Question : Cisco 2950 Config/New Build

Hello Experts,

Need help configuring my Cisco 2950 out of the Box. The needs are:

(1) I have a 192.168.0.X network that the switch will be connecting to, Ip assigned is 192.168.1.252
(2) Need all (24) ports active for use on the network
(3) Ports 10,11,12 need to be used for my VOIP phones
(4) The 2nd Gigabyte port is to be used as the uplink port to another 2950 Switch.

I have done some of the configuration but would like an expert to port what should be done as to review and compare:

Config below:

Current configuration : 1356 bytes                                  
!
version 12.1            
no service pad              
service timestamps debug uptime                              
service timestamps log uptime                            
no service password-encryption                              
!
hostname            
!
enable secret 5 $1$ke2y$WFGkXrbgCi0/ZV.HuAxtW.                                              
enable password                      
!
ip subnet-zero              
!
!
spanning-tree mode pvst                      
no spanning-tree optimize bpdu transmission                                          
spanning-tree extend system-id                              
!
!
!
!
interface FastEthernet0/1                        
!
interface FastEthernet0/2                        
!
interface FastEthernet0/3                        
!
interface FastEthernet0/4                        
!
interface FastEthernet0/5                        
!
interface FastEthernet0/6                        
!
interface FastEthernet0/7                        
!
interface FastEthernet0/8                        
!
interface FastEthernet0/9                        
!
interface FastEthernet0/10                          
!
interface FastEthernet0/11                          
!
interface FastEthernet0/12                          
!
interface FastEthernet0/13                          
!
interface FastEthernet0/14                          
!
interface FastEthernet0/15                          
!
interface FastEthernet0/16                          
!
interface FastEthernet0/17                          
!
interface FastEthernet0/18                          
!
interface FastEthernet0/19                          
!
interface FastEthernet0/20                          
!
interface FastEthernet0/21                          
!
interface FastEthernet0/22                          
!
interface FastEthernet0/23                          
!
interface FastEthernet0/24                          
!
interface GigabitEthernet0/1                            
!
interface GigabitEthernet0/2                            
 flowcontrol  off                
!
interface Vlan1              
 ip address 192.168.0.252 255.255.255.0                                      
 no ip route-cache                  
!
ip http server              
snmp-server community                                
!
line con 0          
 exec-timeout 0 0                
line vty 0 4            
 password XXXXXX              
 login      
line vty 5 15            
 password XXXx              
 login      
!
!
end  


           ^                    

Answer : Cisco 2950 Config/New Build

Typically you will want to segregate your VoIP traffic from the other by use of a VLAN and with the 2950 you will have to make use of VTP to have both Vlans active. This is of course assuming the phones are used only as phones not using the data jack as well on the phone to plug a pc into. Otherwise you need other stuff.


vtp mode transparent
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
vlan 2
!
interface FastEthernet0/1
 switchport access vlan 1
 switchport mode access
!
interface FastEthernet0/2
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/3
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/4
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/5
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/6
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/7
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/8
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/9
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/10
 switchport access vlan 2
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/11
 switchport access vlan 2
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/12
 switchport access vlan 2
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/13
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/14
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/15
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/16
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/17
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/18
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/19
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/20
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/21
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/22
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/23
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/24
 switchport access vlan 1
 switchport mode access
 spanning-tree portfast
!
interface Vlan1
 ip address 192.168.0.252 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip route-cache
 !
interface Vlan2
 ip address VoIP IP Range
 no ip route-cache
!
ip default-gateway



If the phone also had a plugged in pc on it
then you would add somehting like this

mls qos map cos-dscp 0 8 16 26 32 46 48 56
mls qos min-reserve 5 170
mls qos min-reserve 6 85
mls qos min-reserve 7 51
mls qos min-reserve 8 34
mls qos

Then on interfaces 10 , 11 and 12

switchport access vlan 1
 switchport mode dynamic desirable
 switchport voice vlan 2
 duplex full
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape  10  0  0  0
 mls qos trust device cisco-phone
 mls qos trust cos
 no snmp trap link-status
 auto qos voip cisco-phone
 spanning-tree portfast