IPv4 Address Configuration on Cisco IOS Catalyst Switch

Lesson Contents

To allow remote access to a Cisco IOS Catalyst switch with protocols like telnet or SSH, we need to configure an IP address on the switch. You also need this if you want to use any network management tools to monitor your switch.

Most switches have a lot of physical interfaces so where are we going to configure an IP address? Instead of using a physical interface, we often use a virtual interface called a SVI (Switch Virtual Interface). Here’s how to visualize this:

cisco switch virtual interface vlan 1

The IP address is configured on the SVI interface. All physical interfaces within the same VLAN will be able to communicate with this SVI interface.

The default VLAN on your Cisco Catalyst switch will be VLAN 1, all interfaces belong to this VLAN by default. This means that if you create a SVI interface for VLAN 1 and put an IP address on it, everyone will be able to reach it. It is possible to use access-lists to restrict which IP addresses are allowed but it’s better to create a separate VLAN for management. Here’s an illustration:

switch management vlan 20

On the left side, we have two hosts in VLAN 10. These will be able to communicate with each other since they are in the same VLAN. On the right side, we see a computer that is only used for management. This computer is connected to interface FastEthernet 0/3 and there is an SVI interface with IP address

This management computer will be able to exchange IP packets with our switch. This is a nice and secure method to access the switch only from computers that are supposed to.


Let me show you how to configure the SVI interface. First, you have to make sure you created the VLAN in the VLAN database:

Now we can create a new SVI interface:

Make sure you don’t forget the no shutdown command. By default, all SVI interfaces are shut. Make sure you add one of the physical interfaces to VLAN 20:

That’s all you have to do. Let’s see if it’s working.


Let’s check if the SVI interface is up and running:

This is looking good. I will connect a computer to the FastEthernet0/3 interface of my switch to see if I can ping the switch. I also configured a static IP address in the same subnet as our switch:

Let’s try that ping:

It’s working. All devices in VLAN 20 will be able to reach our switch.

In this lesson, you have learned how to configure an SVI interface with a separate management VLAN so that you can access the switch remotely. We will use this later for remote access through telnet/SSH.

Forum Replies

Its been awhile and I just wanted to refresh memory on how initially configure the switch. Particularly L2 switch. Most are L3 these days but nevertheless. This was the only article related I was able to find and I feel a couple of things are missing, particularly those that I had questions about. Thats: default gateway probably should be included, showing also difference for L3 config as is in the lesson, but also for L2 which is different because its, well, just l2 switch;

so on L2 switch how do we assign management IP address? Can we even create a SVI on pur

Hello again Vadim, nice to see you here!

No need to apologize about asking questions, that’s what we’re here for, to answer them as best we can!

The only way you can access the switch using SSH or Telnet is via an IP address that has been assigned to an SVI. An L2 switch does indeed have SVIs and you can actually configure

Ask a question or join the discussion by visiting our Community Forum

  • Trending Now
  • Foundational Courses
  • Data Science
  • Practice Problem
  • Machine Learning
  • System Design
  • DevOps Tutorial
  • CCNA Tutorial for Beginners

Basics of Computer Networking

  • Network and Communication
  • LAN Full Form
  • What is OSI Model? - Layers of OSI Model
  • TCP/IP Model
  • How Data Encapsulation and De-encapsulation Works?

Components of Computer Networking

  • NIC Full Form
  • What is a network switch, and how does it work?
  • What is Network Hub and How it Works?
  • Introduction of a Router
  • Types of Ethernet Cable

Transport Layer

  • Transport Layer responsibilities
  • Introduction of Ports in Computers
  • What is Transmission Control Protocol (TCP)?
  • TCP 3-Way Handshake Process
  • User Datagram Protocol (UDP)

Network Layer

  • Introduction and IPv4 Datagram Header
  • Difference between Unicast, Broadcast and Multicast in Computer Network
  • Structure and Types of IP Address

IPv4 Addressing

  • What is IPv4?
  • Role of Subnet Mask
  • Introduction of Classful IP Addressing
  • Introduction To Subnetting
  • Classless Inter Domain Routing (CIDR)
  • Introduction of Variable Length Subnet Mask (VLSM)
  • Private IP Addresses in Networking

Data Link Layer

  • What is Ethernet?
  • What is MAC Address?
  • What is an IP Address?

Physical Layer

  • Ethernet Frame Format
  • What is Power Over Ethernet (POE)?

Cisco Networking Devices

  • Network Devices (Hub, Repeater, Bridge, Switch, Router, Gateways and Brouter)
  • Collision Detection in CSMA/CD
  • Collision Domain and Broadcast Domain in Computer Network
  • Difference between layer-2 and layer-3 switches

Life of a Packet

  • Working of Domain Name System (DNS) Server
  • Configuring DHCP and Web Server in Cisco Packet Tracer
  • How Address Resolution Protocol (ARP) works?

Router and Switch Basic Configuration

  • Cisco Router basic commands

Configure IP Address for Interface in Cisco Switches

  • Transmission Modes in Computer Networks (Simplex, Half-Duplex and Full-Duplex)
  • Link Layer Discovery Protocol (LLDP)
  • What is Cisco Discovery Protocol (CDP)?

Cisco Device Management

  • What are the different memories used in a CISCO router?
  • Router Boot Sequence
  • Recovering password in Cisco Routers
  • Catalyst Switch Password Reset in Cisco
  • Process of Backing Up and Restoring the Cisco IOS
  • File Transfer Protocol (FTP)
  • Difference between FTP and TFTP
  • Backing up Cisco IOS Router image
  • Steps Involves in Cisco Router Configuration Backups

Basic Network Trouble shooting

  • Troubleshooting Questions on OS and Networking asked in Cloud based Interview
  • Internet Control Message Protocol (ICMP)
  • What is Ping?
  • traceroute Command in Linux with Examples

IPv4 Routing

  • What is IP Routing?
  • Routing Tables in Computer Network
  • Difference between Static and Dynamic Routing
  • What is Floating Static Route ?
  • How to Add a Static Route to Windows Routing Table?

Dynamic Routing Protocols

  • Routing Protocol Code
  • Difference between IGRP and BGP
  • Administrative Distance (AD) and Autonomous System (AS)
  • Configuring a Loopback Interface in Cisco
  • What is a Loopback Address?
  • What is Passive-Interface Command Behavior in RIP, EIGRP & OSPF?

Interior Gateway Protocols

  • Routing Information Protocol (RIP)
  • Configuring RIP Default Information Originate in Cisco
  • Configuring RIP Versions 1 and 2 in Cisco
  • EIGRP fundamentals
  • Features of Enhanced Interior Gateway Routing Protocol (EIGRP)
  • Types of EIGRP Packet in Computer Network
  • How to Configure EIGRP Summarization in Cisco?

Open Shortest Path First(OSPF)

  • Open shortest path first (OSPF) router roles and configuration
  • Difference between EIGRP and OSPF
  • Bandwidth Allocation Control Protocol (BACP)
  • Open shortest path first (OSPF) - Set 2
  • OSPF Implementation
  • Explain OSPF DR/BDR Election?
  • Configuring OSPF Passive Interface in Cisco
  • Configuring OSPF Default Route Propagation
  • Configuring OSPF Maximum Paths
  • Configuring OSPF Route Summarization in Cisco
  • Configuring OSPF Network Types in Cisco

Virtual Local Area Network(VLAN)

  • Three-Layer Hierarchical Model in Cisco
  • 2 - Tier And 3 - Tier Architecture in Networking
  • Spine-Leaf Architecture
  • Virtual LAN (VLAN)
  • Configuring and Verifying VLANs in Cisco
  • Access and Trunk Ports
  • What is ISL(Inter-Switch Link)?
  • Inter-Switch Link (ISL) and IEEE 802.1Q
  • Access Ports (Data and Voice) in CCNA
  • Dynamic Trunking Protocol (DTP)
  • VLAN Trunking Protocol (VTP)
  • What are the VTP Modes?

Inter-V LAN Routing

  • Inter VLAN Routing by Layer 3 Switch
  • Configuration of Router on a stick

Dynamic Host Control Protocol(DHCP)

  • Difference between DNS and DHCP
  • How to Configure DHCP Server on a Cisco Router?
  • DHCP Relay Agent in Computer Network
  • What is APIPA (Automatic Private IP Addressing)?

Hot Standby Routing Protocol(HSRP)

  • Redundant Link problems in Computer Network
  • Firsthop Redundancy Protocol
  • Hot Standby Router Protocol (HSRP)

Spanning Tree Protocol(STP)

  • Introduction of Spanning Tree Protocol (STP)
  • What is Bridge in Computer Network - Types, Uses, Functions & Differences
  • Working of Spanning Tree Protocol (STP)
  • Root Bridge Election in Spanning Tree Protocol
  • How Spanning Tree Protocol (STP) Select Designated Port?
  • Types of Spanning Tree Protocol (STP)
  • Rapid Spanning Tree Protocol
  • Configuring Spanning Tree Protocol Portfast

Ethernet Channel

  • EtherChannel in Computer Network
  • Configure, Verify and Troubleshoot (Layer 2/Layer 3) EtherChannel
  • Link Aggregation Control Protocol

Switch Security

  • DHCP Snooping
  • Wireless Security | Set 1
  • Port Security in Computer Network
  • Configuring Port Security on Cisco IOS Switch

Access Control List(ACL)

  • Standard Access-List
  • Static NAT Configuration in Cisco
  • Dynamic NAT Configuration in Cisco
  • Extended Access-List
  • Reflexive Access-List

IPv6 Addressing and Routing

  • What is IPv6?
  • Internet Protocol version 6 (IPv6)
  • IPv6 EUI-64 (Extended Unique Identifier)
  • Differences between IPv4 and IPv6
  • Global Unicast Address in CCNA
  • Link Local Address
  • What is IPv6 Address Planning?
  • How to Configure IPv6 on CISCO Router?
  • What is IPv6 Stateless Address Autoconfiguration ?
  • RPL (IPv6 Routing protocol)

Wide Area Network

  • WAN Full Form
  • What is VPN and How It Works?
  • Overview of Wireless Wide Area Network (WWAN)
  • Multi Protocol Label Switching (MPLS)
  • Point-to-Point Protocol (PPP) Suite

Security Concepts

  • Types of Cyber Attacks
  • Types of Network Firewall
  • Introduction of Firewall in Computer Network
  • Intrusion Detection System (IDS)
  • Intrusion Prevention System (IPS)
  • Difference Between Symmetric and Asymmetric Key Encryption
  • HTTP Full Form
  • Explain the Working of HTTPS
  • What is Attack Mitigation?

Network Device Security

  • TELNET and SSH in Cisco devices
  • How to configure SSH Client in Linux ?
  • AAA (Authentication, Authorization and Accounting) configuration (locally)
  • RADIUS Protocol
  • TACACS+ Protocol
  • Network Time Protocol (NTP)
  • Configure and Verify NTP Operating in Client and Server Mode

Network Device Management

  • What is Syslog server and its working ?
  • Command-Line Tools and Utilities For Network Management in Linux
  • Simple Network Management Protocol (SNMP)
  • Overview of SNMPv3

Wireless Networking

  • Wired and Wireless Networking
  • What is a Wireless Access Point?
  • Cisco Wireless Architecture and AP Modes
  • Physical Infrastructure Connections of WLAN Components
  • WiFi and its Amendments
  • Types of Wireless Security Encryption

To configure an IP Address on a switch interface, first, we must change the interface from a layer 2 interface to a layer 3 interface. A point to note is that to provide an IP Address to a switch interface, the switch first must be a Multilayer Switch and all ports of an MLS is layer 2 by default. There are two ways to configure an IP address to a switch interface that is given below:

Static Configuration:

Consider a Multilayer Switch:

Cisco Switch

First, we need to check whether an interface is a layer 2 port or a layer 3 port.

Cisco Switch CLI Configuration

Switch port: Enabled means that the port is currently a layer 2 port. To change the interface from a layer 2 switch to a layer 3 switch:

Providing IP address to an interface:

Cisco Switch CLI Configuration

Checking if an IP address has been provided to the interface

Cisco Switch CLI Configuration

Dynamic Configuration:

Consider this topology:

Multilayer Switch with Cisco Router

First, we again make the fa0/1 port of Switch0 a layer 3 port.

Then we provide interface Fa0/0 and configure a DHCP pool for the network on router0.

Checking DHCP pool status:

Checking DHCP pool status

After that, we go to Switch’s interface fa0/1 and execute the command:

Checking DHCP pool status

Simulation of the DORA Process:

Please login to comment..., similar reads.

  • CCNA IP Addressing

Improve your Coding Skills with Practice


What kind of Experience do you want to share?

Configuring a Routed Port

Step 1 : Configure IP routing.

Switch(config)#ip routing

Step 2 : Create a routed port.

Switch(config-if)#no switchport

Step 3 : Assign an IP address to the routed port.

Switch(config-if)#ip address ip-address mask

Step 4 : Configure the IP routing protocol if needed.

Switch(config)#router ip_routing_protocol <options>

To configure a routed port, perform these steps.

Steps for Inter-VLAN Routing Configuration

© 2006 Cisco Systems, Inc. Implementing Inter-VLAN Routing 4-29

Continue reading here: FIB Table Updates

Was this article helpful?

Recommended Books

  • Cisco Networking All-in-One For Dummies
  • Networking For Dummies
  • Networking All-in-One Desk Reference For Dummies
  • Networking Fundamentals
  • Networking Bible

Related Posts

  • Routed Ports on a Multilayer Switch Cont
  • CUCM Path Selection - Cisco Unified
  • Call Routing - Cisco Unified
  • IP Virtual Reassembly - Classic Firewall
  • IP Prefix Lists - Routing and Switching
  • Threats to and Attacks on Routers

Readers' Questions

What is the purpose of a switch routed port?
The purpose of a switch routed port is to enable the switch to perform layer 3 routing functions, allowing it to route traffic between different subnets or VLANs. It provides a point of connectivity for routing protocols and allows the switch to act as a router, providing inter-VLAN routing within the network infrastructure. This allows for more efficient and scalable network designs as it reduces the need for separate physical routers.
How to change port on router?
To change the port on your router, you need to access the router's administration page. Here are the general steps to follow: Connect your computer to the router using an ethernet cable or join the router's network wirelessly. Open a web browser and enter the router's IP address in the address bar. The default IP address is generally printed on a sticker at the back or bottom of the router. Common IP addresses are,, or Press Enter to access the router's administration page. Enter the username and password to log in. If you haven't changed these before, try using the default login credentials; they are typically mentioned in the router's user manual or on the manufacturer's website. Once logged in, navigate to the settings or port forwarding section of the router's administration page. Look for an option to change or configure the ports. The specific location and wording may vary depending on the router manufacturer and model. Enter the desired port number or range of ports for the specific application or service you want to change. Save the changes and restart the router for the new port configuration to take effect. Remember that changing ports on your router can have implications on network performance or security, so ensure you understand the specific requirements and consequences before making any changes.
How to configure routed port on cisco 3850 sw?
ith Log into the switch using a terminal emulation program like PuTTY. Enter privilege mode by typing "enable" Type "config t" to enter global configuration mode Configure an interface by typing "interface [interface_number]" Set the interface to become a routed port by typing "no switchport" Configure the IP address of the interface by typing "ip address [ip_address] [subnet_mask]" Enable the interface by typing "no shutdown" Save the configuration changes by typing "write memory"
How to configure an interface as a routed port?
Connect the router's interface to the physical network. Assign an IP address to the interface: interface fastethernet 0/1 ip address 255.255.255. 0 Configure a subnet mask associated with the IP address: mask 255.255.255. 0 Activate the interface: no shutdown Configure the interface as a routed port: ip routing Save the configuration: wr mem
How to config routed port cisco?
Log into the Cisco router using the command line interface (CLI). Enter the global configuration mode by typing the command, configure terminal. Create a routed port for the router with the interface command. For example, interface FastEthernet0/0. Assign an IP address to the routed port. To do this, type the command ip address [IP address] [subnet mask]. Assign a description to the routed port by typing the command description [description]. Enable the routed port. To do this, type the command no shutdown. Exit the global configuration mode by typing the command end. Test the connection by using the ping command.
How to assighn an ip address to a router using packet tracer?
Open Cisco Packet Tracer. Add a router to the workspace. To do this, click on the router icon on the left side of the window. Place the router in the workspace by dragging and dropping it into the desired location. Right-click on the router and select “Configure”. In the “Router Configuration” window, select the “Interfaces” tab. In the “Interface Configuration” window, select the specific interface and click on the “IP Address” tab. Enter the desired IP address and subnet mask for this interface and click on “Apply”. The assigned IP address is now configured for this interface.
How to find switch ip address cisco?
Switch IP addresses can be found a few different ways. Access the command line by connecting your computer directly to the switch with an Ethernet cable and then typing in the command “show ip int brief”. This command will display the switch IP, mask and any other IPs assigned to the switch. Access the command line by connecting to the switch over Telnet or SSH and then typing in the command “show ip int brief”. Use the “show cdp neighbors” command to find the IP address of the switch if it is connected to another device or switch. Access the web-based GUI of the switch and navigate to the “Device Management” page, which will display the switch IP address.
How to configure switch in packet tracer?
Connect the switch to your network: To begin, connect the switch to your network by connecting an Ethernet cable from a router to a port on the switch. Configure basic settings: To configure the basic settings, you will need to open a command line interface (CLI). Through the CLI, you can enter the basic settings, including the hostname, IP address, default gateway, and Subnet Mask. Configure VLANs: VLANs (Virtual Local Area Networks) help you segment your network into different subnetworks. To configure VLANs, you will need to enter a command to define each VLAN and assign ports to them. Configure Spanning Tree Protocol: Spanning Tree Protocol (STP) helps prevent loops in your network by shutting down redundant links. To configure STP, you will need to enter the required commands. Configure Port Security: Port security helps you ensure that only authorized users have access to specific ports. To configure port security, you will need to enable port security and enter command to specify the MAC addresses that are allowed to access a particular port. Enable inter-VLAN routing: If you need to send traffic between different VLANs, you will need to enable inter-VLAN routing. To do this, you will need to enter a command in the CLI that enables the router to route traffic between different VLANs. Save and Verify the Configuration: After you have entered all the required commands, you will need to save the configuration using the “write” command. To verify that everything has been configured correctly, you can use the “show” command to view the settings.
How to allow router to change packet from various switches in cisco?
Configure IP Routing protocols on the router, such as RIP, EIGRP, or OSPF. Configure the router interfaces with IP addresses and masks and add them to the corresponding routing protocols. Configure routing protocol authentication, if needed. Connect the router to the switches and configure the switch ports as trunk ports. Configure the VLANs on the switches and assign each VLAN to the appropriate trunk links. Configure IP addressing for each VLAN on the switches and apply the corresponding IP subnets to the trunk links. Configure the router to advertise the connected VLAN networks through the routing protocols to the other switches.
How to program a cisco switch?
Set up the switch's IP address, subnet mask, and default gateway. Establish secure access to the switch by setting passwords, enabling SSH, and setting up an SSH client. Configure the switch ports, including setting the speeds and duplex settings. Set up VLANs, port security, and other layer 2 features. Configure Spanning Tree Protocol (STP) and other network protocols. Set up additional layer 3 features such as routing and access control lists (ACLs). Choose an appropriate firmware version and upgrade if necessary. Back up the switch’s configuration periodically.
How to assign ip address to router in cisco packet tracer?
From the topology tab, select the router you wish to assign an IP address to. Choose the CLI tab and enter “enable”. Enter the router’s privileged mode by typing “configure terminal”. Type “interface <interface name>” to enter the interface configuration mode. Type “ip address < IP address> <subnet mask>” to assign the interface an IP address. Type “no shutdown” to enable the interface and assign the IP address. To save your changes, type “write memory” and hit enter.
How to set ip address in switch cisco packet tracer?
Launch the Cisco Packet Tracer program and open the network you would like to configure. Click on ‘Tools’ and then select ‘Command Line Interface’. Enter ‘enable’ to enter in privileged mode. Enter ‘configure terminal’ to enter in configuration mode. Enter ‘interface FastEthernet 0/1’ to enter the specific interface. Enter ‘ip address’ to set the IP address for the interface. Enter ‘no shut’ to enable the interface. Enter ‘exit’ to return to global configuration mode. Enter ‘write memory’ to save the settings. Enter ‘end’ and then ‘exit’ to exit the CLI.
How to assign an ip address to a switch in packet tracer?
Right-click the switch in Packet Tracer and select “General” from the drop-down menu. Select the “IP address” field and enter an IP address in the format “x.x.x.x/y”. Click “OK” to save the changes. Connect the switch to the router it will be communicating with. Right-click the router in Packet Tracer and select “General” from the drop-down menu. Select the “IP address” field and enter an IP address in the same format as the one assigned to the switch. Click “OK” to save the changes and establish a connection between the switch and the router.
How to open ports on cisco router?
First, log into the router using a Telnet or SSH client. Enter privileged mode by typing in “enable” and pressing Enter. Enter the configuration mode by typing in “configure terminal”. Enter the command “ip access-list extended [name]”, where [name] is the name of the policy you’d like to create. Enter the command “permit tcp [host IP] [host port] any” to open the port. Enter the command “end” to exit the configuration mode. Enter the command “write memory” to save the configuration.
How to assign an ip address to a switch?
Connect a console cable to the switch and open a terminal emulator (e.g. HyperTerminal). Enter privileged mode by typing “enable” and enter your password (if necessary). Type “configure terminal” to enter global configuration mode. Assign an interface IP address to the switch by typing “interface vlan [id]”. Now type “ip address [ip address] [subnet mask]” and hit enter. Enter “exit” until you reach privileged mode. Type “write memory” to save the configuration.
How to open port on cisco router?
Connect to the Cisco router command line interface. Enter the following command: # configure terminal Set the access-list, IP address, and port number. Enter the following command: access-list [access-list-name] permit ip [IP adddress] [port number] Enter the following command: interface [interface-name] Enter the following command: ip access-group [access-list-name] in Enter the following command: end Enter the following command: copy running-config startup-config Disconnect from the Cisco router command line interface.
How to configure ports with ip address on a switch?
To configure ports with IP addresses on a switch, you need to use the commands "int {number}" and "ip address {address} {subnet mask}" respectively. For example, if you want to configure port number 2 with the IP address and the subnet mask, you would use the following commands:
Where to write no swistchport Cisco command on switch?
The "no switchport" command in Cisco is used to remove a layer 2 switchport configuration and enable layer 3 routing on a Cisco switch interface. This command is typically used on a Layer 2 switch interface to convert it into a Layer 3 interface or a routed interface. To write the "no switchport" command on a Cisco switch, you need to enter global configuration mode and then interface configuration mode for the specific interface. Here are the steps to write the command: Enter privileged EXEC mode on the switch by typing: `enable` Enter global configuration mode by typing: `configure terminal` Identify the interface where you want to configure the "no switchport" command. For example, if you want to configure it on interface GigabitEthernet1/0/1, type: `interface GigabitEthernet1/0/ 1` Enter interface configuration mode for the specific interface by typing: `interface configuration` Write the "no switchport" command: `no switchport` To exit the interface configuration mode, type: `exit` To exit global configuration mode, type: `exit` Make sure to save your configuration by typing `write memory` or `copy running-config startup-config`, so the changes are saved and applied after a reboot.
What command makes a mls port act as a routed port?
To make a MLS (Multilayer Switch) port act as a routed port, you need to use the "no switchport" command on that particular interface. This command removes the layer 2 switchport functionality and converts the port into a layer 3 routed port. Here is the command syntax: ``` switch(config)# interface <port_number> switch(config-if)# no switchport ``` Replace `<port_number>` with the corresponding interface number you wish to convert to a routed port.

The Cisco Learning Network

assign ip address to port cisco switch

hkshirsagar asked a question.

can nebdy tell d the commands to assign static IP on a switch

guess we do use Mac address here

a request plzz create a video on this

or if its already created

share the link

  • Enterprise Certifications Community

assign ip address to port cisco switch

As you may know there are layer 2 and layer 3 switches. A layer 2 switch only does layer 2 fowarding, as such it doesn't have any additional ip interfaces. On a layer 2 switch the ip address is instead assigned to the vlan interface:

interface vlan 1

ip address

* Note on a L2 switch you can assign an ip to any vlan you want (vlan 1, vlan 2, vlan 4000). You can only assign an ip address to one vlan at a time on a l2 switch. If you configured an ip on a vlan and then try to assign an ip to another vlan...the switch will shut down the first vlan and bring up the second vlan interface)*

On a L3 switch you can have multiple ip interfances. Unlike a L2 switch, an L3 switch can have static ip addresses on multiple vlan interfaces (configuration is the same as the above example). In addtion unlike L2 swithes a L3 switch can have a static ip address assigned to any one of its fastethernet (fa0/1) or gig ethernet ports (gi0/1).

description *** Assigning an ip address to a physical fast ethernet port on the switch***

ip address

description *** Assigning an ip address to the virtual (vlan) interface on the switch ***

ip address

description *** Assigning an ip address to another virtual (vlan) interface on the switch ***

Note that although you can assign multiple ip addresses on a L3 switche's physical (e.g. fa0/1 fa0/2 gi0/1) or virtual (vlan 1, vlan 3, vlan 3000, or a loopback lo1, lo2,lo3), all of the ip address must be in different networks. If subnetting is used, the interfaces belonging to the same switch must have a different subnet mask.

ip address

description *** This interface is on the network ***

ip address

description *** This interface is on the network***

ip address 192.168.9

description *** This interface is on the network ***

  Basically, to assign a static IP address, use 'ip address', you can do this for a VLAN in a L2 or L3 switches. In MLS, you can convert a port to L3 port using 'no switchport' then configure an IP address on that physical port.

  On the other hand, if you are talking about static route, you can only configure it on L3 switches as L2 switches can't route.

Ahhhh Angela,

Thanks for pointing that out....before you can assign an ip to a port, you must disable switching on the port with the "no switchport" sub interface command.

Thanks again, it was an oversight on my part.

You are very welcome, I also have many times when others pointed out something I did think of. It's great to study with everybody, happy learner

assign ip address to port cisco switch


Hello Josph

Will you please right syntax how to run command " no switch port" as i tried but not success..

assign ip address to port cisco switch

Yeah you may want to say SVI or VLAN interface for the newer people even though we know what you are talking about, Angela

Angela wrote:

See this link


assign ip address to port cisco switch

if you want to create an IP address for management then just simply use a SVI:

yeah well if he wanna create a management VLAN then its the way,,

His question was doubtfull so i gave him the way to create routed port on Layer 3

yes indeed the question was ambiguous .

For assigning  Static ip to a Switch,

Assign IP to VLAN 1 by command


Switch#conf ter

Enter configuration commands, one per line.  End with CNTL/Z.

Switch(config) #interfac

Switch(config) #interface vlan 1

Switch(config-if) #ip address

Switch(config-if) #no shut


%LINK-5-CHANGED: Interface Vlan1, changed state to up


%SYS-5-CONFIG_I: Configured from console by console

assign ip address to port cisco switch


Hello Rishi

I just would like to add my to cents..

Using vlan 1 is never a good idea. Just create a vlan for managemnt of your network devices - specially if you are talking about a production network.

Best regards

assign ip address to port cisco switch


There are two ways to configuring a switch with an IP address, and this is done only under the interface configuration:

Assign a static IP with:                                    ip address ip_address network_mask

Dynamically obtain IP from DHCP service:    ip address dhcp

Let's clarify on which interface type can we apply the IP configuration.

As you read the previously replies, there are two types of switches: ones that have only Layer 2 capabilities - forwarding frames,  or others that have both, the L2 and L3  - switching frames and packets.

Note: That the process of "routing" on a multilayer switch is called packet switching as it is performed on hardware - different from what a software router does.

Differences between a switch port and an interface:

- a switch port has no intelligence and only perform L2 capability by forwarding frames based on physical MAC addresses. A switch port is like a bridge - forwarding from one layer to the same layer, so as a result you cannot assign an virtual IP to a switch port - it has only a physical MAC address;

- in exchange, an interface, has its own intelligence where encapsulate frames from L2 to upper layer into packets. So because an interface is a multilayer capable it must have a physical MAC address and could also have a virtual L3 address as an IP.

So, because a L2 switch cannot have an virtual IP address on none of its switch ports, Cisco introduce the concept of SVI (Switch Virtual Interface), where you can create them and have an IPs assigned to them. The SVI represent the switch ports on the belonging VLAN and where it acts as a default gateway for the VLAN, performing in this way a L3 capabilities.

Configuring a static IP on a L2 switch capability:

SW(config) #interface vlan1

SW(config-if) #ip address ip_address network_mask

Note: To have the SVI become in up state, you must have at least one switch ports that belongs to the same VLAN group where the SVI point, to be up also.

Now, on a L3 switch you can configure the IP address in both cases:

- you can also create a SVI and assign an address to it, same as the L2 switch;

- or you can directly assign the IP address to the interface:

But, there is a small "trick" here. Remember that a L3 switch can have a switch port or an interface.

How to turn a switch port into an interface and vice-versa on a L3 switch?

By using the commands "switchport" or "no switchport"

SW(config) #interface f0/1

SW(config-if) #no switchport

Switch models restrictions:

- on some L2 switch models you cannot create more then one SVI;

- on some L3 switch models not all interfaces has L2 capabilities. Is were the "switchport" command is not allowed.

Also you cannot turn a router interface into a switchport unless you have a L2\L3 module.

Sorry, have to correct:

- on L2 switch models you cannot create more then one SVI and usually this is configured for the management VLAN;

Related Questions

Trending articles.

  • Cisco Packet Tracer: Software de Simulación para Redes
  • 200-301 CCNA Study Materials
  • Packet Tracer Labs
  • CCIE/CCDE: Book your Lab/Practical Exam
  • Continuing Education Credits Automation

If you encounter a technical issue on the site, please open a support case .

Communities: Chinese | Japanese | Korean

Cisco.com © Copyright 2024 Cisco, Inc. All Rights Reserved. Privacy Statement Terms & Conditions Cookie Policy Trademarks

ASM Educational Center

  • DOD 8570 MANDATE

Cisco CCNA How to configure Multi-Layer Switch

mulli-Layer Switch

Posted 05-2-2016 filed under Cisco CCNA .

Layer 3 Switch

Now that we have seen how a “router on a stick” works, we can introduce the Layer 3 switch.  In the “router on a stick” topology, what if we could bring the router inside the switch?   In essence, what if we could give the switch (a layer 2 device) the capability to route (a Layer 3 function).  This is what a Layer 3 switch is capable of doing.

There are three points we need to remember:

Switch#Switch#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)#ip routing


Switch(config)#Switch(config)#conf t

Switch(config)#interface fa0/5

Switch(config-if)#no switchport


%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to down

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to up

Switch(config-if)#ip address

Switch(config)#vlan 10Switch(config-vlan)#name Management


Switch(config)#int vlan 10

%LINK-5-CHANGED: Interface Vlan10, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up

Switch(config-if)#ip add Switch(config-if)#end Switch# %SYS-5-CONFIG_I: Configured from console by console

Receive our Cisco CCNA Packet Tracer! Get our complete tutorial in PDF

We can check for the routed ports by looking at the routing table on the Layer 3 switch.  We use the same command we did on a router, namely sh ip route .

Switch#sh ip route

Codes: C – connected, S – static, I – IGRP, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2, E – EGP

i – IS-IS, L1 – IS-IS level-1, L2 – IS-IS level-2, ia – IS-IS inter area

* – candidate default, U – per-user static route, o – ODR

P – periodic downloaded static route

Gateway of last resort is not set is subnetted, 1 subnets C is directly connected, Vlan10 C is directly connected, FastEthernet0/5 Switch# Let’s see the Layer 3 switch in action.  Build the following topology:

mulli-Layer Switch

We start by creating the VLAN’s and assign ports to them, just like a L2 switch.


Switch#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

Switch(config)#vlan 2

Switch(config-vlan)#name Sales

Switch(config-vlan)#vlan 3

Switch(config-vlan)#name EGR

Switch(config)#interface range fa0/1 – 2


Switch(config-if-range)#switchport mode

Switch(config-if-range)#switchport mode acc

Switch(config-if-range)#switchport mode access


Switch(config-if-range)#switchport acc

Switch(config-if-range)#switchport access vlan

Switch(config-if-range)#switchport access vlan 2

Switch(config-if-range)#int range fa0/4 – 5

Switch(config-if-range)#switchport access vl

Switch(config-if-range)#switchport access vlan 3


Let’s check the VLAN port assignments, just like a Layer 2 switch:

Switch#sh vlan br

Assign IP addresses to our hosts and set the Default Gateway as per the topology.  Pings to hosts in the same VLAN will succeed; however, pings to hosts from different VLAN will fail (no inter-vlan communication).

mulli-Layer Switch2

Create the virtual interfaces on the Layer 3 switch which will act as the Default Gateway:

Switch(config)#int vlan 2

%LINK-5-CHANGED: Interface Vlan2, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to up

Switch(config-if)#ip add

Switch(config-if)#int vlan 3

%LINK-5-CHANGED: Interface Vlan3, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan3, changed state to up

Switch(config-if)#ip add


%SYS-5-CONFIG_I: Configured from console by console

Look at the routing table on the Layer 3 switch.  We expect to see the virtual interfaces with connected networks:

Default gateway is not set

Host               Gateway           Last Use    Total Uses  Interface

ICMP redirect cache is empty

Note the routing table is empty, why?  We have not enabled the routing feature on the Layer 3 switch.  Let’s enable it now:


Let’s look at the routing table, now that routing has been enabled:

Gateway of last resort is not set is subnetted, 1 subnets

C is directly connected, Vlan2 is subnetted, 1 subnets

C is directly connected, Vlan3

A ping to the Default Gateway and a ping to hosts across VLAN’s should now succeed.  Let’s verify:

mulli-Layer Switch

To test a routed port, let’s add a router to the topology:

mulli-Layer Switch

On the switch, go to interface fa0/10 and configure the port:

Switch(config)#int fa0/10

Switch(config-if)#no sw

Switch(config-if)#ip add

On the router, go to interface fa0/0 and configure the port:


Router#conf t

Router(config)#int fa0/0

Router(config-if)#ip add

Router(config-if)#no shut


%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

Back on the Layer 3 switch, let’s check the routing table:

C is directly connected, FastEthernet0/10

Notice that interface fa0/10 is acting like a routed port and has an IP address.  Let’s see if we can ping the router:


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:

Success rate is 80 percent (4/5), round-trip min/avg/max = 0/0/0 ms

Perfect.  We have connectivity to the router.  Now will a ping from the PC’s to the router succeed?

mulli-Layer Switch

The ping test fails, why?  Remember that we need to have bi-directional communication.  The Layer 3 switch knows about the routers prefix and can route traffic out to the router; however, does the router know about the networks traffic is originating from?  Does it know about and network?  Let’s find out.

Router#sh ip route

C is directly connected, FastEthernet0/0

The router only knows about the connected network, namely the link between the Layer 3 switch and the router.  It does not know about networks behind the Layer 3 switch.  How can we correct this?  We saw a number of options; we can configure a default route, or a static route.  Other options include dynamic routing with RIP, EIGRP, or OSPF.  Let’s configure a couple of static routes here:

Router(config)#ip route

Router(config)#ip route


Are the routes in the routing table now?

S [1/0] via

S [1/0] via

Can we ping from the PC’s?

mulli-Layer Switch

Yes, we now have connectivity.  Remember, if packets are routed to a destination, a route back must exist.  Also, the route taken to a destination is not necessarily the route that is taken back.

[bs_icon name=”glyphicon glyphicon-expand”] Watch the video and you will be able to understand how to configure Multi-Layer Switch much better and Please subscribe to our YouTube Channel.


Want more information on how to become Cisco CCNA Certified? Learn more! Join our Cisco CCNA facebook study group!

Also published on Medium .

Comments are closed.


Contact us using the form below

* These fields are required.

Recent Posts

  • How To Install & Configure a Router: A Beginner’s Guide to Networking May 25, 2022
  • The Best Authentication Methods: Which One is Right For You? May 19, 2022
  • Identify the Common Connector Types April 15, 2022
  • The Importance of Secure Coding Techniques: Why You Need to Know It! April 15, 2022
  • Should You Perform a Pentest on a Production Environment or a Non-production Environment? March 10, 2022
  • April 2023  (6)
  • March 2023  (15)
  • February 2023  (3)
  • May 2022  (2)
  • April 2022  (2)
  • March 2022  (1)
  • February 2022  (1)
  • January 2022  (4)
  • December 2021  (1)
  • November 2021  (6)
  • October 2021  (5)
  • September 2021  (3)
  • August 2021  (1)
  • January 2021  (3)
  • December 2020  (1)
  • November 2020  (1)
  • September 2020  (1)
  • August 2020  (2)
  • July 2020  (3)
  • June 2020  (3)
  • April 2020  (1)
  • March 2020  (5)
  • February 2020  (9)
  • January 2020  (4)
  • December 2019  (3)
  • November 2019  (1)
  • October 2019  (6)
  • August 2019  (1)
  • July 2019  (1)
  • January 2019  (6)
  • December 2018  (11)
  • August 2018  (2)
  • July 2018  (9)
  • April 2018  (3)
  • February 2018  (4)
  • January 2018  (2)
  • December 2017  (4)
  • November 2017  (3)
  • October 2017  (4)
  • September 2017  (2)
  • July 2017  (1)
  • June 2017  (7)
  • May 2017  (11)
  • April 2017  (2)
  • March 2017  (2)
  • February 2017  (5)
  • January 2017  (3)
  • December 2016  (3)
  • November 2016  (4)
  • October 2016  (2)
  • September 2016  (7)
  • August 2016  (8)
  • July 2016  (17)
  • June 2016  (21)
  • May 2016  (46)
  • April 2016  (29)
  • March 2016  (24)
  • February 2016  (38)
  • January 2016  (44)


  1. Configure IP Address Settings on a Switch using the CLI

    Follow the steps below to configure a static IP address on the switch: Step 1. Connect your computer directly to the switch using a serial cable. If you would prefer to SSH into your switch, click here to view an article on gaining CLI access to a switch. Step 2. Log in to the switch console.

  2. cisco

    9. Short: I want DHCP server to assign a preconfigured IP address based on a port (on a switch, ideally) a device is connected to. Long: My situation: I am building an automated indoor farm (for growing tomatoes). The farm is composed of many (12 for now, but will grow to hundreds) identical 7"x7" rooms. Each room will have an Ethernet port ...

  3. Configure an IP address on a switch

    The IP address is configured under a logical interface, known as the management domain or VLAN. Usually, the default VLAN 1 acts like the switch's own NIC for connecting into a LAN to send IP packets. Here are the steps to configure an IP address under VLAN 1: enter the VLAN 1 configuration mode with the interface vlan 1 global configuration ...

  4. Configuring the Switch IP Address and Default Gateway

    Before you can Telnet to the switch or use SNMP to manage the switch, you must assign an IP address to either the in-band (sc0) logical interface or the management Ethernet (me1) interface. The me1 interface is present only on the Catalyst 4500 series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G switches.

  5. PDF Assigning the Switch IP Address and Default Gateway

    hardware address. If you want the switch to receive IP address informat ion, you must configure the DHCP server with these lease options: † IP address of the client (required) † Subnet mask of the client (required) † DNS server IP address (optional) † Router IP address (default gateway address to be used by the switch) (required)

  6. IPv4 Address Configuration on Cisco IOS Catalyst Switch

    IPv4 Address Configuration on Cisco IOS Catalyst Switch. To allow remote access to a Cisco IOS Catalyst switch with protocols like telnet or SSH, we need to configure an IP address on the switch. You also need this if you want to use any network management tools to monitor your switch. On L2 switches, the IP address is only used for remote ...

  7. Configure IP Address for Interface in Cisco Switches

    Switch port: Enabled means that the port is currently a layer 2 port. To change the interface from a layer 2 switch to a layer 3 switch: int f0/1. no switchport exit. Providing IP address to an interface: int f0/1. ip add Checking if an IP address has been provided to the interface.

  8. PDF Configuring Ethernet Management Port

    Configuring Ethernet Management Port. When connecting a PC to the Ethernet management port, you must first assign an IP address. The Ethernet management port, also referred to as the Gi0/0 or GigabitEthernet0/0 port, is a VRF (VPN routing/forwarding) interface to which you can connect a PC. You can use the Ethernet management port instead of ...

  9. PDF Configuring Layer 3 Interfaces

    Selects an interface to configure. Step 3 Switch(config-if)#no switchport Converts this port from physical Layer 2 port to physical Layer 3 port. Step 4 Switch(config-if)# ip address ip_address subnet_mask Configures the IP address and IP subnet. Step 5 Switch(config-if)# no shutdown Enables the interface. Step 6 Switch(config-if)# end Exits ...

  10. Configuring Ethernet Switch Ports

    Configuring HSRP. The Hot Standby Router Protocol (HSRP) is Cisco's standard method of providing high network availability by providing first-hop redundancy for IP hosts on an IEEE 802 LAN configured with a default gateway IP address. HSRP routes IP traffic without relying on the availability of any single router.

  11. Cisco Business 250 Series Switches Administration Guide

    Click Add to manually assign a static IP address. Step 3. From the Interface area, select Out of Band. Step 4. Select Static IP Address from the IP Address Type area. Step 5. Enter the IP address of the OOB interface in the IP Address field. Step 6. Click a radio button from the Mask area then enter the corresponding subnet mask. The options are:

  12. How can i configure ip address to cisco switch without configuring vlan

    You can turn a layer 2 switchport into a layer 3 port and assign an IP address if you do no wish to use a vlan interface. ... I think the primary question is how to configure an ip address on a Cisco switch. My answer is the only one that addresses all the main tasks required to achieve the practical working solution. - Ronnie Royston. Jun 13 ...

  13. Configuring a Routed Port

    Step 2 : Create a routed port. Switch (config-if)#no switchport. Step 3 : Assign an IP address to the routed port. Switch (config-if)#ip address ip-address mask. Step 4 : Configure the IP routing protocol if needed. Switch (config)#router ip_routing_protocol <options>. To configure a routed port, perform these steps.

  14. PDF Assigning the Switch IP Address and Default Gateway

    This chapter describes how to create the initial switch configuration (for example, assigning the IP address and default gateway information) for the Catalyst 3560 switch by using a variety of automatic and manual methods. It also describes how to modify the switch startup configuration. Command References.

  15. cisco

    Yes, please post the switch configuration. The interface configuration of the FE port would also help. - HAL. May 2, 2016 at 20:36. 1. You need to explain, in detail, what you are trying to accomplish. You don't/can't assign IP addresses to a switch (layer-2) port. IP is a layer-3 protocol, and you assign IP addresses to a router (layer-3) port.

  16. how to assign static IP on a switch

    In addtion unlike L2 swithes a L3 switch can have a static ip address assigned to any one of its fastethernet (fa0/1) or gig ethernet ports (gi0/1). Config t. int fa0/1. ip address 255.255.255.. description *** Assigning an ip address to a physical fast ethernet port on the switch***. int vlan 1.

  17. Cisco CCNA How to configure Multi-Layer Switch

    On a Layer 2 switch the ports cannot be assigned an IP address. If a switch is to act like a router, we need a way to assign IP addresses to ports. This is done by the command switchport under the interface.Switchport makes the port behave like a Layer 2 port, whereas no switchport will make it behave like a Layer 3 port; is it a toggle. By default, a Layer 3 switch will have all of the ports ...