Waxaan soo iibsaday Cisco SG300 10-deked Gigabit Ethernet ah oo cusub ayaa maamulay beddelka dhawr bilood ka dib waxayna ahayd mid ka mid ah maalgashiga ugu wanaagsan ee shabakadda gurigayga yar. Shixnadaha Cisco^(Cisco) waxay leeyihiin sifooyin iyo fursado badan oo aad u habayn karto si aad si weyn u maamusho shabakadaada. Xagga amniga, waxsoosaarkoodu wuu muuqdaa.

Iyadoo taas la yiri, waxaa aad u xiiso badan sida aan la hubin ee beddelka Cisco uga soo baxay sanduuqa. Marka aad ku xidho, ama waxay ka qabtaa ciwaanka IP-ga server-ka DHCP ama waxay u qoondaysaa ciwaanka IP (badanaa 192.168.1.254) oo waxay u isticmaashaa cisco -ga isticmaalaha iyo erayga sirta ah. Yeey!

Maadaama shabakadaha badankoodu isticmaalaan aqoonsiga shabakadda 192.168.1.x, beddelkaagu si buuxda ayuu u heli karaa qof kasta oo shabakadda ah. Maqaalkan, waxaan uga hadlayaa shan tillaabo oo degdeg ah oo ay tahay inaad qaado ka dib markaad furto furahaaga. Tani waxay hubin doontaa in qalabkaagu ammaan yahay oo si sax ah loo habeeyey.

Fiiro gaar ah: Maqaalkani wuxuu ku wajahan yahay guriga ama isticmaalayaasha xafiisyada yaryar ee ku cusub Cisco. Haddii aad tahay Injineer Cisco, waxaad heli doontaa dhammaan kuwan kuwo fudud. ^{(Note: This article is geared towards home or small office users who are new to Cisco switches. If you’re Cisco engineer, you’re going to find all of this very simplistic. )}

Talaabada 1 – Beddel Magaca Isticmaalaha^{(Change Default Username)} & Password -ka^(Password)

Sida cad tani waa tallaabada ugu horreysa iyo tan ugu muhiimsan. Markaad gasho furaha, balaadhi Maamulka^{(Administration)} ka dibna dhagsii Xisaabaadka Isticmaalaha^{(User Accounts)} .

Waxa ugu horreeya ee aad rabto inaad sameyso waa ku dar akoon isticmaale kale si aad markaas u tirtirto koontada isticmaalaha cisco ee asalka ah. Hubi^(Make) inaad si buuxda u siisay koontada cusub, taasoo ah Read/Write Management Access (15) ee luuqada Sisiko^(Cisco) . Isticmaal furaha sirta ah ee adag ka dibna ka bax koontada cisco oo gal adiga oo isticmaalaya akoonkaaga cusub. Waa inaad hadda awoodi kartaa inaad ka saarto akoontiga caadiga ah.

Waxa kale oo ay u badan tahay inay fikrad fiican tahay inaad awood u yeelatid Adeegga Soo-kabashada Password-^{(Password Recovery Service)} ka, waa haddii aad illowdo erayga sirta ah ee aad dejisay. Waxaad u baahan doontaa konsole gelitaanka qalabka si aad dib ugu dejiso erayga sirta ah.

Tallaabada 2 - U qoondee Ciwaanka IP-ga ee taagan

Sida caadiga ah, beddelku waa inuu lahaadaa ciwaanka IP-ga ee taagan mar hore, laakiin haddii kale, waa inaad gacanta ku dejisaa. Waxa kale oo ay noqon doontaa lagama maarmaan haddii aanad isticmaalayn aqoonsiga shabakadda 192.168.1. Si tan loo sameeyo, balaadhi Maamulka^{(Administration)} - Interface Maareynta^{(Management Interface)} - Interface IPV4^{(IPv4 Interface)} .

Dooro Static for IP Address Type oo geli ciwaanka IP-ga taagan Tani waxay aad u fududayn doontaa sidoo kale inaad maareyso beddelkaaga. Haddii aad taqaan albaabka caadiga ah ee shabakadaada, horay u soco oo ku dar taas sidoo kale hoosta Maamulka Default Gateway^{(Administrative Default Gateway)} .

Waxa kale oo xusid mudan in ciwaanka IP-ga loo qoondeeyay qaab-dhismeedka LAN- ga ah, taasoo la macno ah in aad geli karto aaladda adiga oo isticmaalaya ciwaanka IP-ga iyada oo aan loo eegin dekedda ay ku xidhan tahay furaha ilaa inta dekedahaasi loo qoondeeyay Maamulka VLAN^{( Management VLAN)} ee laga soo xushay xagga sare. . Sida caadiga ah, kani waa VLAN 1  oo dhammaan dekedaha waxay ku sugan yihiin VLAN 1 .

Tallaabada 3 - Cusbooneysii Firmware-ka

Maadaama routerkayga Netgear ee jaban uu ka hubin karo internetka^(Internet) si uu u cusbooneysiiyo software oo uu si toos ah u soo dejiyo oo u rakibo, waxaad u maleyneysaa in cisisco^(Cisco) beddelka qurxoon uu sidaas oo kale samayn karo. Laakiin waad qaldanaan lahayd! Waxay u badan tahay sababo ammaan dartood sababta ay tan u samayn waayeen, laakiin weli waa wax laga xumaado.

Si aad u cusboonaysiiso beddelka Sisiko^(Cisco) firmware-ka cusub, waa in aad ka soo dejisanaysaa mareegaha Cisco^(Cisco) ka bacdina aad gelisaa furaha. Intaa waxaa dheer, markaa waa inaad beddeshaa sawirka firfircoon ee nooca cusub ee firmware. Runtii aad ayaan u jeclahay sifadan maadaama ay bixiso xoogaa ilaalin ah haddii ay wax qaldamaan.

Si aad u hesho firmware-ka cusub, kaliya Google ka beddelka modelkaaga oo wata ereyga firmware dhamaadka. Tusaale ahaan, xaaladdeyda, waxaan kaliya Google d Cisco SG300-10 firmware.

Waxaan qori doonaa maqaal kale oo ku saabsan sida loo cusboonaysiiyo firmware-ka loogu talagalay router Cisco maadaama ay jiraan dhowr waxyaalood oo aad rabto inaad ka warqabto ka hor intaadan sidaas samayn.

Talaabada 4 – Habee Helitaanka Sugan

Talaabada xigta ee aan ku talinayo waxay awood u siinaysaa gelitaanka aaminka ah ee beddelkaaga. Haddii aad tahay khadka taliska, runtii waa inaad gebi ahaanba joojisaa GUI -ga shabakadda oo aad daartaa gelitaanka ^(GUI)SSH oo keliya. Si kastaba ha ahaatee, haddii aad u baahan tahay interface GUI , waa inaad ugu yaraan u dejisaa isticmaalka HTTPS halkii aad ka isticmaali lahayd HTTP.

Fiiri qoraaladaydii hore ee ku saabsanaa sida loogu suurtageliyo gelitaanka SSH ee beddelkaaga^{(how to enable SSH access for your switch)} ka dibna soo gal anoo isticmaalaya qalab sida putTTY. Xitaa ammaan dheeraad ah, waxaad ku shidi kartaa xaqiijinta furaha dadweynaha SSH^{(turn on public key authentication with SSH)} oo waxaad geli kartaa adiga oo isticmaalaya fure gaar ah. Waxa kale oo aad xaddidi kartaa gelitaanka is-dhexgalka maamulka adoo isticmaalaya cinwaanka IP-ga, kaas oo aan wax ku qori doono boostada mustaqbalka.

Talaabada 5- Koobi ka bixi Config Running^{(Copy Running Config)} to Startup Config

Waxa ugu dambeeya ee aad rabto in aad la qabsato marka aad isticmaalayso qalab kasta oo Cisco ah ayaa koobiyeynaya habaynta socodsiinta qaabaynta bilowga. Asal ahaan^(Basically) , dhammaan isbeddellada aad sameyso waxay ku kaydsan yihiin oo keliya RAM , taas oo macnaheedu yahay markaad dib u soo celiso qalabka, dhammaan goobaha ayaa lumin doona.

Si aad si joogto ah u badbaadiso qaabeynta, waa inaad nuqul ka sameysaa qaabeynta socodsiinta si aad u bilowdo qaabeynta, kaas oo kan dambe lagu keydiyo NVRAM ama ^(NVRAM)RAM aan kacsanayn . Si tan loo sameeyo, balaadhi Maamulka^{(Administration)} , ka dib Maareynta Faylka^{(File Management)} ka dibna dhagsii Isku- Copy/Save Configuration .

Dejinta caadiga ah waa inay ahaataa mid sax ah, markaa waxa kaliya ee ay tahay inaad sameyso waa guji Codso^(Apply) . Mar labaad, iska hubi inaad tan samayso mar kasta oo aad isbedel ku samayso beddelkaaga.

Kuwani waxay ahaayeen qaar ka mid ah tillaabooyinka qaabeynta aasaasiga ah ee aasaaska u ah helitaanka beddelkaada marka hore dejinta iyo sugidda. Waxaan dhawaan soo daabici doonaa casharro horumarsan oo ku saabsan dhinacyada kale ee beddelka. Haddii aad wax su'aalo ah qabtid, xor u noqo inaad faallo ka bixiso. Ku raaxayso!

Five Things You Should Do After Plugging in Your New Cisco Switch

I purchased a new Cisco SG300 10-port Gigabit Ethernet managed ѕwitch a few months back and it’s beеn one of the best investments for my small home nеtwork. Cisco switches have sо many features аnd optiоns that you cаn configurе to granularly control your network. In terms of security, their products stand оut.

With that said, it’s very interesting how unsecure a Cisco switch is fresh out of the box. When you plug it in, it either grabs an IP address from a DHCP server or assigns itself an IP address (usually 192.168.1.254) and uses cisco for the username and password. Yikes!

Since most networks use the 192.168.1.x network ID, your switch is completely accessible to anyone on the network. In this article, I’m going to talk about five immediate steps you should take after you plug in your switch. This will ensure your device is secure and configured properly.

Note: This article is geared towards home or small office users who are new to Cisco switches. If you’re Cisco engineer, you’re going to find all of this very simplistic. 

Step 1 – Change Default Username & Password

This is obviously the first step and the most important. Once you log into the switch, expand Administration and then click on User Accounts.

The first thing you’ll want to do is add another user account so that you can then delete the original cisco user account. Make sure that you give the new account full access, which is Read/Write Management Access (15) in Cisco parlance. Use a strong password and then log out of the cisco account and login using your new account. You should now be able to remove the default account.

It’s also probably a good idea to enable the Password Recovery Service, just in case you forget the password you set. You’ll need console access to the device to reset the password.

Step 2 – Assign a Static IP Address

By default, the switch should have a static IP address already, but if not, you should manually set it. It’ll also be necessary if you’re not using the 192.168.1 network ID. To do this, expand Administration – Management Interface – IPv4 Interface.

Choose Static for IP Address Type and enter in a static IP address. This will make it much easier to manage your switch also. If you know the default gateway for your network, go ahead and add that in also under Administrative Default Gateway.

It’s also worth noting that the IP address is assigned to a virtual LAN interface, meaning you can access the device using the IP address regardless of which port is connected on the switch as long as those ports are assigned to the Management VLAN selected at the top. By default, this is VLAN 1 and all ports are by default in VLAN 1.

Step 3 – Update the Firmware

Since my cheap Netgear router can check the Internet for a software update and automatically download and install it, you would think a fancy Cisco switch could do the same. But you’d be wrong! It’s probably for security reasons why they don’t do this, but it’s still annoying.

To update a Cisco switch with new firmware, you have to download it from the Cisco website and then upload it to the switch. In addition, you then have to change the active image to the new firmware version. I really do like this feature as it provides a bit of protection in case something goes wrong.

To find the new firmware, just Google your switch model with the word firmware at the end. For example, in my case, I just Googled Cisco SG300-10 firmware.

I’ll be writing up another article on how to upgrade the firmware for a Cisco router as there are a couple of things you want to be aware of before doing so.

Step 4 – Configure Secure Access

The next step I recommend is enabling only secure access to your switch. If you are a command line pro, you really should disable the web GUI altogether and turn on SSH access only. However, if you need the GUI interface, you should at least set it to use HTTPS rather than HTTP.

Check out my previous post on how to enable SSH access for your switch and then login using a tool like puTTY. For even more security, you can turn on public key authentication with SSH and login using a private key. You can also restrict access to the management interface by IP address, which I will write about in a future post.

Step 5 – Copy Running Config to Startup Config

The last thing you want to get used to when using any Cisco device is copying the running config to the startup config. Basically, all the changes you make are only stored in RAM, which means when you reboot the device, all the settings will be lost.

In order to permanently save the configuration, you have to copy the running config to startup config, the latter of which is stored in NVRAM or non-volatile RAM. To do this, expand Administration, then File Management and then click on Copy/Save Configuration.

The default settings should be correct, so all you have to do is click on Apply. Again, make sure you do this anytime you make any kind of change to your switch.

Those were some really basic configuration steps for getting your switch initially setup and secured. I’ll be posting more advanced tutorials soon on other aspects of the switch. If you have any questions, feel free to comment. Enjoy!

Related posts

• Aaladda Jilitaanka Isku-xidhka Xirmooyinka Baakidhka ee Cisco Packet iyo beddelaadkeeda bilaashka ah

• Router vs Switch vs Hub vs Modem vs Access Point vs Gateway

• Ma u baahan tahay Modem iyo Router Internet leh ISP cusub?

• Xakameyn gelitaanka Sisiko beddelka iyadoo ku saleysan cinwaanka IP-ga

• Laqabsiga Internetka iyo Baraha Bulshada

• Waa maxay Localhost iyo sidee ayaad u isticmaali kartaa?

• Isku-xidhka Peer to Peer (P2P) iyo Wadaagista Faylka ayaa la sharaxay

• HDG wuxuu sharxayaa: Waa maxay RFID & maxaa loo isticmaali karaa?

• Ma ku xidhi kartaa router-ka Wireless-ka, laakiin kuma xidhi kara internetka?

• Sida loo bilaabo Windows 10 ee Habka Badbaado leh ee Shabakadda

• Sida loo Helo kanaalka Wi-Fi ee ugu Wanaagsan Windows, Mac iyo Linux

• Dib-u-eegis Buugaag - Isku xidhka Guriga Dhammaan-in-Hal-Miis Tixraaca Dummies

• Sida loogu xidho diiwaanka fog ee Windows 7 iyo 10

• 8 Siyaabo Fudud Oo La Samayn Karo Oo Lagu Cilaado Isku Xidhka Shabakada

• Dib u eegis buug - Isku xirka Guriga Wireless ee Dummies

• Sida loogu isticmaalo Xbox Networking gudaha Windows 10, si loo hubiyo xidhiidhka aad la leedahay Xbox Live

• Ku qas Windows 7 inuu isticmaalo Xidhiidhka Fiilada ee Wireless-ka

• Sida Ilaalinta Dabagalka ee Firefox ee la xoojiyey ay uga joojiso shabakadaha inay ku basaasaan adiga

• Sida loo hagaajiyo "Ma haysatid fasax aad ugu dirto qaatahan"

• Hagaaji "Daaqadaha Iskuma Xidhi Karaan Shabakaddan" Khaladka