# 8. Switch Config

Borderless switched network

* Hierarchical
  * Access Layer
  * Distribution Layer
  * Core Layer
* Traffic flow in Switch
  * ingress
  * egress

Switch MAC Table

* learn from source MAC address&#x20;
  * source MAC and physical port binding

Type of Switch

* Fixed
* Modular
* Stackable

Switch Environment

* Collision Domain
* full duplex / half duplex
* Port density
* Port speed&#x20;
* auto-MDIX

Switch Operation

* POST
* load boot loader
* the boot loader locates and loads a default IOS&#x20;
* IOS loads the startup configuration

Switch Remote Management

* IP address, subnet mask and the default gateway. &#x20;

Switch Security Management

* Secure Shell (SSH) - Port 22
* Configuration
  * Configure the hostname
  * Configure the IP domain name.&#x20;
  * Generate RSA key pairs&#x20;
    * A minimum modulus size of 1,024 bits is required.
  * Configure user authentication.&#x20;
  * Configure the vty lines.&#x20;
* enabling SSH version 2

Switch Threat

* MAC Address Flooding&#x20;

Port security

* MAC Addresses
  * Static secure (key in manually)
  * Dynamic secure
  * Sticky secure (save in config file)
* Maximum number
* Violation Mode
  * Protect&#x20;
  * Restrict (notification)
  * Shutdown
* aging time&#x20;
  * absolute
  * inactivity

![](https://1515939446-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-M_AEyEcue-ZdfPiP9yt%2F-MdCexnR34CoTzlV4W5s%2F-MdCgnHmhOArEsHw3aUq%2Fimage.png?alt=media\&token=a5248464-0bb3-4c34-943d-8c622cef818f)
