! =====================================================================
! CAU HINH MAU: Switch Cisco Catalyst 2960 / 2960-X / 2960S - switch truy cap
! Nguon: https://thietbimangcu.com/cau-hinh-mau/
! - Doi MAT_KHAU_... truoc khi dan. Doi IP, VLAN, so cong cho dung mang cua ban.
! - 2960-X / 2960S dat ten cong gi1/0/1..; 2960 doi dau (24 cong 100M) la fa0/1-24 + gi0/1-2.
! =====================================================================
enable
configure terminal
!
hostname SW-ACCESS-01
no ip domain-lookup
service password-encryption
enable secret MAT_KHAU_ENABLE
username admin privilege 15 secret MAT_KHAU_ADMIN
!
! --- SSH (can IOS ban k9, vd lanbasek9) ---
ip domain-name congty.local
crypto key generate rsa modulus 2048
ip ssh version 2
!
line console 0
 login local
 logging synchronous
line vty 0 15
 login local
 transport input ssh
!
! --- VLAN ---
vlan 10
 name VAN-PHONG
vlan 20
 name CAMERA
vlan 99
 name QUAN-LY
!
! --- IP quan ly switch ---
interface vlan 99
 ip address 192.168.99.11 255.255.255.0
 no shutdown
ip default-gateway 192.168.99.1
!
! --- Cong may tram (VLAN 10) ---
interface range gi1/0/1 - 20
 description MAY-TRAM
 switchport mode access
 switchport access vlan 10
 spanning-tree portfast
 spanning-tree bpduguard enable
!
! --- Cong camera (VLAN 20) ---
interface range gi1/0/21 - 22
 description CAMERA
 switchport mode access
 switchport access vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
! --- Uplink len switch loi / router (trunk) ---
interface gi1/0/24
 description UPLINK-CORE
 switchport mode trunk
 switchport trunk allowed vlan 10,20,99
!
spanning-tree mode rapid-pvst
!
end
write memory
!
! --- Kiem tra ---
! show vlan brief
! show interfaces trunk
! show interfaces status
! show ip ssh
! show spanning-tree summary