Cisco Switch Setup

This guide covers initial configuration for Cisco small-business and Catalyst switches, focusing on web-based administration and CLI fundamentals.

Initial access

Cisco switches with factory defaults come up at 192.168.1.254/24 on VLAN 1. The System LED flashes continuously while defaults are active; it becomes steady green once a static IP is configured or DHCP assigns an address.

To access the web interface:

1. Set your computer to an unused address in the 192.168.1.0/24 range (e.g., 192.168.1.2).
2. Browse to http://192.168.1.254.
3. Log in with default credentials (typically cisco/cisco).

If DHCP is unavailable, configure a static IP matching your network topology to avoid multiple switches colliding on the same factory default.

VLAN management

VLANs segment broadcast domains on a switch. By default, all ports are in VLAN 1 (the default VLAN) and operate in access mode.

Creating VLANs

Navigate to VLAN Management > VLAN Settings to add VLANs and assign friendly names.

Port modes

Change port modes in VLAN Management > Interface Settings:

• Access — Port belongs to a single VLAN (typical for end devices).
• Trunk — Port carries multiple VLANs (typical for switch-to-switch or switch-to-router links).
• General — Hybrid behavior; can carry tagged and untagged traffic.

Assigning ports to VLANs

Use VLAN Management > Port VLAN Membership to join ports to specific VLANs. Trunk ports automatically carry all VLANs configured in VLAN Settings.

Static routes

If the switch is not using DHCP, add a static default route (0.0.0.0/0) pointing to your firewall or gateway to enable remote management:

IP Configuration > IPv4 Management and Interfaces > IPv4 Static Routes

Routes use longest-prefix match (LPM). If multiple default gateways share the same metric, the lowest IPv4 address wins.

Smartport

Smartport auto-applies interface macros based on detected device types. It can cause unexpected behavior with some devices. To disable:

1. Go to Smartport > Properties.
2. Disable Administrative Auto Smartport.
3. Click Apply.

Password aging

Password aging forces periodic password changes. To disable:

1. Go to Security > Password Strength.
2. Uncheck Password Aging.
3. Click Apply.

Saving configuration

Changes to the running configuration are not persistent across reboots. Save to the startup configuration using one of these methods:

• Click the blinking red disk icon in the upper-right corner of the web UI. If it disappears, maximize the browser window and switch sections to restore it.
• Download the running configuration under Administration > File Management > File Operations, then re-upload it to overwrite the startup configuration.
• CLI: copy running-config startup-config (or write memory on some models).

SSH access

Enable SSH for encrypted CLI management:

1. Go to Security > TCP/UDP Services and enable SSH Service.
2. Configure user authentication under Security > SSH User Authentication.
3. Access via an SSH client and enter configuration mode with config t.

In configuration mode, prefix normal commands with do (e.g., do show run) without exiting config mode.

CLI quick reference

# Enter configuration mode
configure terminal
 
# Set hostname
hostname $HOSTNAME
 
# Set encrypted enable password
enable secret $PASSWORD
 
# Configure interface
interface vlan 1
ip address $IP_ADDRESS $NETMASK
 
# Set default gateway
ip default-gateway $GATEWAY_IP
 
# Save configuration
copy running-config startup-config

Sources

• Cisco Business 350 Series Switches Administration Guide — Get To Know Your Switch
• Cisco Business 350 Series Switches Administration Guide (PDF)
• Cisco 350 & 550 Series — IPv4 Static Routes
• Cisco Business Switches 350 Series CLI Guide — Introduction

Related: cisco-ios, tcp, wireshark