These documents explains how to configure and maintain your Cisco router.

Transcription

1 Preface This preface describes the objectives, audience, organization, and conventions of the software configuration documentation for your router. It contains the following sections: Objectives, page 1 Audience, page 1 Conventions, page 1 Obtaining Documentation, page 2 Documentation Feedback, page 3 Obtaining Technical Assistance, page 3 Obtaining Additional Publications and Information, page 5 Objectives These documents explains how to configure and maintain your Cisco router. Audience These documents are designed for the person installing, configuring, and maintaining the Cisco router, who should be familiar with networking technology and terminology. Conventions These documents use the conventions listed in Table 1 to convey instructions and information. Corporate Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA USA Copyright 2004 Cisco Systems, Inc. All rights reserved.

2 Obtaining Documentation Table 1 Command Conventions Convention boldface font italic font Description Commands and keywords. Variables for which you supply values. [ ] Optional keywords or arguments appear in square brackets. {x y z} A choice of required keywords appears in braces separated by vertical bars. You must select one. screen font Examples of information displayed on the screen. boldface screen Examples of information you must enter. font < > Nonprinting characters, for example passwords, appear in angle brackets in contexts where italics are not available. [ ] Default responses to system prompts appear in square brackets. Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the manual. Timesaver Means the described action saves time. You can save time by performing the action described in the paragraph. Tip Means the following information will help you solve a problem. The tips information might not be troubleshooting or even an action, but could be useful information, similar to a Timesaver. Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data. Obtaining Documentation Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems. Cisco.com You can access the most current Cisco documentation at this URL: 2 Preface OL

3 Documentation Feedback You can access the Cisco website at this URL: You can access international Cisco websites at this URL: Ordering Documentation For information on obtaining documentationsee the monthly What s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: You can order Cisco documentation in these ways: Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool: Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at or, elsewhere in North America, by calling NETS (6387). Documentation Feedback For your convenience a documentation feedback form is located at the bottom of every online document. You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address: Cisco Systems Attn: Customer Document Ordering 170 West Tasman Drive San Jose, CA We appreciate your comments. Obtaining Technical Assistance For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, Cisco Technical Support provides 24-hour-a-day, award-winning technical assistance. The Cisco Technical Support Website on Cisco.com features extensive online support resources. In addition, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not hold a valid Cisco service contract, contact your reseller. OL Preface 3

4 Obtaining Technical Assistance Cisco Technical Support Website The Cisco Technical Support Website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, 365 days a year, at this URL: Access to all tools on the Cisco Technical Support Website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL: Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting a web or phone request for service. You can access the CPI tool from the Cisco Technical Support Website by clicking the Tools & Resources link under Documentation & Tools. Choose Cisco Product Identification Tool from the Alphabetical Index drop-down list, or click the Cisco Product Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: by product ID or model name; by tree view; or for certain products, by copying and pasting show command output. Search results show an illustration of your product with the serial number label location highlighted. Locate the serial number label on your product and record the information before placing a service call. Submitting a Service Request Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco TAC engineer. The TAC Service Request Tool is located at this URL: For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco TAC engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly. To open a service request by telephone, use one of the following numbers: Asia-Pacific: (Australia: ) EMEA: USA: For a complete list of Cisco TAC contacts, go to this URL: Definitions of Service Request Severity To ensure that all service requests are reported in a standard format, Cisco has established severity definitions. Severity 1 (S1) Your network is down, or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation. 4 Preface OL

5 Obtaining Additional Publications and Information Severity 2 (S2) Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation. Severity 3 (S3) Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels. Severity 4 (S4) You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations. Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and printed sources. Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Visit Cisco Marketplace, the company store, at this URL: The Cisco Products and Services Index describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Products and Services Index at this URL: Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press at this URL: Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL: World-class networking training is available from Cisco. You can view current offerings at this URL: OL Preface 5

6 Obtaining Additional Publications and Information CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iphone, IP/TV, iq Expertise, the iq logo, iq Net Readiness Scorecard, iquick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R) Copyright 2004 Cisco Systems, Inc. All rights reserved. 6 Preface OL

7 Overview Cisco 2800 series integrated service routers provide a range of models in which you can install a variety of modules. The number and type of modules vary by platform. Examples of these modules include WAN interface cards (WICs), voice interface cards (VICs), voice/wan interface cards (VWICs), high-speed WAN interface cards (HWICs.), packet voice data modules (PVDMs), network modules enhanced (NME), advanced integration modules (AIMs), and extension voice modules (EVMs). These routers feature the following: The Cisco 2801 router supports two HWIC/WIC/VIC/VWIC slots, capable of supporting both single-wide and double-wide HWICs, one WIC/VIC/VWIC slot, one VIC/VWIC (voice only) slot, two Fast Ethernet connections, optional inline power output of up to 120 Watts, and two advanced integration module (AIM) slots. The Cisco 2811 router, in addition to the features in the Cisco 2801, supports one single-wide network module enhanced (NME), four single-width or two double-wide HWICs, and optional inline power output of up to 160 Watts. In Cisco 2821 routers, in addition to the features in the Cisco 2811, the network module slot adds support for a single-wide network module enhanced extended (NME-X), and an additional slot supports an extension voice module (EVM). Three PVDMs are supported, the LAN ports support Gigabit Ethernet, and optional inline power output of up to 240 Watts is provided. In Cisco 2851 routers, in addition to the features in the Cisco 2821, the network module slot adds support for network module double-wide (NMDs) and network module enhanced extended double-wide (NME-XDs), and optional inline power output of up to 360 Watts is provided. Note The interface numbering and asynchronous line numbering on Cisco 2800 series routers are different from the numbering schemes used on other Cisco modular routers. For details, see the hardware installation documentation for your router. Corporate Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA USA Copyright 2004 Cisco Systems, Inc. All rights reserved.

8 Cisco 2800 Series Software Configuration Documentation Cisco 2800 Series Software Configuration Documentation Unlike traditional documentation, wherein all of the information appears within one printed book, the Cisco 2800 series routers software configuration documentation takes advantage of the capabilities inherent in web-based presentation. This includes extensive hyperlinking to other information, tools, and many other resources on Cisco.com. Instead of chapters, each topic area can be accessed independently. At the top level, available at Cisco 2800 Series Software Configuration, the main software configuration topics include: Basic Software Configuration Basic Software Configuration Using the Setup Command Facility Basic Software Configuration Using the Cisco IOS Command-Line Interface Finding Feature Documentation Configuration Examples Troubleshooting and Maintenance Upgrading the System Image Using CompactFlash Memory Cards Using the ROM Monitor Changing the Configuration Register Settings Troubleshooting Links Note Besides the setup facility and the IOS command-line interface, a third way of configuring Cisco routers is through the Cisco Router and Security Device Manager. Additional information about SDM features, is available at this URL: Note You must have an account on Cisco.com to access many of the available tools. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box and follow the instructions. Contents Following is a list of the main topics covered in the remainder of this overview: Performing Initial Configuration, page 3 Using the Cisco IOS Startup Sequence, page 8 2 Overview OL

9 Performing Initial Configuration Performing Initial Configuration You can configure your router by using one of the following methods: Initial Configuration Using the Cisco Router and Security Device Manager, page 3 Initial Configuration Using the Setup Command Facility, page 4 Initial Configuration Using the Command-Line Interface, page 7 Initial Configuration Using the Cisco Router and Security Device Manager Note We recommend that you use the Cisco Router and Security Device Manager to configure your router. Built-in verification systems and sanity checks help to ensure both correct configurations and robust security practices. The Cisco Router and Security Device Manager (SDM) is an easy-to-use device management tool that allows you to configure Cisco IOS security features and network connections through an intuitive web-based graphical user interface.you can use SDM wizards to: Configure additional LAN and WAN connections Create firewalls Configure Virtual Private Network (VPN) connections Perform security audits SDM also provides an advanced mode, through which you can configure advanced features, such as Firewall Policy, Network Address Translation (NAT), VPNs, routing protocols, and other options. For More Information About SDM and About Your Router For additional information about SDM features, refer to the SDM online help. Additional information about SDM is also available at this URL: Here you can find detailed information about SDM, including an SDM FAQ, data sheet, customer presentation, Flash demo, and links to technical documentation and product updates. Refer to the quick start guide for your router for other procedures, such as connecting a PC to the router console port so that you can use the CLI when you need to, and using the router LEDs to verify installation. The quick start guide may also contain important warranty information. Obtaining the Latest Version of SDM SDM is regularly enhanced to provide new features. If you are already running SDM on the router, you can update SDM automatically by clicking on the Tools menu and selecting Update SDM. SDM will determine whether there is a more recent version available and enables you to download and install it on the router. If you have a supported router that does not have SDM installed, you can download the latest version of SDM free of charge. Instructions for installing it on your router can be found at this URL: OL Overview 3

10 Performing Initial Configuration You should consult the SDM release notes to determine if SDM is supported for the router on which you want to install it. If the following messages appear at the end of the startup sequence, Cisco Router and Security Device Manager (SDM) is installed on your router: yourname con0 is now available Press RETURN to get started. Tip If these messages do not appear, SDM was not shipped with your router. If you want to use SDM, you can download the latest version of SDM and instructions for installing it on your router from the following URL: To obtain the SDM quick start guide, SDM release notes, and other SDM documentation, go to and click the Technical Documentation link. For instructions on configuring your router by using SDM, refer to the Cisco Router and Security Device Manager (SDM) Quick Start Guide that shipped with your router. Initial Configuration Using the Setup Command Facility This section shows how to use the setup command facility to configure a host name for the router, set passwords, and configure an interface for communication with the management network. If the following messages appear at the end of the startup sequence, the setup command facility has been invoked automatically: --- System Configuration Dialog --- At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Would you like to enter the initial configuration dialog? [yes/no]: The setup command facility prompts you for basic information about your router and network, and it creates an initial configuration file. After the configuration file is created, you can use the CLI or Security Device Manager to perform additional configuration. The prompts in the setup command facility vary, depending on your router model, the installed interface modules, and the software image. The following example and the user entries (in bold) are shown as examples only. Note If you make a mistake while using the setup command facility, you can exit and run the setup command facility again. Press Ctrl-C, and enter the setup command at the privileged EXEC mode prompt (Router#). Step 1 To proceed using the setup command facility, enter yes: Would you like to enter the initial configuration dialog? [yes/no]: yes 4 Overview OL

11 Performing Initial Configuration Step 2 When the following messages appear, enter yes to enter basic management setup: At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system Would you like to enter basic management setup? [yes/no]: yes Step 3 Step 4 Step 5 Step 6 Step 7 Enter a hostname for the router (this example uses Router): Configuring global parameters: Enter host name [Router]: Router Enter an enable secret password. This password is encrypted (more secure) and cannot be seen when viewing the configuration: The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: xxxxxx Enter an enable password that is different from the enable secret password. This password is not encrypted (less secure) and can be seen when viewing the configuration: The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: xxxxxx Enter the virtual terminal password, which prevents unauthenticated access to the router through ports other than the console port: The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: xxxxxx Respond to the following prompts as appropriate for your network: Configure SNMP Network Management? [yes]: Community string [public]: A summary of the available interfaces is displayed. Note The interface numbering that appears depends on the type of Cisco modular router platform and on the installed interface modules and cards. Current interface summary Controller Timeslots D-Channel Configurable modes Status T1 0/ pri/channelized Administratively up Any interface listed with OK? value "NO" does not have a valid configuration Interface IP-Address OK? Method Status Prol FastEthernet0/0 unassigned NO unset up up FastEthernet0/1 unassigned NO unset up dow OL Overview 5

12 Performing Initial Configuration Step 8 Step 9 Step 10 Select one of the available interfaces for connecting the router to the management network: Enter interface name used to connect to the management network from the above interface summary: fastethernet0/0 Respond to the following prompts as appropriate for your network: Configuring interface FastEthernet0/0: Use the 100 Base-TX (RJ-45) connector? [yes]: yes Operate in full-duplex mode? [no]: no Configure IP on this interface? [yes]: yes IP address for this interface: Subnet mask for this interface [ ] : Class B network is , 26 subnet bits; mask is /16 The configuration is displayed: The following configuration command script was created: hostname Router enable secret 5 $1$D5P6$PYx41/lQIASK.HcSbfO5q1 enable password xxxxxx line vty 0 4 password xxxxxx snmp-server community public no ip routing interface FastEthernet0/0 no shutdown speed 100 duplex half ip address interface FastEthernet0/1 shutdown no ip address end Step 11 Respond to the following prompts. Select [2] to save the initial configuration. [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit. Enter your selection [2]: 2 Building configuration... Use the enabled mode 'configure' command to modify this configuration. Press RETURN to get started RETURN The user prompt is displayed. Router> Step 12 Verify the initial configuration. See the Verifying the Initial Configuration section on page 8 for verification procedures. For more information, see the Basic Software Configuration Using the Setup Command Facility section, available at this URL: l 6 Overview OL

13 Performing Initial Configuration Initial Configuration Using the Command-Line Interface This section describes briefly how to display a command-line interface (CLI) prompt for configuration using the CLI. You can use the CLI if the following messages appear at the end of the startup sequence: --- System Configuration Dialog --- At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Would you like to enter the initial configuration dialog? [yes/no]: If these messages do not appear, SDM and a default configuration file were installed on the router at the factory. To use SDM to configure the router, see the Initial Configuration Using the Cisco Router and Security Device Manager section on page 3. Note Be sure to save your configuration changes occasionally so that they are not lost during resets, power cycles, or power outages. Use the copy running-config startup-config command at the privileged EXEC mode prompt (Router#) to save the configuration to NVRAM. Step 1 Step 2 To proceed with manual configuration using the CLI, enter no when the power-up messages end: Would you like to enter the initial configuration dialog? [yes/no]: no Press Return to terminate autoinstall and continue with manual configuration: Would you like to terminate autoinstall? [yes] Return Several messages appear, ending with a line similar to the following: Copyright (c) by cisco Systems, Inc. Compiled <date> <time> by <person> Step 3 Step 4 Step 5 Press Return to display the Router> prompt:... flashfs[4]: Initialization complete. Router> Enter privileged EXEC mode: Router> enable Router# Verify the initial configuration. See the Verifying the Initial Configuration section on page 8 for verification procedures. For more information on using the CLI for router configuration, see the Basic Software Configuration Using the Cisco IOS Command-Line Interface section, available at this URL: OL Overview 7

14 Using the Cisco IOS Startup Sequence Verifying the Initial Configuration To verify that the new interfaces are operating correctly, perform the following tests: To verify that the interfaces are operating correctly and that the interfaces and line protocol are in the correct state up or down enter the show interfaces command. To display a summary status of the interfaces configured for IP, enter the show ip interface brief command. To verify that you configured the correct host name and password, enter the show configuration command. When you have completed and verified the initial configuration, your Cisco router is ready to configure for specific functions. Using the Cisco IOS Startup Sequence This section explains how to use the IOS Startup sequence to configure your router, as an alternative to using SDM. Note Because SDM uses a default configuration file, if you have used SDM to configure your router, it will not execute the standard Cisco IOS startup sequence. Using the Cisco IOS setup utility enables you to use TFTP or BOOTP configuration download, or use other features available through the standard Cisco IOS startup sequence. The configuration file shipped with your router does the following: Provides an IP address for your Fast Ethernet interface, enabling an interface to your LAN Enables your router s HTTP/HTTPS server, allowing HTTP access from your LAN Creates a default username (cisco) and password (cisco) with privilege level 15 Enables Telnet/SSM access to the router from your LAN To erase the existing configuration and use the Cisco IOS startup sequence, perform the following steps. Note SDM remains installed on the router. See the Enabling SDM on a Router Configured to Use the IOS Startup Sequence section on page 9 for instructions to reenable it. Step 1 Step 2 Step 3 Connect the light blue console cable, included with your router, from the blue console port on your router to a serial port on your PC. Refer to the hardware installation guide that came with your router for instructions. Connect the power supply to your router, plug the power supply into a power outlet, and turn on your router. Refer to the quick start guide that came with your router for instructions. Use Hyperterminal or a similar terminal emulation program on your PC, with the terminal emulation settings of 9600 baud, 8 data bits, no parity, 1 stop bit, and no flow control, to connect to your router. 8 Overview OL

15 Using the Cisco IOS Startup Sequence Step 4 At the prompt, enter the enable command. The default configuration file does not configure an enable password: yourname> enable yourname# Step 5 Step 6 Step 7 Step 8 Enter the erase startup-config command: yourname# erase startup-config Confirm the command by pressing Enter. Enter the reload command: yourname# reload Confirm the command by pressing Enter. The router begins executing the standard startup sequence. If you want to use SDM to perform subsequent configurations for the router, you must reconfigure the router manually to support web-based applications, and the Telnet and Secure Shell (SSH) protocols. You must also create a user account with a privilege level of 15. See the Enabling SDM on a Router Configured to Use the IOS Startup Sequence section on page 9 for information on doing this. Enabling SDM on a Router Configured to Use the IOS Startup Sequence If you erased the factory startup configuration to use the IOS startup sequence, you can still use SDM. To do so, you must configure the router to support web-based applications, configure it with a user account defined with privilege level 15, and then configure it to support the Telnet and SSH protocols. These changes can be made using a telnet session or using a console connection. Configuring the Router to Support Web-Based Applications, a User with Priv 15, and Telnet/SSH Step 1 Step 2 Enable the HTTP/HTTPS server on the router, using the following Cisco IOS commands in the global configuration mode: Router(config)#ip http server Router(config)#ip http secure-server Router(config)#ip http authentication local If the router uses an IPSec IOS image, the HTTPS server is enabled. Otherwise only the HTTP server is enabled. Create a user account with privilege level 15 (enable privileges, if necessary). Router(config)#username <username> privilege 15 password 0 <password> Replace <username> and <password> with the username and password of your choosing. Step 3 Configure SSH and Telnet for local login and privilege level 15: line vty 0 4 privilege level 15 login local transport input telnet transport input telnet ssh OL Overview 9

16 Using the Cisco IOS Startup Sequence Step 4 (Optional) Enable local logging to support the log monitoring function: Router(config)#logging buffered warning To use SDM on a router that has received a manual configuration, see the Starting SDM on a Manually Configured Router section on page 10. Starting SDM on a Manually Configured Router Note By default, the DHCP server is turned off on the Cisco 28xx series routers. SDM is a web-based application that must be run from a PC that is connected to the router over a LAN. If the router is configured as a DHCP server, the PC must be configured to receive an IP address automatically. If the router is not configured as a DHCP server, you must configure the PC with a static IP address on the same subnet as the router interface to which you are connecting the PC. For example, if the router has the IP address , and the subnet mask is , you must configure the PC to use a network address in the range through , and use the same subnet mask as the router. Step 1 Step 2 Open a web browser on the PC, and enter the IP address for the router. The specifies that the Secure Socket Layer (SSL) protocol will be used for a secure connection. You can use if SSL is not available. Enter the username and password that you specified in Step 2 of Configuring the Router to Support Web-Based Applications, a User with Priv 15, and Telnet/SSH. To continue configuring your router, see the Initial Configuration Using the Cisco Router and Security Device Manager section on page 3. CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iphone, IP/TV, iq Expertise, the iq logo, iq Net Readiness Scorecard, iquick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R) Copyright 2004 Cisco Systems, Inc. All rights reserved. 10 Overview OL

17 Basic Software Configuration Using the Setup Command Facility You can configure your router by using the Cisco Router and Security Device Manager (SDM), the Cisco IOS setup command facility, or the Cisco IOS command-line interface (CLI). Note Wherever possible, we recommend that you use SDM to configure your router. For information on the availability and use of SDM, see the quick start guide that shipped with your router. The software configuration documentation describes how to perform configuration tasks by using the CLI. However, this specific document describes how to perform basic configurations by using the Cisco IOS setup command facility. Contents Platforms Supported by This Document, page 1 Information About the Setup Command Facility, page 2 Using the Setup Command Facility to Perform Basic Configuration, page 2 Examples of Using the Setup Command Facility to Configure Interface Parameters, page 5 Completing the Configuration, page 25 Platforms Supported by This Document Use this document with the following platforms: Cisco 1800 series routers Cisco 2800 series routers Cisco 3800 series routers Corporate Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA USA Copyright 2004 Cisco Systems, Inc. All rights reserved.

18 Information About the Setup Command Facility Information About the Setup Command Facility The setup command facility prompts you to enter the information that is needed to configure a router quickly. The facility steps you through a basic configuration, including LAN and WAN interfaces. For more general information about the setup command facility, see the following document: Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2: Part 1: Cisco IOS User Interfaces: Using AutoInstall and Setup Using the Setup Command Facility to Perform Basic Configuration This section shows how to configure a hostname for the router, set passwords, and configure an interface for communication with the management network. Note The messages that will be displayed will vary, depending on your router model, the installed interface modules, and the software image. The following example and the user entries (in bold) are shown as examples only. Note If you make a mistake while using the setup command facility, you can exit and run the setup command facility again. Press Ctrl-C, and enter the setup command in privileged EXEC mode (Router#). Step 1 Enter the setup command facility by using one of the following methods: From the Cisco IOS CLI, enter the setup command in privileged EXEC mode: Router> enable Password: <password> Router# setup --- System Configuration Dialog --- Continue with configuration dialog? [yes/no]: If your router reloads and does not already have a configuration file, you are prompted to enter the setup command facility: Would you like to enter the initial configuration dialog? [yes/no]: Step 2 To proceed using the setup command facility, enter yes. 2 Basic Software Configuration Using the Setup Command Facility OL

19 Using the Setup Command Facility to Perform Basic Configuration Step 3 When the following messages appear, enter yes to enter basic management setup: At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system Would you like to enter basic management setup? [yes/no]: yes Step 4 Step 5 Step 6 Step 7 Step 8 Enter a hostname for the router (this example uses myrouter): Configuring global parameters: Enter host name [Router]: myrouter Enter an enable secret password. This password is encrypted (for more security) and cannot be seen when viewing the configuration. The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: xxxxxx Enter an enable password that is different from the enable secret password. This password is not encrypted (and is less secure) and can be seen when viewing the configuration. The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: xxxxxx Enter the virtual terminal password, which prevents unauthenticated access to the router through ports other than the console port: The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: xxxxxx Respond to the following prompts as appropriate for your network: Configure SNMP Network Management? [yes]: Community string [public]: A summary of the available interfaces is displayed. Note The interface numbering that appears is dependent on the type of Cisco modular router platform and on the installed interface modules and cards. Current interface summary Controller Timeslots D-Channel Configurable modes Status T1 0/ pri/channelized Administratively up Any interface listed with OK? value "NO" does not have a valid configuration Interface IP-Address OK? Method Status Prol FastEthernet0/0 unassigned NO unset up up FastEthernet0/1 unassigned NO unset up dow OL Basic Software Configuration Using the Setup Command Facility 3

20 Using the Setup Command Facility to Perform Basic Configuration Step 9 Step 10 Select one of the available interfaces for connecting the router to the management network: Enter interface name used to connect to the management network from the above interface summary: fastethernet0/0 Respond to the following prompts as appropriate for your network: Configuring interface FastEthernet0/0: Use the 100 Base-TX (RJ-45) connector? [yes]: yes Operate in full-duplex mode? [no]: no Configure IP on this interface? [yes]: yes IP address for this interface: Subnet mask for this interface [ ] : Class B network is , 16 subnet bits; mask is /16 The configuration is displayed: The following configuration command script was created: hostname myrouter enable secret 5 $1$D5P6$PYx41/lQIASK.HcSbfO5q1 enable password xxxxxx line vty 0 4 password xxxxxx snmp-server community public no ip routing interface FastEthernet0/0 no shutdown media-type 100BaseX half-duplex ip address interface FastEthernet0/1 shutdown no ip address end Step 11 Respond to the following prompts. Select [2] to save the initial configuration: [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit. Enter your selection [2]: 2 Building configuration... Use the enabled mode 'configure' command to modify this configuration. Press RETURN to get started RETURN The user prompt is displayed: myrouter> After you complete the initial configuration tasks, you can start configuring your Cisco router for specific functions. 4 Basic Software Configuration Using the Setup Command Facility OL

21 Examples of Using the Setup Command Facility to Configure Interface Parameters Examples of Using the Setup Command Facility to Configure Interface Parameters The setup command facility prompts vary and depend on which fixed or modular interfaces are in your router. This section provides examples that use the setup command facility to perform the following operations: Fast Ethernet Interface Configuration, page 5 Gigabit Ethernet Interface Configuration, page 6 1- or 2-Port Serial Interface Configuration, page 8 Asynchronous/Synchronous Serial Interface Asynchronous Configuration, page 11 Asynchronous/Synchronous Serial Interface Synchronous Configuration, page 11 ISDN Basic Rate Interface Configuration, page 13 Channelized E1/T1 ISDN PRI Interface Configuration, page 19 1-Port, 4-Wire, 56-kbps DSU/CSU Configuration, page 24 Note The messages that will be displayed will vary, depending on your router model, the installed interface modules, and the software image. The following example and the user entries (in bold) are shown as examples only. Fast Ethernet Interface Configuration The following is a brief example of configuring a Fast Ethernet interface by using the setup command facility: Do you want to configure FastEthernet0/0 interface [yes]: Use the 100 Base-TX (RJ-45) connector? [yes]: Operate in full-duplex mode? [no]: Configure IP on this interface? [no]: yes IP address for this interface: Number of bits in subnet field [0]: Class A network is , 0 subnet bits, mask is /8 Configure IPX on this interface? [yes]: IPX network number [1]: Need to select encapsulation type [0] sap (IEEE 802.2) [1] snap (IEEE SNAP) [2] arpa (Ethernet_II) [3] novell-ether (Novell Ethernet_802.3) Enter the encapsulation type [2]: Note Cisco 1841 and Cisco 2801 routers have a hardware limitation on the Fast Ethernet ports FE0/0 and FE0/1. In half-duplex mode, when traffic reaches or exceeds 100% capacity (equal to or greater than 5 Mbps in each direction), the interface will experience excessive collisions and reset once per second. To avoid this problem, traffic must be limited to less than 100% of capacity. OL Basic Software Configuration Using the Setup Command Facility 5

22 Examples of Using the Setup Command Facility to Configure Interface Parameters Gigabit Ethernet Interface Configuration The following is a brief example of configuring a Gigabit Ethernet interface by using the setup command facility: Note The Gigabit Ethernet interface is not supported on Cisco 1841, Cisco 2801, or Cisco 2811 routers. Configuring interface GigabitEthernet0/0: Configure IP on this interface? [yes]: IP address for this interface [ ]: Subnet mask for this interface [ ] : Class A network is , 8 subnet bits; mask is /8 Note On Cisco 3800 series routers, the port gig 0/0 supports both the small form-factor pluggable Gigabit Ethernet Interface Converter (SFP GBIC) and RJ-45 media types. The port gig 0/1 supports only RJ-45. To select between SFP or RJ-45 for port gig 0/0, use the media-type command. More details follow in the Selecting the Port for the Gigabit Ethernet Interface section on page 6. The following are two examples of configurations for the Gigabit Ethernet (GE) interface. The first example shows a sample configuration for RJ-45 mode, applicable to either port gig 0/0 or port gig 0/1: interface GigabitEthernet0/0 ip address duplex auto speed auto media-type RJ-45 SFP mode (on Cisco 3800 seriers routers only) is available only on port gig 0/0: interface GigabitEthernet0/0 ip address duplex auto speed auto media-type sfp Selecting the Port for the Gigabit Ethernet Interface The SFP port is supported for the GE port 0 only. GE port 1 supports only RJ-45 (or copper mode) operation. To select SFP type for GE port 0, use the following commands from the command-line interface (CLI): router(config)# int gigabitethernet 0/0 router(config-if)# media-type sfp GigabitEthernet0/0: Changing media to SFP. Note The SFP port can only be set to 1000-Mbps or automatic speed. Duplex can be set to full-duplex or automatic mode. Half-duplex communication is not supported. 6 Basic Software Configuration Using the Setup Command Facility OL

23 Examples of Using the Setup Command Facility to Configure Interface Parameters The following is a typical show running config command output for gig 0/0: router# show run int gigabitethernet 0/0 Building configuration... Current configuration : 156 bytes interface GigabitEthernet0/0 no ip address load-interval 30 shutdown duplex auto speed auto media-type sfp no cdp enable end Flow Control Capabilities Both the RJ-45 (copper) and SFP (fiber) modes of operations suppot flow control. This means that during congestion conditions, pause frames are sent to the far end by the Media Access Control (MAC) hardware. Also, the MAC hardware will react to the pause frames received. There is no way in current MAC hardware to track the number of pause frames received or sent. Flow control is on by default Currently, there is no command to turn off the flow control capability for any of the Gigabit Ethernet ports in any of the RJ45 or SFP modes. Speed/Duplex Settings for the Gigabit Ethernet Ports Typically, speed and/or duplex communications are configured manually using the speed and/or duplex CLI commands. Note For the SFP port, the speed settings can be set to 1000 Mbps or auto only, and duplex can be set to full or auto only. The following examples show the available options: interface gigabitethernet 0/[0-1] router(config-if)# speed? 10 Force 10 Mbps operation 100 Force 100 Mbps operation 1000 Force 1000 Mbps operation auto Enable AUTO speed configuration router(config-if)# duplex? auto Enable AUTO duplex configuration full Force full duplex operation half Force half-duplex operation OL Basic Software Configuration Using the Setup Command Facility 7

24 Examples of Using the Setup Command Facility to Configure Interface Parameters If the speed is set to 1000 Mbps, the CLI duplex options change as follows: router(config-if)# speed 1000 router(config-if)# duplex? auto Enable AUTO duplex configuration full Force full duplex operation Similarly, when duplex is set to half, the supported speeds are 10 Mbps, 100 Mbps, or auto as shown here: router(config-if)# speed? 10 Force 10 Mbps operation 100 Force 100 Mbps operation auto Enable AUTO speed configuration If the media type is SFP, the available speed and duplex settings are as follows: router(config-if)# media-type sfp GigabitEthernet0/0: Changing media to SFP. You may need to update the speed and duplex settings for this interface. router(config-if)# speed? 1000 Force 1000 Mbps operation auto Enable AUTO speed configuration router(config-if)# duplex? auto Enable AUTO duplex configuration full Force full duplex operation Note If the speed and duplex setting for g0/0 in SFP mode is speed=1000 and duplex=full, autonegotiation is in forced mode and autonegotation is turned off. For all other mode settings of speed or duplex for SFP, autonegotiation is turned on. If speed=1000 and duplex=full modes are specified for both g0/0 and g0/1 interfaces in copper mode (RJ-45), autonegotiation is still turned on. This is considered to be in forced mode for speed=1000. This occurence is per the Annex 28D.5 extensions required for clause 40 (1000-BASE-T) IEEE When the speed and duplex modes are forced for 10/100, and full or half modes are forced for g0/0 and g0/1 interfaces, autonegotiation is turned off. If the interfaces are not in forced mode for 10/100 speeds, then autonegotation will be turned on. 1- or 2-Port Serial Interface Configuration The following is a sample configuration for a 1- or 2-port serial interface: Do you want to configure Serial0/0/0 interface? [yes]: Some encapsulations supported are ppp/hdlc/frame-relay/lapb/atm-dxi/smds/x25 Choose encapsulation type [ppp]: 8 Basic Software Configuration Using the Setup Command Facility OL

25 Examples of Using the Setup Command Facility to Configure Interface Parameters Note The following sections describe the prompts for each encapsulation type. For PPP and High-Level Data Link Control (HDLC) encapsulation, no further configuration is needed. No serial cable seen. Choose mode from (dce/dte) [dte]: If no cable is plugged in to your router, you must indicate whether the interface is to be used as DTE or DCE. If a cable is present, the setup command facility determines the DTE/DCE status. If the serial cable is DCE, you see the following prompt: Serial interface needs clock rate to be set in dce mode. The following clock rates are supported on the serial interface , 2400, 4800, 9600, 19200, , 64000, 72000, , , , , , , , Choose clock rate from above: [ ]: Configure IP on this interface? [yes]: IP address for this interface: Subnet mask for this interface [ ]: Class A network is , 8 subnet bits; mask is /8 Configure IPX on this interface? [no]: yes IPX network number [8]: Frame Relay Encapsulation The following is a sample configuration for Frame Relay encapsulation: The following lmi-types are available to be set, when connected to a frame relay switch [0] none [1] ansi [2] cisco [3] q933a Enter lmi-type [2]: Note The setup command facility prompts you for the data-link connection identifier (DLCI) number only if you specify none for the Local Management Interface (LMI) type. If you accept the default or specify another LMI type, the DLCI number is provided by the specified protocol. Enter the DLCI number for this interface [16]: Do you want to map a remote machine s IP address to dlci? [yes]: IP address for the remote interface: Do you want to map a remote machine s IPX address to dlci? [yes]: IPX address for the remote interface: Serial interface needs clock rate to be set in dce mode. The following clock rates are supported on the serial interface , 2400, 4800, 9600, 19200, , 64000, 72000, , , , , , , , choose speed from above: [ ]: 1200 Configure IP on this interface? [yes]: IP address for this interface: Subnet mask for this interface [ ]: OL Basic Software Configuration Using the Setup Command Facility 9