An access switch requires basic setup including hostname, management IP, VLANs, port configurations, security settings, and optional advanced features like SSH and NetFlow.

Basic Setup

1. Hostname and Domain Name: Assign a unique hostname to identify the switch in the network and configure a domain name if needed for SSH access (Cisco switches) to ensure secure management connections .
2. Management VLAN and IP Address: Create a management VLAN (commonly VLAN 1 or a dedicated VLAN like VLAN 99) and assign an IP address and subnet mask to enable remote management via Telnet or SSH .
3. Default Gateway: Configure the default gateway to allow the switch to communicate with devices outside its local subnet .

Port and VLAN Configuration

1. Access Ports: Assign switch ports to specific VLANs to segment network traffic. Use commands like switchport mode access and switchport access vlan <VLAN_ID> for each port .
2. Trunk Ports: For uplinks to other switches, configure trunk ports using switchport mode trunk and, if necessary, specify encapsulation with switchport trunk encapsulation dot1q .
3. Port Security: Enable MAC address filtering and limit the number of devices per port to prevent unauthorized access .

Security and Access Control

1. Passwords: Set enable passwords, console passwords, and VTY line passwords. Activate password encryption to protect credentials .
2. SSH Access: Generate RSA keys and enable SSH for secure remote management. Verify SSH functionality with show ip ssh .
3. Disable Unused Ports: Shut down unused interfaces to reduce attack surfaces .

Advanced Configurations (Optional)

1. Spanning Tree Protocol (STP): Configure STP to prevent loops in the network.
2. NetFlow or Monitoring: Enable NetFlow or similar monitoring tools to track traffic patterns and performance .
3. Energy Efficiency: Enable Energy Efficient Ethernet (EEE) if supported to reduce power consumption .

Saving Configuration

After completing all configurations, save the running configuration to the startup configuration to ensure changes persist after a reboot using write memory or copy running-config startup-config . By following these steps, an access switch can be properly configured to provide secure, efficient, and scalable connectivity for end-user devices in a network environment.