I was attempting to change an initial DHCP IP address to a static (for another facility-sub). I had resigned to adding another as you stated, then deleted the original. It worked. Glad to see you are equally puzzled by the inability to change addresses from the "Edit" option!
Is there going to be a follow up to this? Or is there one I haven't seen yet? Coz it would be awesome to see what maybe a normal use case... For example... Setup 3 VLANs (Admin, Office Network, WiFi Network), make the last port an uplink to the router. Configure InterVLAN routing so the 3 networks can begin to talk to one another and make that last port be able to send traffic to the internet and back for each of the 3 VLANs. Finally, configure ACLs so that Office Network can't communicate with the WiFi Network and vice versa. I think that would cover a bunch of use cases and would lvoe to see a step-by-step for this process. Yours is the most informative and undertsandable video I have found on these CBS switches. Thank you for this
I had planned on making some sort of follow up along the lines of general switch administration. This video didn't have a whole lot of interest so I didn't ever get around to actually making one. I'll add it to my list since you are interested since switching is one of the topics I like the most.
Would love to see a video with this switch going over VLANs. You explain things very well. The tagging vs untagged aspect. I just learned there are 3 different ways to implement the vlan from this video. For example setting up another vlan for voice traffic, which is very common. Where the computer lan connects through the phone. Anyway a video really explaining each part of the setup would be welcomed! Thanks
Thank you for explaining well. Regarding changing VLAN 1 IP address through GUE, I think not allowed because the connection would be lost, but can be done through CLI as the communication not through GUI IP address. What might support my argument is, you created a new vlan and you connected to the switch through its IP address and then change the vlan1 address before you can back to connect through VLAN1 again. In conclusion, I think you cannot change an VLAN's IP while you connect to the switch through. ((hope my broken english gave the idea i wanted to say as English is my second language))
thanks i watched the whole video and documented all the commands in a neat text file. I am more a ubiquiti or mikrotik guy, but the MSP at my new job is more cisco and i'm stuck with them (better markup for them i guess). anyways you have saved me a lot of time THANKS
The new GUI setup for these CBS models is wonky as hell. I spent about 2.5 hours on it. Followed your CLI tutorial and had it up and running in 10 minutes. I don't understand why Cisco continuously creates bad WebGUI interfaces for their switches. Everything is confusing, convoluted and sends you down rabbit hole after rabbit hole. Thank you so much for this!
LIBERTY is horrible in Costa Rica. I DO NOT recommend them. They just installed a new fiber optic line to our building and left it with a Cisco 350 series 8T-E-2G switch and the technicians left with no paperwork, no weblink or any information on how to set it up. LIBERTY has provided internet to this office via coaxial cable that still works. It is unbelievable they did not switch over our internet from the cable to the fiber optic. But NO.. Liberty left us with nothing. I am the building owner and now I need to add a new router/wifi to this switch... so I am here on UA-cam to find the solution. Maybe this video will help! Thanks for uploading this tutorial video.
I use the cli as a fallback or last resort. Cisco likes to change what is where in the gui on the SMB switched and even in some updates. I tinker with so much, trying to remember it all is just too much for me. I admire those with the talent.
Bro, this is Ibrahim from Bangladesh. you are doing amazing. One thing I wanna request you, if you get time please make real life practical video series for "Cisco meraki". i have seen many video but they are not like for guyz who started career in IT.
Thank you! If get my hands on Meraki equipment I'll try to make a video. I've dealt with a few networks running exclusively on Meraki, but the licensing and cloud management stuff makes it impractical to get a hold of for testing (at least that's what I get from the very little research I've done to get a hold of them).
You’re not alone, the cli on the SMB switches to anyone who is used to catalyst is just awful. As you said close enough that you feel you don’t have to learn it but different enough to catch you out every now and then
Hello, and thank you for your wonderful video. I have a complicated problem regarding one of these switches. It is in a rack that manages a training room's AV system, and one of my touch panels is complaining of a duplicate IP address on the network. I have been called in to service this system, and the vendor/installer is no longer available. I am able to obtain the IP of the switch but it appears the HTML configuration is turned off. I know this can be done at the console level. My question is, after reviewing the whole AAA console commands manual for these switches, it seems like there should be a way to bypass the password, or to initiate a password recovery, etc. from the console without entering the credentials. I want to ask if you know how to do this. A hard reset of the switch is the absolute last resort, as it will break the entire AV system and I cannot be sure how long it will take me to learn enough Savant to get the crestrons communicating with everything again. Is there a way into my switch without a hard reset? CBS350-8FP-2G
Thank you for this video. The explanations are crystal clear. I've heard that Auto Smartport can give a hard time if enabled on standard (non-uplink) access ports. Do you think it's a good idea to completely disable this feature for all ports? Thanks
I personally hate smart ports, but I've actually had the opposite experience with them. I've experienced them causing more issues with uplinks rather than access ports. Also, if you need to disable the smart port feature on an uplink after it is "live" then you run the risk of cutting your nose off (disabling smart port can revert the port config to default and cut off remote access). On my personal equipment, I disable them entirely. I'm used to working with Catalyst and manually assigning VLANs anyway, but I understand that isn't for everyone. The only part where this gets a bit weird is with the voice VLAN. I've found it's easier to manage that by just keeping smart ports enabled and using the auto voice VLAN feature. On production equipment, I only disable them for uplinks (for previously mentioned reasons). I'll leave them enabled for user ports since the auto voice VLAN seems to work pretty well and I haven't run into issues with client devices.
Thank you for another great video. I'm an old timer network engineer who started out with the 3524.... lol The first time I came across the usb console cables you had to have special software installed to use it. Do you need a Cisco installer for this usb C to RJ45 jack cable? I'll read the quick start guide on the CBS250 I just received to find out if it's mentioned.
Oh, the good ole 3500 series. That used to be some top-tier equipment right there. I still find that certain makes/models of USB-to-console dongles require additional software to be installed. They are becoming fewer and fewer as time moves on, but I know they still exist. I probably have dozens of these dongles lying around and I can tell by looking at them if they will be plug-and-play (sorry.. I don't have the details of which are which...). I actually used a regular USB-A to Console cable adapter in this video which did not require any additional software to be recognized. However, I have a USB-C to console cable I typically use. My specific USB-C to Console dongle did not need additional software to install, but there is a pretty major caveat here and that is that I only use it on a Mac. I've never actually tried to use it on a Windows machine, so I can't tell you if there are any issues.
Thanks for the video, very helpful. I was interested in what you indicated about a Catalyist. I like this device as I need at at least 2x10GbE RJ45s and 2 20GbE SFP ports. Is there a 10GbE Cisco Cataylist withboth 10GbE RJ45 and SFP ports that you might recommend? I'm a small business home user.
Not off the top of my head, but I know the C9200s have four SFP+ ports which could be populated with RJ-45 SFPs. The actual port density is nearly identical to the CBS350s (24 1gbps RJ-45 & 4 SFP+ ports). The difference I believe is that the SFP+ module is an additional purchase (the switch comes with a blank module by default). If you haven't looked into the Catelyst line before be prepared for sticker shock.
Very very Basics, but from the very Beginning ... Could You do an Installation with Layer Three L3-activation of the Ports wit Accesspoints with different VLANS on the Switch and the Accesspoints ... Thank You many Thanks
I have the 250 version. I am having a hard time for some reason getting my to allow connected devices internet access. I have my Cisco 250 connected to a home router and have created 4 VLAN's. Created GE1 & 2 are trunk ports. GE5, 6, 7, and 8 are my VLAN's. I am able to ping the the ports from other devices, such as device connected to GE1 can point GE5 and GE5 can ping GE1. But for some reason I can't get my devices connected to the Cisco 250 internet access. Any idea what I am doing wrong?
Can you please provide me with the default login credentials for a Cisco CBS350 switch? I am trying to access the switch's web interface and I don't have the login information.
Thank you bro. This tutorial saved my time and gave me the required information. Appreciated and thanks a lot :) Like other cisco switches, can I create the 'en' mode and assign a password as well?
If you only want to use the 10G ports for hardwiring multiple computers via CAT6A runs, can you please advise if I need to configure anything? Basically, use it as a dumb switch.
So I have the SG300 for home. Has been fantastic even though I do everything through the GUI. I was thinking of upgrading the home network to 10gb. I would have thought the successor would have been 10 gig? So they don't have small business switch that is 10gb? Thanks for the video.
I am not aware of a "full" 10Gbps small business switch. However, I know there are models with up to 4 10Gbps uplink capability. I typically look elsewhere for 10Gbps switches.
Does the 250 and 350 business line have IGMP snooping. We have a large network and Im needing a small 8 or 16 port POE switch for surveillance cameras. I wamt to connect via SFP module over fiber to a 9200L. That would be compatible, correct? Im faily new to the networking side but have added switches in the past but most of my switches are Catalysts. Ive never used anything other than the 2650 or 3850s
So, according to the datasheet, both support IGMP snooping. However, multicast is not something I'm super familiar with and isn't something I've really dealt with extensively. YMMV. Up linking to a 9200L is definitely compatible as long as you follow the SFP and fiber compatibility. I have plenty of clients who have a mix of 9200 series with SMB, SG, and CBS switches all uplinked over fiber and copper.
OOB management is supported, but it's more of a configuration issue than a per-port feature. If you have a dedicated management network, you can configure a single port to use that VLAN with a corresponding interface-VLAN. You get to choose which port this gets applied to. Going further, you could use a terminal-server device to connect directly to the console cable. These aren't really used much anymore, but the concept would still work with these since they have the standard RJ-45 serial port for console access.
Hi.. i have the same unit freah from the box.. i was able to go to cosole.. but the default username and password cisco is not working.. authentication failed when entering the default credential. thanks
Interesting, the default login should be cisco/cisco. This should be changed at the first login. You may need to follow the factory reset procedures and try again.
I have run into difficulty resetting to factory thru the reset button. Tried holding for 15-20 seconds, tried longer, tried shorter. And eventually it resets but takes multiple attempts. Have you factory reset one of these via the button and had any difficulty?
I have reset a couple with the button and never really had an issue. However, I typically hold it down for 30 seconds just in case. I've heard this same issue from other people though, so I might just have been lucky so far.
Yes, especially in a production environment. Once the switch is configured an initial backup is taken and kept on record. A second backup is typically taken after the actual installation since there may be a couple minor changes needing to be made afterwards.
SFPs are pretty much plug and play. The port configuration is identical to any other type of port. Most of the complexity of SFPs comes from finding a compatible module and transmission media.
those seems to be shitty switches to me for a company with more than 30 users... unfortunately they decided to use them everywhere.. in conjunction with what i consider fisher price firewalls, the meraki.
@@eddie79it1 Never used Cisco or any other vendor with subscriptions fees as I like to buy hardware not rent it, so I don't have an opinion yet, having said that if they go away from subscriptions maby I will try it.
Simple and straight to the point. Well done, it sure gave me confidence to proceed
I was attempting to change an initial DHCP IP address to a static (for another facility-sub). I had resigned to adding another as you stated, then deleted the original. It worked. Glad to see you are equally puzzled by the inability to change addresses from the "Edit" option!
Appreciate this, company has decided to replace all our current SG switches with these
Is there going to be a follow up to this? Or is there one I haven't seen yet? Coz it would be awesome to see what maybe a normal use case... For example... Setup 3 VLANs (Admin, Office Network, WiFi Network), make the last port an uplink to the router. Configure InterVLAN routing so the 3 networks can begin to talk to one another and make that last port be able to send traffic to the internet and back for each of the 3 VLANs. Finally, configure ACLs so that Office Network can't communicate with the WiFi Network and vice versa. I think that would cover a bunch of use cases and would lvoe to see a step-by-step for this process. Yours is the most informative and undertsandable video I have found on these CBS switches. Thank you for this
I had planned on making some sort of follow up along the lines of general switch administration. This video didn't have a whole lot of interest so I didn't ever get around to actually making one. I'll add it to my list since you are interested since switching is one of the topics I like the most.
@@ToastyAnswers Super interested for sure! Thank you!! I'll be keeping my eye open for if you make it :)
Excellent content and it sounded like Bob Belcher was talking to me. Bonus points.
Would love to see a video with this switch going over VLANs. You explain things very well. The tagging vs untagged aspect. I just learned there are 3 different ways to implement the vlan from this video.
For example setting up another vlan for voice traffic, which is very common. Where the computer lan connects through the phone. Anyway a video really explaining each part of the setup would be welcomed! Thanks
I have added this to the list. This is definitely a very common setup and I probably should have covered it in more detail in this video.
@@ToastyAnswers Great video, as always. Along with Vlans, suggest a video for setting up for Multicast.
Thank you for explaining well. Regarding changing VLAN 1 IP address through GUE, I think not allowed because the connection would be lost, but can be done through CLI as the communication not through GUI IP address. What might support my argument is, you created a new vlan and you connected to the switch through its IP address and then change the vlan1 address before you can back to connect through VLAN1 again. In conclusion, I think you cannot change an VLAN's IP while you connect to the switch through. ((hope my broken english gave the idea i wanted to say as English is my second language))
thanks i watched the whole video and documented all the commands in a neat text file. I am more a ubiquiti or mikrotik guy, but the MSP at my new job is more cisco and i'm stuck with them (better markup for them i guess).
anyways you have saved me a lot of time THANKS
The new GUI setup for these CBS models is wonky as hell. I spent about 2.5 hours on it. Followed your CLI tutorial and had it up and running in 10 minutes. I don't understand why Cisco continuously creates bad WebGUI interfaces for their switches. Everything is confusing, convoluted and sends you down rabbit hole after rabbit hole. Thank you so much for this!
LIBERTY is horrible in Costa Rica. I DO NOT recommend them. They just installed a new fiber optic line to our building and left it with a Cisco 350 series 8T-E-2G switch and the technicians left with no paperwork, no weblink or any information on how to set it up. LIBERTY has provided internet to this office via coaxial cable that still works. It is unbelievable they did not switch over our internet from the cable to the fiber optic. But NO.. Liberty left us with nothing. I am the building owner and now I need to add a new router/wifi to this switch... so I am here on UA-cam to find the solution. Maybe this video will help! Thanks for uploading this tutorial video.
I use the cli as a fallback or last resort. Cisco likes to change what is where in the gui on the SMB switched and even in some updates. I tinker with so much, trying to remember it all is just too much for me. I admire those with the talent.
Bro, this is Ibrahim from Bangladesh. you are doing amazing.
One thing I wanna request you, if you get time please make real life practical video series for "Cisco meraki". i have seen many video but they are not like for guyz who started career in IT.
Thank you! If get my hands on Meraki equipment I'll try to make a video. I've dealt with a few networks running exclusively on Meraki, but the licensing and cloud management stuff makes it impractical to get a hold of for testing (at least that's what I get from the very little research I've done to get a hold of them).
CLI is and will be the best ever!
huge thanks sir for all u re work
Some useful tips. Thanks. 👍🏻
You’re not alone, the cli on the SMB switches to anyone who is used to catalyst is just awful. As you said close enough that you feel you don’t have to learn it but different enough to catch you out every now and then
Hello, and thank you for your wonderful video. I have a complicated problem regarding one of these switches. It is in a rack that manages a training room's AV system, and one of my touch panels is complaining of a duplicate IP address on the network. I have been called in to service this system, and the vendor/installer is no longer available. I am able to obtain the IP of the switch but it appears the HTML configuration is turned off. I know this can be done at the console level.
My question is, after reviewing the whole AAA console commands manual for these switches, it seems like there should be a way to bypass the password, or to initiate a password recovery, etc. from the console without entering the credentials. I want to ask if you know how to do this.
A hard reset of the switch is the absolute last resort, as it will break the entire AV system and I cannot be sure how long it will take me to learn enough Savant to get the crestrons communicating with everything again.
Is there a way into my switch without a hard reset? CBS350-8FP-2G
Thank you for this video. The explanations are crystal clear. I've heard that Auto Smartport can give a hard time if enabled on standard (non-uplink) access ports. Do you think it's a good idea to completely disable this feature for all ports? Thanks
I personally hate smart ports, but I've actually had the opposite experience with them. I've experienced them causing more issues with uplinks rather than access ports. Also, if you need to disable the smart port feature on an uplink after it is "live" then you run the risk of cutting your nose off (disabling smart port can revert the port config to default and cut off remote access).
On my personal equipment, I disable them entirely. I'm used to working with Catalyst and manually assigning VLANs anyway, but I understand that isn't for everyone. The only part where this gets a bit weird is with the voice VLAN. I've found it's easier to manage that by just keeping smart ports enabled and using the auto voice VLAN feature.
On production equipment, I only disable them for uplinks (for previously mentioned reasons). I'll leave them enabled for user ports since the auto voice VLAN seems to work pretty well and I haven't run into issues with client devices.
Thank you for another great video. I'm an old timer network engineer who started out with the 3524.... lol The first time I came across the usb console cables you had to have special software installed to use it.
Do you need a Cisco installer for this usb C to RJ45 jack cable? I'll read the quick start guide on the CBS250 I just received to find out if it's mentioned.
Oh, the good ole 3500 series. That used to be some top-tier equipment right there.
I still find that certain makes/models of USB-to-console dongles require additional software to be installed. They are becoming fewer and fewer as time moves on, but I know they still exist. I probably have dozens of these dongles lying around and I can tell by looking at them if they will be plug-and-play (sorry.. I don't have the details of which are which...).
I actually used a regular USB-A to Console cable adapter in this video which did not require any additional software to be recognized. However, I have a USB-C to console cable I typically use. My specific USB-C to Console dongle did not need additional software to install, but there is a pretty major caveat here and that is that I only use it on a Mac. I've never actually tried to use it on a Windows machine, so I can't tell you if there are any issues.
I guess that you cannot change the IPv4 address of a VLAN from GUI because you are connecting to the device by that address.
Thanks for the video, very helpful. I was interested in what you indicated about a Catalyist. I like this device as I need at at least 2x10GbE RJ45s and 2 20GbE SFP ports. Is there a 10GbE Cisco Cataylist withboth 10GbE RJ45 and SFP ports that you might recommend? I'm a small business home user.
Not off the top of my head, but I know the C9200s have four SFP+ ports which could be populated with RJ-45 SFPs. The actual port density is nearly identical to the CBS350s (24 1gbps RJ-45 & 4 SFP+ ports). The difference I believe is that the SFP+ module is an additional purchase (the switch comes with a blank module by default).
If you haven't looked into the Catelyst line before be prepared for sticker shock.
I 1000000% agree with the first 3m of this video.
dear sir CBS350 24P-4G, after configuring LAN through not opening
it looks like you setup regular http but how would you configure https for improved security?
I typically run both, but you can limit to https only by disabling the http option under Security > TCP/UDP services in the GUI.
Very very Basics, but from the very Beginning ... Could You do an Installation with Layer Three L3-activation of the Ports wit Accesspoints with different VLANS on the Switch and the Accesspoints ... Thank You many Thanks
I have the 250 version. I am having a hard time for some reason getting my to allow connected devices internet access. I have my Cisco 250 connected to a home router and have created 4 VLAN's. Created GE1 & 2 are trunk ports. GE5, 6, 7, and 8 are my VLAN's. I am able to ping the the ports from other devices, such as device connected to GE1 can point GE5 and GE5 can ping GE1. But for some reason I can't get my devices connected to the Cisco 250 internet access. Any idea what I am doing wrong?
Can you please provide me with the default login credentials for a Cisco CBS350 switch? I am trying to access the switch's web interface and I don't have the login information.
Thank you bro. This tutorial saved my time and gave me the required information. Appreciated and thanks a lot :)
Like other cisco switches, can I create the 'en' mode and assign a password as well?
Yes, you can assign an enable password to these switches. Thanks for the kind words!
If you only want to use the 10G ports for hardwiring multiple computers via CAT6A runs, can you please advise if I need to configure anything? Basically, use it as a dumb switch.
There shouldn't be any configuration necessary, but you may be better served by a 5 port 10Gbps SFP switch instead.
So I have the SG300 for home. Has been fantastic even though I do everything through the GUI. I was thinking of upgrading the home network to 10gb. I would have thought the successor would have been 10 gig? So they don't have small business switch that is 10gb? Thanks for the video.
I am not aware of a "full" 10Gbps small business switch. However, I know there are models with up to 4 10Gbps uplink capability.
I typically look elsewhere for 10Gbps switches.
Does the 250 and 350 business line have IGMP snooping. We have a large network and Im needing a small 8 or 16 port POE switch for surveillance cameras. I wamt to connect via SFP module over fiber to a 9200L. That would be compatible, correct? Im faily new to the networking side but have added switches in the past but most of my switches are Catalysts. Ive never used anything other than the 2650 or 3850s
So, according to the datasheet, both support IGMP snooping. However, multicast is not something I'm super familiar with and isn't something I've really dealt with extensively. YMMV.
Up linking to a 9200L is definitely compatible as long as you follow the SFP and fiber compatibility. I have plenty of clients who have a mix of 9200 series with SMB, SG, and CBS switches all uplinked over fiber and copper.
Hey Toasty, how do you configure OOB management? the datasheets say its supported, but what port?
OOB management is supported, but it's more of a configuration issue than a per-port feature. If you have a dedicated management network, you can configure a single port to use that VLAN with a corresponding interface-VLAN. You get to choose which port this gets applied to.
Going further, you could use a terminal-server device to connect directly to the console cable. These aren't really used much anymore, but the concept would still work with these since they have the standard RJ-45 serial port for console access.
Hi.. i have the same unit freah from the box.. i was able to go to cosole.. but the default username and password cisco is not working.. authentication failed when entering the default credential. thanks
Interesting, the default login should be cisco/cisco. This should be changed at the first login. You may need to follow the factory reset procedures and try again.
3rd place is on the console or command line 🙂
I could get around the backspace problem by pressing shift backspace
This is good to know!
I have run into difficulty resetting to factory thru the reset button. Tried holding for 15-20 seconds, tried longer, tried shorter. And eventually it resets but takes multiple attempts. Have you factory reset one of these via the button and had any difficulty?
I have reset a couple with the button and never really had an issue. However, I typically hold it down for 30 seconds just in case. I've heard this same issue from other people though, so I might just have been lucky so far.
After you finish setting up your setting for your cisco switches do you backup the configuration of the switch?
Yes, especially in a production environment. Once the switch is configured an initial backup is taken and kept on record. A second backup is typically taken after the actual installation since there may be a couple minor changes needing to be made afterwards.
Thank u Sir
Any insight on configuring a sfp for fiber or is it plug and play ?
SFPs are pretty much plug and play. The port configuration is identical to any other type of port.
Most of the complexity of SFPs comes from finding a compatible module and transmission media.
Can we configure routing (IP routing) for inte-vlan routing
Yes, you can configure routing on the 300 series CBS switches. I may make a video on this sometime in the future.
@@ToastyAnswers thanks 🙏
Where we see serial number in this device?
It is located on the Status page of the GUI. At the bottom near the picture of the switch, you will see the device's serial number.
@@ToastyAnswers I got it already
Gosh I looking to hear a jet engine, maybe there is a chance to consider Cisco. Hope there isn't ANY subscriptions otherwise is already NO go for me.
those seems to be shitty switches to me for a company with more than 30 users... unfortunately they decided to use them everywhere.. in conjunction with what i consider fisher price firewalls, the meraki.
@@eddie79it1 Never used Cisco or any other vendor with subscriptions fees as I like to buy hardware not rent it, so I don't have an opinion yet, having said that if they go away from subscriptions maby I will try it.
The worst switch series from Cisco.