Ads

Document on Switch Configuration IP PBX

How to setup Enterprise Switch



Here in today's blog, I will provide you the step by step documentation of enterprise Cisco switch Configuration, in which you can see how to configure the Local are network and setup DHCP pools,
Access lists, different VLANs and many more features.

Here below you can see each of the part of switch configuration , this is the sample configuration of Cisco switch that i deployed recently for my bloemfontein site.

*************************************
NHBRC-Bloemfontein#show run
Building configuration...

Current configuration : 16939 bytes
!
! Last configuration change at 11:12:20 UTC Tue Apr 16 2020
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname NHBRC-Bloemfontein
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-vrf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
enable password 7 05252E2D136F4F0D140C19425A
!
username admin password 7 153C232E36092A20253A3B7242
no aaa new-model
switch 1 provision ws-c3650-48pd
ip routing
!
!
ip dhcp pool MGMT
 network 172.17.56.80 255.255.255.240
 default-router 172.17.56.81
 dns-server 172.16.1.40 172.16.20.12
 option 43 hex f104.ac10.1320
 lease 0 7
!
ip dhcp pool CORP_WIFI
 network 172.19.11.128 255.255.255.128
 default-router 172.19.11.129
 dns-server 172.16.1.40 172.16.20.12
 option 43 hex f104.ac10.1320
!        
ip dhcp pool GUEST_WIFI
 network 172.20.11.0 255.255.255.128
 default-router 172.20.11.129
 dns-server 172.16.1.40 172.16.20.12
 option 43 hex f104.ac10.1320
!
!
vtp domain nhbrchq
vtp mode transparent
!
table-map AutoQos-4.0-Trust-Dscp-Table
 default copy
table-map policed-dscp
 map from 0 to 8
 map from 10 to 8
 map from 18 to 8
 map from 24 to 8
 map from 46 to 8
 default copy
!
!
crypto pki trustpoint TP-self-signed-2704353399
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2704353399
 revocation-check none
 rsakeypair TP-self-signed-2704353399
!
!
crypto pki certificate chain TP-self-signed-2704353399
!
!
!
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
redundancy
 mode sso
!
!
vlan 55
 name MGMT
!        
vlan 90
 name WIFI_CORP
!
vlan 91
 name WIFI_GUEST
!
vlan 110
 name VOICE
!
vlan 120
 name Media_Vlan
lldp timer 50
lldp holdtime 180
lldp run
!
!
class-map match-any AutoQos-4.0-Output-Multimedia-Conf-Queue
  match  dscp af41  af42  af43
  match cos  4
class-map match-any AutoQos-4.0-Output-Bulk-Data-Queue
  match  dscp af11  af12  af13
  match cos  1
class-map match-any AutoQos-4.0-Output-Priority-Queue
  match  dscp cs4  cs5  ef
  match cos  5
class-map match-any AutoQos-4.0-Output-Multimedia-Strm-Queue
  match  dscp af31  af32  af33
class-map match-any AutoQos-4.0-Voip-Data-CiscoPhone-Class
  match cos  5
class-map match-any AutoQos-4.0-Voip-Signal-CiscoPhone-Class
  match cos  3
class-map match-any non-client-nrt-class
  match non-client-nrt
class-map match-any AutoQos-4.0-Default-Class
  match access-group name AutoQos-4.0-Acl-Default
class-map match-any AutoQos-4.0-Output-Trans-Data-Queue
  match  dscp af21  af22  af23
  match cos  2
class-map match-any AutoQos-4.0-Output-Scavenger-Queue
  match  dscp cs1
class-map match-any AutoQos-4.0-Output-Control-Mgmt-Queue
  match  dscp cs2  cs3  cs6  cs7
  match cos  3
!
policy-map AutoQos-4.0-Trust-Dscp-Input-Policy
 class class-default
   set dscp dscp table AutoQos-4.0-Trust-Dscp-Table
policy-map AutoQos-4.0-Output-Policy
 class AutoQos-4.0-Output-Priority-Queue
    priority level 1 percent 30
 class AutoQos-4.0-Output-Control-Mgmt-Queue
    bandwidth remaining percent 10
   queue-limit dscp  cs2 percent 80
   queue-limit dscp  cs3 percent 90
   queue-limit dscp  cs6 percent 100
   queue-limit dscp  cs7 percent 100
    queue-buffers ratio 10
 class AutoQos-4.0-Output-Multimedia-Conf-Queue
    bandwidth remaining percent 10
    queue-buffers ratio 10
 class AutoQos-4.0-Output-Trans-Data-Queue
    bandwidth remaining percent 10
    queue-buffers ratio 10
 class AutoQos-4.0-Output-Bulk-Data-Queue
    bandwidth remaining percent 4
    queue-buffers ratio 10
 class AutoQos-4.0-Output-Scavenger-Queue
    bandwidth remaining percent 1
    queue-buffers ratio 10
 class AutoQos-4.0-Output-Multimedia-Strm-Queue
    bandwidth remaining percent 10
    queue-buffers ratio 10
 class class-default
    bandwidth remaining percent 25
    queue-buffers ratio 25
policy-map AutoQos-4.0-CiscoPhone-Input-Policy
 class AutoQos-4.0-Voip-Data-CiscoPhone-Class
   set dscp ef
    police cir 128000 bc 8000
      conform-action transmit
      exceed-action set-dscp-transmit dscp table policed-dscp
 class AutoQos-4.0-Voip-Signal-CiscoPhone-Class
   set dscp cs3
    police cir 32000 bc 8000
      conform-action transmit
      exceed-action set-dscp-transmit dscp table policed-dscp
 class AutoQos-4.0-Default-Class
   set dscp default
!
!
!
!        
!
!
interface GigabitEthernet0/0
 vrf forwarding Mgmt-vrf
 no ip address
 negotiation auto
!
interface GigabitEthernet1/0/1
 description Uplink CE1
 switchport mode trunk
!
interface GigabitEthernet1/0/2
 description LINK_to_VG
 switchport access vlan 110
 switchport mode access
 auto qos trust dscp
 service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/3
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/4
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/5
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/6
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/7
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/8
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/9
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/10
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/11
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/12
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/13
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/14
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!        
interface GigabitEthernet1/0/15
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/16
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/17
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/18
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/19
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/20
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/21
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/22
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/23
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/24
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/25
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/26
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/27
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/28
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/29
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/30
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/31
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/32
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/33
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/34
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/35
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/36
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/37
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!        
interface GigabitEthernet1/0/38
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/39
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/40
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/41
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/42
 switchport voice vlan 110
 trust device cisco-phone
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQos-4.0-CiscoPhone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/43
 description Media_VLAN
 switchport access vlan 120
 switchport mode access
!
interface GigabitEthernet1/0/44
!
interface GigabitEthernet1/0/45
!
interface GigabitEthernet1/0/46
 description Link-To-AP
 switchport trunk native vlan 55
 switchport mode trunk
 auto qos trust dscp
 service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/47
 description Link-To-AP
 switchport trunk native vlan 55
 switchport mode trunk
 auto qos trust dscp
 service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/48
 description Link-To-AP
 switchport trunk native vlan 55
 switchport mode trunk
 auto qos trust dscp
 service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface Vlan1
 description NATIVE-DATA
 ip address 172.16.4.1 255.255.255.128
!
interface Vlan55
 description MANAGEMENT
 ip address 172.17.56.81 255.255.255.240
!
interface Vlan90
 description CORP_WIFI
 ip address 172.19.11.129 255.255.255.128
!
interface Vlan91
 description GUEST_WIFI
 ip address 172.20.11.129 255.255.255.128
!
interface Vlan110
 description VOICE
 ip address 172.18.4.1 255.255.255.128
 ip helper-address 172.18.4.126
!
interface Vlan120
 ip address 172.21.11.1 255.255.255.240
!
ip default-gateway 172.16.4.2
ip http server
ip http authentication local
ip http secure-server
ip route 0.0.0.0 0.0.0.0 172.16.4.2
!
ip access-list extended AutoQos-4.0-Acl-Default
 permit ip any any
!
!        
!
!
line con 0
 login local
 stopbits 1
line aux 0
 login local
 stopbits 1
line vty 0 4
 login local
 length 0
line vty 5 15
 login local
!
wsma agent exec
 profile httplistener
 profile httpslistener
wsma agent config
 profile httplistener
 profile httpslistener
wsma agent filesys
 profile httplistener
 profile httpslistener
wsma agent notify
 profile httplistener
 profile httpslistener
!
wsma profile listener httplistener
 transport http
!
wsma profile listener httpslistener
 transport https
ap group default-group
end

*************************************