S5860 Series Switch Configuration Guide

Introduction

The S5860 series switches are enterprise-grade Layer 2/Layer 3 switches designed for modern data center and campus networks. This guide covers initial configuration, VLAN setup, link aggregation, routing protocols, and SNMP monitoring.

Initial Setup

Connecting to the Switch

Connect via console cable (RJ45 to DB9) or SSH:

# SSH connection
ssh [email protected]

# Default credentials (change immediately after first login)
Username: admin
Password: password

Basic System Configuration

# Set hostname
configure terminal
hostname S5860-Core-01

# Set management IP
interface management 0/0
ip address 10.0.0.10 255.255.255.0
no shutdown
exit

# Set default gateway
ip default-gateway 10.0.0.1

# Save configuration
copy running-config startup-config

VLAN Configuration

Creating VLANs

# Create VLANs
vlan 10
 name Engineering
vlan 20
 name Marketing
vlan 99
 name Management
exit

# Assign ports to VLANs
interface range GigabitEthernet 0/1-12
 switchport mode access
 switchport access vlan 10
exit

interface range GigabitEthernet 0/13-24
 switchport mode access
 switchport access vlan 20
exit

Trunk Ports

# Configure trunk port
interface GigabitEthernet 0/48
 switchport mode trunk
 switchport trunk allowed vlan 10,20,99
 switchport trunk native vlan 99
exit

Inter-VLAN Routing

# Enable IP routing
ip routing

# Create SVIs (switch virtual interfaces)
interface Vlan 10
 ip address 192.168.10.1 255.255.255.0
 no shutdown
exit

interface Vlan 20
 ip address 192.168.20.1 255.255.255.0
 no shutdown
exit

Link Aggregation (LACP)

Port Channel Configuration

# Create port-channel
interface Port-Channel 1
 description Uplink-to-Core
 switchport mode trunk
 switchport trunk allowed vlan all
exit

# Add member ports
interface range GigabitEthernet 0/47-48
 channel-group 1 mode active
exit

Verify LACP Status

show lacp internal
show lacp neighbor
show interfaces port-channel 1

OSPF Configuration

# Enable OSPF routing
router ospf 1
 router-id 10.0.0.10
 network 192.168.10.0 0.0.0.255 area 0
 network 192.168.20.0 0.0.0.255 area 0
 network 10.0.0.0 0.0.0.255 area 0
exit

# Set reference bandwidth (for 10G links)
router ospf 1
 auto-cost reference-bandwidth 10000
exit

SNMP Configuration

# SNMPv2c configuration
snmp-server community public ro
snmp-server community private rw
snmp-server location DataCenter-A-Floor2
snmp-server contact [email protected]

# SNMPv3 configuration (recommended)
snmp-server group SNMPv3Group v3 priv
snmp-server user admin SNMPv3Group v3 auth sha authpass priv aes 128 encryptpass

Security Best Practices

Port Security

# Enable port security
interface GigabitEthernet 0/1
 switchport port-security
 switchport port-security maximum 5
 switchport port-security violation restrict
 switchport port-security aging time 2
exit

Troubleshooting

Common Issues

VLAN not routing:

• Verify ip routing is enabled
• Check SVI is up with no shutdown
• Verify subnet mask matches hosts

LACP not forming:

• Verify both ends use compatible mode (active/active or passive)
• Check physical link status with show interfaces status
• Ensure same speed/duplex on both ends

OSPF neighbor not establishing:

• Verify area IDs match on both ends
• Check hello/dead timers
• Confirm interface is not passive

Diagnostic Commands

show vlan
show interfaces status
show ip interface brief
show spanning-tree
show lacp internal
show ip route
show ospf neighbor

Related Documentation

• EVPN-VXLAN Configuration Guide
• Network Switch Selection Guide
• PicOS Software Overview