console# copy tftp://<IP>/<nom fichier> running-config

console# copy running-config startup-config

console>enable
console# configure
(config)# crypto key generate rsa
(config)# crypto key generate dsa
(config)# ip ssh server
(config)# exit
console# copy running-config startup-config

console#show ip ssh

SSH Server enabled. Port: 22
Protocol Levels: Versions 1 and 2.
RSA key was generated.
DSA key was generated.
SSH Public Key Authentication is disabled.

Active Incoming Sessions.

Ip Address User Name Idle Time Session Time
--------------- --------------- ------------ ------------
192.168.10.20 boss 00:00:00 00:06:06

console#

console(config)#username boss password toto level 15

enable

configure

# Setup your basic vLAN database
vlan database
vlan XX
exit

# a few optional / misc config settings
sntp unicast client enable
sntp server time.nist.gov
clock timezone -6 minutes 0

# Give your switch an IP and assign it to your vLAN above
ip address 10.10.10.10 255.255.255.0
ip default-gateway 10.10.10.1
ip address vlan XX
ip name-server 192.168.1.100
ip name-server 192.168.1.101
# Optional Enable http/https server to connect via web-GUI
ip https server

# Set a Management Username / Password
username “xxxxxxx” password xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx level 15 encrypted

# Pick a port to Set as the Management Port
# Configured to connect to a Cisco Catalyst 3560G
interface ethernet 1/g1
description ’802.1Q C3560G’
spanning-tree disable
switchport mode general
switchport general pvid XX
switchport general allowed vlan add XX
switchport general allowed vlan remove 1
exit

exit

If you’re happy with your settings so far, go ahead and save:

copy running-config startup-config

no switchport mode

no spanning-tree portfast