168.1.2
!
interface VLAN1
ip address 192.168.1.36 255.255.255.0
no ip route-cache
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
speed 100
duplex full
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
ip default-gateway 192.168.1.2
!
line con 0
stopbits 1
line vty 0 4
login
line vty 5 9
login
!
end

 

[wybnormal]

Kinda of a odd way to present a question? I guess you want a disection of the config?

ip default-gateway 192.168.1.2 ; this is where the switch will forward it's packets to.

interface FastEthernet0/3 ; this port locked to 100 FULL
speed 100
duplex full

no spanning-tree vlan 1 ; spanning tree turned off for VLAN 1, bad idea

ip name-server 192.168.1.2 ; name server to be used for DNS resolution if needed

no service udp-small-servers ; services which are rarely needed and turned off for security

no service tcp-small-servers ; see above

version 11.2 ; IOS level... very old... consider an update

Overall a pretty generic config for a 2924? can not be a 1924 since it's all 10/100 ports.

MikeS
Find me at

http://www.packetattack.com

"The trouble with giving up civil rights is that you never get them back"

 

[Zelandakh]

Mike,

Yup, that's roughly what I was looking for! IP default gateway is actually my Exchange / DNS server - should I specify the next switch in the line or leave it like that?
Port settings - should I specify all ports as full duplex and 100mb even for printers that run 10mb (they're appletalk) or will that stop things working?
Spanning tree - I'm using Appletalk and thought I had to turn it off. The switches are in a star formation with a central 2912M-XL (the fibre based 12 port with 2 4 port 100mb UTPs that my server are connected to. If I turn on STP things seem to go pear shaped fairly fast...

version 11.2 - I've never updated a Cisco IOS. I'd love to update all of them, but if things go wrong, are there idiot proof instructions on un-flashing the BIOS???!!!

Yup, its a 2924 XL with 2 fibre uplinks, I've got 6 of these babies and they're all similarly configured, but I wanna run them better / more stable.

Thanks for the reply, much appreciated.

 

[wybnormal]

Spanning tree is a layer 2 function to keep from having data path loops. Having it off is a bad idea.

If it effects performance then you need to find out why.. not ignore it and hope for the best. But understand it's not a *have to have* in order for things to work.

I would suggest that the center of the star to be set as the root bridge.. change the priority from 32768 to 8192 or even lower.. that forces it to be the root. The rest will figure it out.

The ports should always be locked to whatever speed. Auto works but has been troublesome in the past.

For some instructions, see my tutorial at:

http://www.packetattack.com/tutorials.html

MikeS Find me at

http://www.packetattack.com

"The trouble with giving up civil rights is that you never get them back"