You need this information from your network administrator before you complete the setup program:

• Encryption level and Master key (Cisco IOS XE 17.10.1 and later)

• Switch IP address

• Subnet mask (IP netmask)

• Default gateway (router)

• Enable secret password

• Enable password

• SSH password

Complete the following steps to create an initial configuration for the switch with the setup program:

1. Enter Yes at these two prompts:

   
   Would you like to enter the initial configuration dialog? [yes/no]: yes
   At any point you may enter a question mark '?' for help.
   Use ctrl-c to abort configuration dialog at any prompt.
   Default settings are in square brackets '[]'.
   Basic management setup configures only enough connectivity
   for management of the system, extended setup will ask you
   to configure each interface on the system.
   Would you like to enter basic management setup? [yes/no]: yes
   

2. Enter a hostname for the switch, and press Return.

   On a command switch, the hostname is limited to 28 characters; on a member switch, it is limited to 31 characters. Do not use -n , where n is a number, as the last character in a hostname for any switch.

   
   Enter host name [Switch]: host_name
   

3. Enter an enable secret password, and press Return.

   The password can be from 1 to 25 alphanumeric characters, can start with a number, is case sensitive, allows spaces, but ignores leading spaces. The secret password is encrypted, and the enable password is in plain text.

   
   Enter enable secret: secret_password
   

4. Enter an enable password, and press Return.

   
   Enter enable password: enable_password
   

5. Enter a virtual terminal password, and press Return.

   The password can be from 1 to 25 alphanumeric characters, is case sensitive, allows spaces, but ignores leading spaces.

   
   Enter virtual terminal password: terminal-password
   

6. (Optional) Configure Simple Network Management Protocol (SNMP) by responding to the prompts. You can also configure SNMP later through the CLI, Device Manager, or the Cisco Network Assistant application. To configure SNMP later, enter no .

   
   Configure SNMP Network Management? [no]: no
   

7. Enter the interface name (physical interface or VLAN name) of the interface that connects to the management network, and press Return . For this release, always use vlan1 as that interface.

   Note

   The switch will transmit a DHCP discover message on the vlan1 interface. If the switch is connected to the network before the CLI initial setup process is started, the interface may have been assigned a dynamic IP address. It is all right if you do not see an IP address on the vlan1 interface. This process allows you set a static IP address for management, which will over write the dynamically assigned IP address.

   Current interface summary
   Any interface listed with OK? value "NO" does not have a valid configuration
   Interface IP-Address OK? Method Status Protocol
   Vlan1 unassigned NO unset up down
   GigabitEthernet1/1 unassigned YES unset down down
   GigabitEthernet1/2 unassigned YES unset down down
   GigabitEthernet1/3 unassigned YES unset down down
   GigabitEthernet1/4 unassigned YES unset down down
   GigabitEthernet1/5 unassigned YES unset down down
   GigabitEthernet1/6 unassigned YES unset down down
   GigabitEthernet1/7 unassigned YES unset down down
   GigabitEthernet1/8 unassigned YES unset down down
   GigabitEthernet1/9 unassigned YES unset down down
   GigabitEthernet1/10 unassigned YES unset down down
   Enter interface name used to connect to the
   management network from the above interface summary: vlan1
   Enter interface name used to connect to the
   management network from the above interface summary: vlan1
   

8. Configure the interface by entering the switch IP address and subnet mask and pressing Return. The IP address and subnet masks shown here are examples.

   Configuring interface Vlan1:
   Configure IP on this interface? [yes]:
   IP address for this interface: 10.1.1.2
   Subnet mask for this interface [255.255.255.0] :
   Class A network is 10.0.0.0, 8 subnet bits; mask is /24

9. This summary appears:

   The following configuration command script was created:
   hostname ie3300
   enable secret 9 $9$rkqtjJhIkZyANU$Ib4nfuxrpHBi.lixF.0Ir94k9XWYsW3nyF7Glmc6lkc
   enable password cisco
   line vty 0 15
   password cisco
   no snmp-server
   !!
   interface Vlan1
   no shutdown
   ip address 10.1.1.2 255.255.255.0
   !
   interface GigabitEthernet1/1
   !
   interface GigabitEthernet1/2
   !
   interface GigabitEthernet1/3
   !
   interface GigabitEthernet1/4
   !
   interface GigabitEthernet1/5
   !
   interface GigabitEthernet1/6
   !
   interface GigabitEthernet1/7
   !
   interface GigabitEthernet1/8
   !
   interface GigabitEthernet1/9
   !
   interface GigabitEthernet1/10
   !
   end

   After you complete the setup program, the switch can run the default configuration that you created. If you want to change this configuration or want to perform other management tasks, use one of these tools:

   • Command-line interface (CLI)

   To use the CLI, enter commands at the Switch> prompt through the console port by using a terminal emulation program. For configuration information, see the switch Cisco Catalyst IE3x00 Rugged Switch software configuration guides.

For enchanced security, sensitive information such as passwords needs to be encrypted. The configuration dialog includes a System Security Configuration Dialog that allows you to set the password encryption level. Encryption levels include type-6 and type-7 encryption. It is recommended that you enable both types.

• Type-6 uses Advanced Encryption Standard (AES) for encrypting the passwords. Type-6 password encryption and decryption is coupled with a master-key that you enter. You must remember the master key because it cannot be recovered.

• The master key is the password/key used to encrypt all other keys in the switch configuration with the use of an AES symmetric cipher. The master key is not stored in the switch configuration and cannot be seen or obtained in any way while connected to the switch. Once configured, the master key is used to encrypt any existing or new keys in the switch configuration. Keys are not encrypted until you issue the password encryption aes command.

• Type-7 passwords are an obfuscation of the original plain text password. It is based on Vigenere Cipher and prevents someone seeing the real passwords in a configuration.

You can use the setup program to set the password encryption level on both a new switch and a switch that is already configured. For a new switch, see Initial Configuration - Type-6 Encryption or Initial Configuration - Type-7 Encryption. To configure system security settings without running the initial setup, see Setting the Password Encryption Level.