Switch config generator
Build a secure Cisco access-switch configuration: VLANs, access and trunk ports, SSH and Spanning Tree protection.
Runs on your device · nothing is uploaded
Review before use and replace every <CHANGE-ME> with your own strong secret. Test in a lab first. The configuration is built on your device and never sent anywhere.
What this generator does
Setting up a new access switch involves the same steps every time: name it, create VLANs, give it a management address, configure access and trunk ports, lock down remote access and protect Spanning Tree. This tool writes a clean, commented Cisco IOS configuration from your answers so you can review it and paste it in.
How to use it
- List your VLANs with an ID and a name.
- Choose the management VLAN, the switch's IP address and the default gateway.
- List access ports as an interface or range (for example
Gi1/0/1-20) followed by the data VLAN and, for IP phones, a voice VLAN. - List uplink ports that should be trunks. They will carry only the VLANs you listed, with an unused native VLAN.
- Copy the result, replace every
<CHANGE-ME>secret and test it in a lab or on a spare switch.
Tip: keep VLAN 1 unused, give the native VLAN a dedicated unused ID, and shut down ports nobody uses. Our VLANs and Spanning Tree cheat sheet explains each command.