Cisco Fast Config Generator

Step 0: Switch Model Selection

Choose your Catalyst switch model. This determines available features.

Switch Model *

9200L and 9200 have limited L3 capabilities

Step 1: Basic Setup

Configure fundamental switch parameters.

Hostname *

The switch's identity on the network. Use naming convention like site-floor-role (e.g., DC1-FL2-CORE)

Domain Name (optional)

Required for SSH key generation. Use your internal domain (e.g., corp.example.com)

Enable Secret Password *

Privileged EXEC mode password. Uses Type 9 (scrypt) hashing on IOS-XE 16.x+

Console Password *

Physical console port access password

Banner MOTD (optional)

Legal warning displayed before login. Required for compliance in many organizations

Time @& NTP (optional)

Timezone (e.g., PST, EST, UTC)

NTP Server IP

Network Time Protocol server for clock sync. Critical for logging accuracy

Step 2: Management @& Remote Access

Configure management interface, SSH, and AAA.

Management VLAN ID *

VLAN used for switch management traffic. Best practice: use a dedicated VLAN, not VLAN 1

Management VLAN Name (optional)

Management IP Address *

IP address for remote management of this switch

Subnet Mask *

Default Gateway *

Enable SSH Remote Access

Secure Shell for encrypted remote access. Always prefer SSH over Telnet

Enable AAA (Authentication/Authorization/Accounting)

Authentication, Authorization, Accounting framework. Enables centralized access control

Exec Timeout (minutes, 0=disabled)

Console Timeout

VTY Timeout

Step 3: VLANs

Configure Virtual LANs for network segmentation.

Bulk VLAN Entry (Optional)

Paste VLANs as CSV (ID:Name format)

Format: VLAN_ID:VLAN_NAME on each line (e.g., 10:Users, 20:Voice)

VLAN ID

VLAN Name

Step 4: Interface Configuration

Configure access ports, trunk ports, and port-channels.

Access Ports (Layer 2)

End-device facing ports (PCs, printers, phones). Assigned to a single VLAN

Port Range (e.g., 1/0/1-24)

Assign to VLAN

Port Security

Enable Spanning Tree Portfast @& BPDU Guard on access ports

Trunk Ports (Layer 2/3)

Switch-to-switch or switch-to-router links carrying multiple VLANs

Trunk Port Ranges (comma-separated)

Allowed VLANs (comma-separated)

Native VLAN

Enable Port-Channel / EtherChannel

Link aggregation (EtherChannel) for bandwidth and redundancy

Step 5: Layer 3 (Routing)

Configure SVI interfaces, routing, and static routes.

Enable IP Routing (ip routing)

SVI Interfaces (VLAN IPs)

VLAN ID

IP Address

Subnet Mask

Static Routes

Step 6: Security Hardening

Configure security best practices and hardening options.

Disable HTTP/HTTPS Server Disable CDP (Cisco Discovery Protocol)

Spanning Tree Mode

Loop prevention protocol. Rapid-PVST+ is recommended for most deployments

Enable DHCP Snooping

Prevents rogue DHCP servers. Mark uplinks as trusted

Enable Storm Control (broadcast/multicast/unicast) Enable Service Password Encryption

Logging Server IP (optional)

Logging Buffer Size (bytes)

Configuration Summary

Review your selections before generating the configuration.