Core switch ports should be configured based on their role, typically as access or routed ports, with proper VLAN assignment, speed, duplex, and security settings.

Port Modes

1. Access Ports:

• Used to connect end devices like servers or workstations.
• Assign the port to a specific VLAN using switchport access vlan <VLAN_ID> .
• Ensure the port is in access mode: switchport mode access. 2. Routed Ports (Layer 3 Ports):
• Used for inter-VLAN routing or connecting to other routers/switches.
• Disable switching on the port: no switchport.
• Assign an IP address directly to the port: ip address <IP> <Subnet> . 3. SVI (Switched Virtual Interface):
• Provides a virtual Layer 3 interface for a VLAN.
• Can aggregate bandwidth from multiple access ports in the same VLAN.
• Useful for connecting servers or multiple hosts without dedicating a physical routed port .

Speed and Duplex Settings

• Configure port speed and duplex explicitly to avoid negotiation issues: speed 1000 and duplex full for 1Gbps connections .
• For 10Gbps or higher, ensure the correct SFP or module is installed and supported by the switch .

Security and Best Practices

• Enable port security to limit MAC addresses if connecting critical devices.
• Disable unused ports and place them in a separate VLAN or shutdown mode.
• Use HSRP or VRRP for redundancy and high availability in core networks .

Management Access

• Configure a management VLAN and assign an IP to the SVI for remote access.
• Console or Telnet/SSH access can be used for initial configuration .
• Ensure strong admin passwords and restrict access to trusted hosts.

Summary

When configuring core switch ports:

• Determine the port role (access, routed, or SVI).
• Assign VLANs or IP addresses appropriately.
• Set speed and duplex to match connected devices.
• Implement security and redundancy measures.
• Use management interfaces for monitoring and configuration. Following these guidelines ensures optimal performance, security, and reliability for your core network infrastructure.