Notes to Myself

Cheatsheet

#Hostname:
set system name <HOSTNAME>
set prompt <HOSTNAME>

#Assign IP Address:
set ip address <IP-ADDR> mask 255.255.255.0 gateway <GW-IP>
set host vlan <MGMT-VLAN-IP>

#Remote Access:
set telnet enable all
set ssh enabled

set ssh hostkey reinitialize
set ssh reinitialize

#Create an user:
set system login <Admin-User> super-user enable
set password <Admin-User>

<Password>

#Stack Switch Remove:
clear switch member 1

#Create and Configure VLAN:
set vlan create 14

clear vlan egress 1 fe.1.1-48;fe.2.1-48
set vlan egress 14 fe.1.48;ge.1.51-52;ge.2.51-52 tagged
set vlan egress 14 fe.2.1-48 untagged

#NTP:
set sntp server <NTP-SRV1-IP>
set sntp server <NTP-SRV2-IP>

set sntp client unicast
set timezone GMT3 3

show time

#SNMP:
set snmp user <USER> authentication sha <AUTH-KEY> privacy <PRIV-KEY>

set snmp group <GROUP> user <USER> security-model usm
set snmp access <GROUP> security-model usm privacy read All write All notify All
set system name “<HOSTNAME>”
set system location “<LOCATION>”

#RADIUS: Firmware 06.41.05.0001’de:
set radius server 1 <RADIUS-SRV-IP> 1812 <KEY> realm management-access
set radius enable
set authentication login any

Firmware 04.02.06.0004’de:
set radius enable
set radius server 1 <RADIUS-SRV-IP> 1812 <KEY> realm management-access

show radius

#Config Backup:
show config outfile configs/<CONFIG>
copy configs/<CONFIG> tftp://<TFTP-IP-SRV>/<CONFIG>

#Password Reset:
show config outfile configs/<CONFIG>
copy configs/<CONFIG> tftp://<TFTP-IP-SRV>/<CONFIG>

#Open config in notepad and erase “set system login admin super-user disable password” line and save to file.
#Copy saved file to switch as startup configuration:
copy tftp://<TFTP-IP-SRV>/<CONFIG> configs/<CONFIG>

#Upload file and proceed.
SW-1(rw)->configure configs/<CONFIG>

This command will reset the system and clear current configuration.
Are you sure you want to continue (y/n) [n]?y

#Set new password.
set system login <ADMIN-USER> super-user enable
set password <ADMIN-USER>

<PASSWORD>

#Span Guard:B2:
show port status

set spantree adminedge fe.1.1-48 true
set spantree spanguard enable
set spantree lp fe.1.1-48 enable

show spantree operedge
show spantree adminedge
show spantree spanguard
show spantree spanguardlock

B5:
set spantree adminedge ge.1.1-20 true
set spantree spanguard enable
set spantree spanguardtrapenable enable

set spantree lp ge.1.1-20 true

set spantree adminedge ge.1.1-23 true
set spantree spanguard enable

show spantree adminedge
show spantree spanguard
show spantree spanguardlock

#CPU:
show system utilization cpu

#Firmware Upgrade:
## Config Backup:
show config outfile configs/<CONFIG>.cfg
copy configs/<CONFIG>.cfg tftp://<TFTP-IP-SRV>/<CONFIG>.cfg   

## Delete firmware:
dir
delete b2-series_04.01.02.0007

B2:
copy tftp://<TFTP-IP-SRV>/b2-series_04.02.19.0008 system:image
set boot system b2-series_04.02.19.0008

B3:
copy tftp://<TFTP-IP-SRV>/b3-series_06.61.18.0001 system:image
set boot system b3-series_06.61.18.0001

B5:
copy tftp://<TFTP-IP-SRV>/b5-series_06.81.10.0001 system:image
set boot system b5-series_06.81.10.0001

A2:
copy tftp://<TFTP-IP-SRV>/a-series_03.03.06.0001 system:image
set boot system a-series_03.03.06.0001

# Logging:
set logging server 1 ip-addr <SYSLOG-IP-SRV> facility local6