Simple (hopefully) Cisco Catalyst 4506 IP Address Question.

Please bear with me, it's been a while since I've configured a switch (3+ years).  I'm trying to use the Cisco Network Assistant to configure a switch, but am running to some issues.  I am supposed to put an IP Address in for the switch, but as far as I know I don't have one configured and don't know where to configure one for the switch.  The switch is a standalone and I have the following blade configuration...

Blade 1 - Supervisor Engine - No uplinks in 1/1 or 1/2
Blade 2 - 24 port 10/100/1000 Base - T
Blade 3 - 48 port 10/100 Base - T
Blade 4 - 48 port 10/100 Base - T
Blade 5 - 48 port 10/100 Base - T
Blade 6 - Empty

What I have configured (in my test environment) is port 2/1 is conntected to a router that's connected to my T1 connection to the Internet.  Ports 2/1-2, 5/25-36 are vlan 100, 2/3-24, 3/1-48, 4/1-48, 5/1-24 are vlan 200, and 5/37-48 is vlan 300.

The Cisco Network assistant wants  me to put in an IP address (which is confusing because I thought CDP was independant of that) but no matter what address I put in, it never finds my switch.  So my question is this...

Do I have to use the uplinks on blade 1 to assign the switches IP address or can I use port 2/1 on the gigabit ethernet blade? Do I assign vlan1 and IP address and use that? If so, what are the ios commands to do this (if it's even possible)?

rite, this is quite easy.

you need to set a range of ports to be in vlan200

#conf t
#int range FastEthernet0/1 - 20   (substitute for your info)
#switchport mode access
#switchport access vlan200
#exit

into this you need to connect your corporate hosts and the inside port of the pix

next set your vlan100 hosts

#conf t
#int range FastEthernet0/21 - 35   (substitute for your info)
#switchport mode access
#switchport access vlan100
#exit

into this you need to connect both your external pix interface & internal router port

last is your vlan200 hosts

#conf t
#int range FastEthernet0/36 - 48   (substitute for your info)
#switchport mode access
#switchport access vlan300
#exit

into this you connect nothing.


for the syslog you need to specify a logging host.

this is done by

#logging host [ip]

or logging-server one of the two.

as for MAC address security, its fairly easy, but would need to have a quick look on cisco.com for the exact commands as have not done it for a bit.

this should be enough to get you on your way!

cheers,

peter