---
title: "Creating a Base Configuration for a Cisco IOS Switch: A Step-by-Step Guide"
description: Learn how to set up a base configuration for network switches. Secure, optimize, and enable remote access with our step-by-step guide.
---

[![looking-point_LogoWhite _ Presidio-1](https://www.lookingpoint.com/hubfs/looking-point_LogoWhite%20_%20Presidio-1.svg) ![LOOKINGPOINT](https://www.lookingpoint.com/hs-fs/hubfs/Theme%20Oct%202019/images/logo@mobile.png?width=444&height=86&name=logo@mobile.png) ](https://www-lookingpoint-com.sandbox.hs-sites.com/-temporary-slug-c10ae2f5-f23e-43f2-8214-f73884fb09ae)

- [Solutions](https://www.lookingpoint.com) 
    - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration)
    - [Security ](https://www.lookingpoint.com/it-solutions-security)
    - [Networking ](https://www.lookingpoint.com/it-solutions-networking)
    - [Data Center ](https://www.lookingpoint.com/data-center)
    - [Cloud](https://www.lookingpoint.com/cloud)
    - [Managed Services](https://www.lookingpoint.com/it-support-services)
    - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela)
- [Services](https://www.lookingpoint.com/en/solutions-services) 
    - [Assess and Design ](https://www.lookingpoint.com/assess-and-design-it-solutions)
    - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions)
    - [Support](https://www.lookingpoint.com/it-support-services)
    - [Wireless Surveys Assessments](https://www.lookingpoint.com/en-us/wireless-surveys-assessments)
    - [Project Management ](https://www.lookingpoint.com/project-management)
    - [Integration Center](https://www.lookingpoint.com/integration-services)
    - [Lifecycle Support](https://www.lookingpoint.com/it-lifecycle-support)
    - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area)
    - [Customer Success](https://www.lookingpoint.com/services-customer-success)
- [Partners](https://www.lookingpoint.com/partner)
- [Blog](https://www.lookingpoint.com/blog)

- [Solutions](https://www.lookingpoint.com) 
    - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration)
    - [Security ](https://www.lookingpoint.com/it-solutions-security)
    - [Networking ](https://www.lookingpoint.com/it-solutions-networking)
    - [Data Center ](https://www.lookingpoint.com/data-center)
    - [Cloud](https://www.lookingpoint.com/cloud)
    - [Managed Services](https://www.lookingpoint.com/it-support-services)
- [Services](https://www.lookingpoint.com/en/solutions-services) 
    - [Assess and Design](https://www.lookingpoint.com/assess-and-design-it-solutions)
    - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions)
    - [Support](https://www.lookingpoint.com/it-support-services)
    - [Wireless Survey Assessment](https://www.lookingpoint.com/en-us/wireless-surveys-assessments)
    - [Project Management ](https://www.lookingpoint.com/project-management)
    - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela)
    - [Integration Center](https://www.lookingpoint.com/integration-services)
    - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area)
    - [Customer Success](https://www.lookingpoint.com/services-customer-success)
- [Partners](https://www.lookingpoint.com/partner)
- [Blog](https://www.lookingpoint.com/blog)
- [+1 925-566-3480](tel:+1%20925-566-3480)
- [DO NOT SHARE OR SELL MY PERSONAL INFORMATION](https://na1.hs-data-privacy.com/request/TrvvEe3VpnlESmYolHn3xw)

- [![phone@2x](https://www.lookingpoint.com/hubfs/Theme%20Oct%202019/fonts/phone@2x.png) +1 925-566-3480 ](tel:+19255663480)
- [![user@2x](https://www.lookingpoint.com/hubfs/Theme%20Oct%202019/fonts/user@2x.png) Acela Portal ](https://my.lookingpoint.com/)
- [Free Consultation](https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch#get-free-popup)

 Let’s Connect

[Home](https://www.lookingpoint.com/) [Blog](https://www.lookingpoint.com/blog) Creating a Base Configuration for a Cisco IOS Switch: A Step-by-Step Guide

# Blog

 Jan  29

Creating a Base Configuration for a Cisco IOS Switch: A Step-by-Step Guide

 Posted by [Kenny Wong](https://www.lookingpoint.com/blog/author/kenny-wong)

[**0](https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch#comments-listing)

** Share

- [**](https://www.facebook.com/sharer/sharer.php?u=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch&title=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide&picture=&description=Learn%20how%20to%20set%20up%20a%20base%20configuration%20for%20network%20switches.%20Secure,%20optimize,%20and%20enable%20remote%20access%20with%20our%20step-by-step%20guide.)
- [**](https://twitter.com/intent/tweet?source=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch&text=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide)
- [**](https://plus.google.com/share?url=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch)
- [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch&title=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide&summary=Learn%20how%20to%20set%20up%20a%20base%20configuration%20for%20network%20switches.%20Secure,%20optimize,%20and%20enable%20remote%20access%20with%20our%20step-by-step%20guide.)
- [**](mailto:?subject=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide&body=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide%20https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch)

[security](https://www.lookingpoint.com/blog/topic/security) [cisco](https://www.lookingpoint.com/blog/topic/cisco) [Network](https://www.lookingpoint.com/blog/topic/network) [LAN](https://www.lookingpoint.com/blog/topic/lan) [VLAN](https://www.lookingpoint.com/blog/topic/vlan) [SSH](https://www.lookingpoint.com/blog/topic/ssh) [Password](https://www.lookingpoint.com/blog/topic/password) [Base Configuration](https://www.lookingpoint.com/blog/topic/base-configuration) [Cisco IOS Switch](https://www.lookingpoint.com/blog/topic/cisco-ios-switch) [Network Efficiency](https://www.lookingpoint.com/blog/topic/network-efficiency) [Remote Management](https://www.lookingpoint.com/blog/topic/remote-management) [Console Cable](https://www.lookingpoint.com/blog/topic/console-cable)

In networking, switches play a critical role in connecting devices and managing network traffic within a local area network (LAN). When you deploy a new switch, it's important to configure it properly to ensure optimal performance, security, and functionality. This guide will walk you through the essential steps for setting up a base configuration for a network switch.

**Why Configure a Switch?**

Switches come with factory settings that allow for basic functionality, but to leverage their full potential, you need to apply custom configurations. Proper configuration ensures:

- **Security:** Protect your network from unauthorized access and attacks.
- **Network Efficiency:** Optimize traffic management and reduce bottlenecks.
- **Control:** Assign VLANs, QoS (Quality of Service), and more.
- **Remote Management:** Enable management features like SNMP, SSH, and web interfaces.

 

**Step 1: Access the Switch**

Before diving into the configuration, you need to connect to the switch. The most common methods of accessing the switch are:

- **Console Cable:** Connect directly to the switch via the console port using a console cable. You'll need a terminal emulator like PuTTY, Tera Term, or HyperTerminal to interact with the switch.
- **SSH (Secure Shell):** If the switch is already configured with an IP address and SSH access, you can log in remotely via SSH.
- **Web Interface (Optional):** Many modern switches have a web-based management interface. You can access it by connecting the switch to a network and entering its IP address in a browser.

 

**Step 2: Basic Switch Configuration**

Now that you have access to the switch, let's start with some basic configuration steps.

**2.1. Set the Hostname**

The hostname is used to identify the switch in the network. To set the hostname:

Switch> enable

Switch# configure terminal

Switch(config)# hostname Core-Switch

Core-Switch(config)#

This sets the switch's name to "Core-Switch," making it easier to identify in your network. Pick something that makes sense for you or create a naming convention if you have multiple switches and multiple sites. Example SFO-SW-01 or NYC-SW-01.

**2.2. Set the Enable Password**

The enable password is used to access privileged commands. Required for SSH. Set a strong password to secure the device.

Core-Switch(config)# enable secret your_password_here

**2.3. Set Console Password**

To prevent unauthorized access via the console port, set a password for console access:

Core-Switch(config)# line con 0

Core-Switch(config-line)# password console_password_here

Core-Switch(config-line)# login

Core-Switch(config-line)# exit

Note: No user has been assigned.

**2.4. Set Virtual Terminal (VTY) Password**

If you're accessing the switch remotely via Telnet or SSH, set a password for the virtual terminal lines:

Core-Switch(config)# line vty 0 4

Core-Switch(config-line)# password vty_password_here

Core-Switch(config-line)# login

Core-Switch(config-line)# exit

Note: No user has been assigned.

**2.5. Set an IP Address on a VLAN Interface**

To enable remote management of the switch, assign an IP address to the VLAN interface (usually VLAN 1 by default). VLAN 1 is not recommended, but is used in this scenario. You also need to configure a subnet mask and default gateway.

Core-Switch(config)# interface vlan 1

Core-Switch(config-if)# ip address 192.168.1.10 255.255.255.0

Core-Switch(config-if)# no shutdown

Core-Switch(config-if)# exit

Next, set the default gateway:

Core-Switch(config)# ip default-gateway 192.168.1.1

This ensures the switch can communicate with devices outside of its subnet.

 

**Step 3: Secure Remote Access (SSH)**

For secure remote management, it's recommended to configure SSH instead of Telnet. To enable SSH:

**3.1. Generate RSA Key Pair**

Core-Switch(config)# crypto key generate rsa

When prompted, choose a modulus size (e.g., 1024 bits). This will generate the RSA keys for SSH encryption.

**3.2. Enable SSH on the VTY Lines**

Core-Switch(config)# line vty 0 15

Core-Switch(config-line)# transport input ssh

Core-Switch(config-line)# login local

Core-Switch(config-line)# exit

Note: Local User account is required.

**3.3. Create a Local User for SSH Access**

Create a local username and password for SSH login:

Core-Switch(config)# username admin privilege 15 secret admin_password_here

This creates a user named "admin" with full administrative privileges.

 

**Step 4: Configure VLANs**

Virtual Local Area Networks (VLANs) are essential for segmenting your network. By default, all ports on a switch belong to VLAN 1. You can create additional VLANs as needed.

**4.1. Create a New VLAN**

Core-Switch(config)# vlan 10

Core-Switch(config-vlan)# name Guest

Core-Switch(config-vlan)# exit

This creates VLAN 10 and names it "Guest." You can create more VLANs as required.

**4.2. Assign Ports to VLANs**

Assign switch ports to specific VLANs:

Core-Switch(config)# interface range Gi1/0/1 - 24

Core-Switch(config-if-range)# switchport mode access

Core-Switch(config-if-range)# switchport access vlan 10

Core-Switch(config-if-range)# exit

This configuration assigns ports 1 to 24 to VLAN 10 (Guest).

 

**Step 5: Save the Configuration**

After making the necessary changes, save the configuration to avoid losing them after a reboot:

Core-Switch# write memory

Alternatively, you can use:

Core-Switch# copy running-config startup-config

This command ensures that the current configuration is saved to the startup configuration file.

 

**Step 6: Verify Your Configuration**

Once your configuration is complete, verify that the changes are applied successfully.

**6.1. Verify the Hostname**

Core-Switch# show running-config | include hostname

**6.2. Verify VLAN Configuration**

Core-Switch# show vlan brief

**6.3. Verify Interface Status**

Core-Switch# show ip interface brief

**6.4. Verify SSH Configuration**

Core-Switch# show ip ssh

These commands will help you check the status of your configuration and troubleshoot if necessary.

 

**Conclusion**

Setting up a base configuration for a network switch is a fundamental skill for network administrators. By following these steps, you can ensure that your switch is properly configured with a hostname, passwords for security, IP addressing, remote access, and VLANs. This basic setup can serve as a foundation for more advanced configurations such as IP routing, access-list, port security, QoS, or network monitoring.

Always remember to back up your configuration and periodically review it to ensure the switch is operating securely and efficiently. Note: Remember your passwords.

As always if you have any questions on your network security and would like to schedule a free consultation with us, please reach out to us at [sales@lookingpoint.com](mailto:sales@lookingpoint.com) and we’ll be happy to help!

*[![Contact Us](https://no-cache.hubspot.com/cta/default/2215854/7814218f-8d49-4d01-9a8c-095c00c0b08d.png)](https://cta-redirect.hubspot.com/cta/redirect/2215854/7814218f-8d49-4d01-9a8c-095c00c0b08d)*

 

 Written By:

Kenny Wong, Engineer

 SHARE:

- [**](https://www.facebook.com/sharer/sharer.php?u=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch&title=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide&picture=&description=Learn%20how%20to%20set%20up%20a%20base%20configuration%20for%20network%20switches.%20Secure,%20optimize,%20and%20enable%20remote%20access%20with%20our%20step-by-step%20guide.)
- [**](https://twitter.com/intent/tweet?source=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch&text=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide)
- [**](https://plus.google.com/share?url=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch)
- [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch&title=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide&summary=Learn%20how%20to%20set%20up%20a%20base%20configuration%20for%20network%20switches.%20Secure,%20optimize,%20and%20enable%20remote%20access%20with%20our%20step-by-step%20guide.)
- [**](mailto:?subject=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide&body=Creating%20a%20Base%20Configuration%20for%20a%20Cisco%20IOS%20Switch:%20A%20Step-by-Step%20Guide%20https://www.lookingpoint.com/blog/creating-a-base-configuration-for-a-cisco-ios-switch)

### Topics

- [cisco](https://www.lookingpoint.com/blog/topic/cisco)
- [security](https://www.lookingpoint.com/blog/topic/security)
- [cybersecurity](https://www.lookingpoint.com/blog/topic/cybersecurity)
- [Cisco ISE](https://www.lookingpoint.com/blog/topic/cisco-ise)
- [collaboration](https://www.lookingpoint.com/blog/topic/collaboration)
- [ISE](https://www.lookingpoint.com/blog/topic/ise)
- [webex](https://www.lookingpoint.com/blog/topic/webex)
- [IT Solutions](https://www.lookingpoint.com/blog/topic/it-solutions)
- [cisco webex](https://www.lookingpoint.com/blog/topic/cisco-webex)
- [SD-WAN](https://www.lookingpoint.com/blog/topic/sd-wan)

### Latest Tweets **

### subscribe to our blog

## Get New Unique Posts

![looking-point_LogoWhite _ Presidio-1](https://www.lookingpoint.com/hubfs/looking-point_LogoWhite%20_%20Presidio-1.svg)

 391 Taylor Blvd. Suite 120 Pleasant Hill, California 94523

[Call Us +1 925-566-3480](tel:+19255663480)

[sales@lookingpoint.com](mailto:sales@lookingpoint.com)

- [**](https://www.facebook.com/lookingpoint?fref=ts)
- [**](https://twitter.com/lookingpoint)
- [**](https://www.linkedin.com/company/lookingpoint)
- [**](https://www.instagram.com/lookingpoint/)

 SOLUTIONS

- [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration)
- [ Security](https://www.lookingpoint.com/it-solutions-security)
- [Networking ](https://www.lookingpoint.com/it-solutions-networking)
- [Cloud](https://www.lookingpoint.com/cloud)
- [Data Center ](https://www.lookingpoint.com/data-center)
- [Project Management ](https://www.lookingpoint.com/project-management)
- [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela)
- [Wireless Surveys Assessments](https://www.lookingpoint.com/en-us/wireless-surveys-assessments)

 MANAGED SERVICES

- [Assess and Design](https://www.lookingpoint.com/assess-and-design-it-solutions)
- [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions)
- [Support](https://www.lookingpoint.com/it-support-services)
- [Integration Center](https://www.lookingpoint.com/integration-services)
- [Lifecycle Support](https://www.lookingpoint.com/it-lifecycle-support)
- [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area)
- [Customer Success](https://www.lookingpoint.com/services-customer-success)

 COMPANY

- [Contact Us](https://www.lookingpoint.com/contact-us)
- [Career](https://www.lookingpoint.com/career)
- [About Us](https://www.lookingpoint.com/about-us)
- [ FAQ](https://www.lookingpoint.com/faq)
- [ Partners](https://www.lookingpoint.com/partner)
- [Blog](https://www.lookingpoint.com/blog)
- [Privacy Policy](https://www.lookingpoint.com/privacy-policy)
- [DO NOT SELL OR SHARE MY PERSONAL INFORMATION](https://na1.hs-data-privacy.com/request/TrvvEe3VpnlESmYolHn3xw)

 GET IN TOUCH

 Join our mailing list to stay up to date and get notices about our new releases!

 Looking Point Inc. 2026

 Cookie Settings