Henderson's Cisco Configuration Generator

Hardware, VLANs, security & services → copy-paste-ready IOS config

Read before you paste. This produces a solid starting point, not a finished design. Read every line, check it against your own network, and try it on a lab device or a spare port before you touch anything in production. Nobody here can see your network; you are the last check.

Start from a template

Fills the form with sensible values you can then edit. Passwords are never pre-filled.

1. Hardware Selection

2. VLAN Configuration

VLAN IDs must be 1–4094.

3. Interface Options

Read this if you are configuring over the network. The settings below apply to every port in the range, including whichever one carries your uplink to the rest of the network. BPDU guard will then shut that port down the moment it hears from the switch upstream — and you lose this switch, and everything behind it, from wherever you are sitting. Name your uplink here to exclude it, or apply the config from the console instead.

4. Security

The password for enable mode. The switch stores it hashed — but the file this tool generates contains it in plain text, so delete that file once you have applied it.

Required before a device will generate an SSH key. Any internal name works.

Without this you cannot log in over SSH. Generating a key is not the same as having an account — leave these blank and you will be locked out of remote access after the reload.

Encrypts stored passwords, turns off the built-in web server, and puts portfast + BPDU guard on access ports so a switch plugged into a desk port cannot take the network down.

5. Management (VLAN & IP)

6. Services

7. ACL (optional)