David,
This is a matter of preference rather than any set rules:
Normally, you would set a management IP address on interface vlan 1
SW1(config)# interface vlan 1
SW1(config-if )# ip address 172.16.10.220 255.255.255.0
SW1(config-if )# no shutdown
I would set a username/password database and enable password:
SW1(config)#username Ronnie password Cisco123
SW1(config)#enable password cisco321
Configure for SSH Access:
SW1(config)#ip domain-name itpro.tv
SW1(config)#ip default-gateway 172.16.10.1
SW1(config)# crypto key generate rsa 1024
SW1(config)# ip ssh version 2
Protect vty and console access:
SW1(config)# line vty 0 15
SW1(config-line)#login local
SW1(config-line)#transport input ssh
SW1(config-line)#exec-timeout 10 0
SW1(config)#logging synchronous
SW1(config)# line con 0
SW1(config-line)#login local
SW1(config-line)#exec-timeout 10 0
SW1(config)#logging synchronous
Configure for VTP and set switch in VTP mode Client or Transparent (later to be set to client before installation)
Configure Trunks,
Set Native VLANS
Set Unused ports to administratively disabled
Set Access Ports to Switchport mode Access
set Access Port to Switchport nonegotiate
Verify Native VLAN is set to same as VTP domain
Save configuration
SW1(config)# copy run start
Cordially,
Ronnie Wong
Edutainer Manager, ITProTV
*if the post above has answered the question, please mark as solved.
**All "answers" and responses are offered "as is" and my opinion. There is no implied service, support, or guarantee by ITProTV.