en config t hostname MESON3 enable secret class no ip domain-lookup banner motd # ************************************************ !!!ACCESO SOLAMENTE A PERSONAL AUTORIZADO!!!

************************************************ # line con 0 password cisco login logging synchronous exec-timeout 40 exit line vty 0 15 password cisco login logging synchronous exec-timeout 40 exit exit copy r s ////////CONFIGURAR INTERFAZ DE ADMINISTRACIN///////// config t vlan 15 exit interface vlan 15 ip address 192.168.1.10 255.255.255.0 no shutdown exit interface fa0/1 switchport mode access switchport access vlan 15 end ************************************************ Modo de configuracin de lnea: (config) line vty 0 15 (config-line)#transport input telnet o (config-line)#transport input all.

/////////CONFIGURAR EL SWITCH COMO SERVIDOR SSH//////////// config t hostname SW1 ip domain-name MYDOMAIN.COM crypto key generate rsa ip ssh version 2 ip ssh {timeout segundos | authentication-retries nmero}. line vty 0 15 transport input ssh ******PARA ELIMINAR EL PAR DE CLAVES RSA********* config t crypto key zeroize rsa LUEGO DEL COMANDO ANTERIOR (El servidor SSH se deshabilita automticamente) ////////CONFIGURACIN DE SNOOPING DE DHCP////////////////// config t ip dhcp snooping ip dhcp snooping vlan number 15 (PARA LAS VLAN) interface fa0/1 ip dhcp snooping trust (DEFINIR PUERTOS CONFIABLES) //////////CONFIGURACIN DE SEGURIDAD DE PUERTO//////////////// config t interface fa0/1 switchport mode access switchport port-security ****Direcciones MAC seguras estticas:************ config t interface fa0/1 switchport port-security mac-address [direccin MAC] ********DIRECCIONES MAC SIN MODOFICACIN********** switchport port-security mac-address sticky switchport port-security mac-address sticky [direccin MAC]

/////////CONFIGURACION DE SEGURIDAD DE PUERTO SIN MODIFICACIN///// config t interface fa0/1 switchport mode access switchport port-security switchport port-security maximum 50 switchport port-security mac-address sticky switchport port-security mac-address sticky [direccin MAC] /////////CONFIGURACION DE SEGURIDAD DE PUERTO DINMICA////////// config t interface fa0/1 switchport mode access switchport port-security