Core Switch Port Settings

Core switch ports should be configured based on their role, typically as access or routed ports, with proper VLAN assignment, speed, duplex, and security settings.

Port Modes

1. Access Ports:

• Used to connect end devices like servers or workstations.
• Assign the port to a specific VLAN using switchport access vlan <VLAN_ID> .
• Ensure the port is in access mode: switchport mode access. 2. Routed Ports (Layer 3 Ports):
• Used for inter-VLAN routing or connecting to other routers/switches.
• Disable switching on the port: no switchport.
• Assign an IP address directly to the port: ip address <IP> <Subnet> . 3. SVI (Switched Virtual Interface):
• Provides a virtual Layer 3 interface for a VLAN.
• Can aggregate bandwidth from multiple access ports in the same VLAN.
• Useful for connecting servers or multiple hosts without dedicating a physical routed port .

Speed and Duplex Settings

• Configure port speed and duplex explicitly to avoid negotiation issues: speed 1000 and duplex full for 1Gbps connections .
• For 10Gbps or higher, ensure the correct SFP or module is installed and supported by the switch .

Security and Best Practices

• Enable port security to limit MAC addresses if connecting critical devices.
• Disable unused ports and place them in a separate VLAN or shutdown mode.
• Use HSRP or VRRP for redundancy and high availability in core networks .

Management Access

• Configure a management VLAN and assign an IP to the SVI for remote access.
• Console or Telnet/SSH access can be used for initial configuration .
• Ensure strong admin passwords and restrict access to trusted hosts.

Summary

When configuring core switch ports:

• Determine the port role (access, routed, or SVI).
• Assign VLANs or IP addresses appropriately.
• Set speed and duplex to match connected devices.
• Implement security and redundancy measures.
• Use management interfaces for monitoring and configuration. Following these guidelines ensures optimal performance, security, and reliability for your core network infrastructure.