[HELP] Second hand 877W - complete n00b, setup?

Author	All Replies
spamalam @co.uk	[HELP] Second hand 877W - complete n00b, setup? Hello, I'm hoping someone can help me out here because I'm in over my head atm. I recently bought a 877w (uk, i'm from england... hello )... i also bought a serial cable and plugged it in. Using putty i connected in and was met by a basic doohikey, i gave it the following values: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE Technical Support: »www.cisco.com/techsupport Copyright (c) 2006 by cisco Systems, Inc. C870 series (Board ID: 1-148) platform with 131072 Kbytes of main memory Booting flash:/c870-advipservicesk9-mz.124-11.XJ3.bin Self decompressing the image : ################################################# ############################################################### [OK] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(11)XJ3, RELEASE SOFTWARE (fc1) Synched to technology version 12.4(11)T Technical Support: »www.cisco.com/techsupport Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Wed 25-Apr-07 14:27 by prod_rel_team Image text-base: 0x8002008C, data-base: 0x81E6E5E4 This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: »www.cisco.com/wwl/export/crypto/···qrg.html If you require further assistance please contact us by sending email to export@cisco.com. Installed image archive Cisco 877W (MPC8272) processor (revision 0x300) with 118784K/12288K bytes of mem ory. Processor board ID FCZ1141R0E3 MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10 4 FastEthernet interfaces 1 ATM interface 1 802.11 Radio 128K bytes of non-volatile configuration memory. 28672K bytes of processor board System flash (Intel Strataflash) --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: yes At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system Would you like to enter basic management setup? [yes/no]: yes Configuring global parameters: Enter host name [Router]: cisco-877w The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: xxx The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: xxxx The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: xxxx Configure SNMP Network Management? [yes]: yes Community string [public]: XXXX Current interface summary Any interface listed with OK? value "NO" does not have a valid configuration Interface IP-Address OK? Method Status Protocol FastEthernet0 unassigned YES unset initializing down FastEthernet1 unassigned YES unset initializing down FastEthernet2 unassigned YES unset initializing down FastEthernet3 unassigned YES unset initializing down Dot11Radio0 unassigned NO unset initializing down ATM0 unassigned NO unset initializing down Vlan1 unassigned YES unset up down Enter interface name used to connect to the management network from the above interface summary: FastEthernet0 Configuring interface FastEthernet0: Configure IP on this interface? [no]: yes IP address for this interface: 10.1.28.100 Subnet mask for this interface [255.0.0.0] : 255.255.255.0 Class A network is 10.0.0.0, 24 subnet bits; mask is /24 The following configuration command script was created: hostname cisco-877w enable secret 5 $1$k/6Q$x.tRPvEtuqHVS74gClM.V/ enable password xxxxx line vty 0 4 password xxxxx snmp-server community XXXX ! no ip routing ! interface FastEthernet0 no shutdown ip address 10.1.28.100 255.255.255.0 ! interface FastEthernet1 shutdown no ip address ! interface FastEthernet2 shutdown no ip address ! interface FastEthernet3 shutdown no ip address ! interface Dot11Radio0 shutdown no ip address ! interface ATM0 shutdown no ip address ! interface Vlan1 shutdown no ip address ! end [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit. Enter your selection [2]: 2 % IP addresses may not be configured on L2 links. Building configuration... Use the enabled mode 'configure' command to modify this configuration. Press RETURN to get started! System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE Technical Support: »www.cisco.com/techsupport Copyright (c) 2006 by cisco Systems, Inc. C870 series (Board ID: 1-148) platform with 131072 Kbytes of main memory Booting flash:/c870-advipservicesk9-mz.124-11.XJ3.bin Self decompressing the image : ################################################# ############################################################### [OK] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(11)XJ3, RELEASE SOFTWARE (fc1) Synched to technology version 12.4(11)T Technical Support: »www.cisco.com/techsupport Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Wed 25-Apr-07 14:27 by prod_rel_team Image text-base: 0x8002008C, data-base: 0x81E6E5E4 This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: »www.cisco.com/wwl/export/crypto/···qrg.html If you require further assistance please contact us by sending email to export@cisco.com. Installed image archive Cisco 877W (MPC8272) processor (revision 0x300) with 118784K/12288K bytes of mem ory. Processor board ID FCZ1141R0E3 MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10 4 FastEthernet interfaces 1 ATM interface 1 802.11 Radio 128K bytes of non-volatile configuration memory. 28672K bytes of processor board System flash (Intel Strataflash) --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: yes At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system Would you like to enter basic management setup? [yes/no]: yes Configuring global parameters: Enter host name [Router]: cisco-877w The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: dogfood The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: xxxx The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: xxxx Configure SNMP Network Management? [yes]: yes Community string [public]: XXXX Current interface summary Any interface listed with OK? value "NO" does not have a valid configuration Interface IP-Address OK? Method Status Protocol FastEthernet0 unassigned YES unset initializing down FastEthernet1 unassigned YES unset initializing down FastEthernet2 unassigned YES unset initializing down FastEthernet3 unassigned YES unset initializing down Dot11Radio0 unassigned NO unset initializing down ATM0 unassigned NO unset initializing down Vlan1 unassigned YES unset up down Enter interface name used to connect to the management network from the above interface summary: FastEthernet0 Configuring interface FastEthernet0: Configure IP on this interface? [no]: yes IP address for this interface: 10.1.28.100 Subnet mask for this interface [255.0.0.0] : 255.255.255.0 Class A network is 10.0.0.0, 24 subnet bits; mask is /24 The following configuration command script was created: hostname cisco-877w enable secret 5 $1$k/6Q$x.tRPvEtuqHVS74gClM.V/ enable password xxxxx line vty 0 4 password xxxxx snmp-server community XXXX ! no ip routing ! interface FastEthernet0 no shutdown ip address 10.1.28.100 255.255.255.0 ! interface FastEthernet1 shutdown no ip address ! interface FastEthernet2 shutdown no ip address ! interface FastEthernet3 shutdown no ip address ! interface Dot11Radio0 shutdown no ip address ! interface ATM0 shutdown no ip address ! interface Vlan1 shutdown no ip address ! end [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit. Enter your selection [2]: 2 % IP addresses may not be configured on L2 links. Building configuration... Use the enabled mode 'configure' command to modify this configuration. Press RETURN to get started! Mar 1 00:00:06.175: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized Mar 1 00:00:06.179: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled Mar 1 00:00:07.779: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up Mar 1 00:00:10.827: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up Mar 1 00:04:49.131: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down Mar 1 00:04:50.135: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down Mar 1 00:04:51.115: %LINK-5-CHANGED: Interface FastEthernet1, changed state to administratively down Mar 1 00:04:51.115: %LINK-5-CHANGED: Interface FastEthernet2, changed state to administratively down Mar 1 00:04:51.119: %LINK-5-CHANGED: Interface FastEthernet3, changed state to administratively down Mar 1 00:04:51.319: %LINK-5-CHANGED: Interface ATM0, changed state to administratively down Mar 1 00:04:51.319: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down Mar 1 00:04:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to down Mar 1 00:04:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down Mar 1 00:04:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down Mar 1 00:04:52.327: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to down Mar 1 00:04:52.327: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down Mar 1 00:08:51.371: %SYS-5-RESTART: System restarted -- Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(11)XJ3, RELEASE SOFTWARE (fc1) Synched to technology version 12.4(11)T Technical Support: »www.cisco.com/techsupport Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Wed 25-Apr-07 14:27 by prod_rel_team Mar 1 00:08:51.371: %SNMP-5-COLDSTART: SNMP agent on host cisco-877w is undergoing a cold start Mar 1 00:08:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:08:51.415: Unable to open socket on port 161 Mar 1 00:08:51.463: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF Mar 1 00:08:52.991: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up Mar 1 00:08:53.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down Mar 1 00:09:38.207: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to down Mar 1 00:09:40.703: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up Mar 1 00:09:41.703: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up Mar 1 00:09:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:09:51.415: Unable to open socket on port 161 cisco-877w> cisco-877w> cisco-877w> Mar 1 00:10:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:10:51.415: Unable to open socket on port 161 Mar 1 00:11:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:11:51.415: Unable to open socket on port 161 Mar 1 00:12:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:12:51.415: Unable to open socket on port 161 Mar 1 00:13:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:13:51.415: Unable to open socket on port 161 Mar 1 00:14:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket Mar 1 00:14:51.415: Unable to open socket on port 161 I set my pc to 10.1.28.101, and connected it to eth0. I have downloaded some software called Cisco Configuration Assistant and did a search for 10.1.28.100 but it says it couldn't connect. Can someone help me out here? Thank you!
	to forum · permalink · 2008-06-29 08:52:38 ·
linksysinfo join:2005-03-14 UK	just a thought - for a newbie like yourself you would be better to use the Security Device Manager rather than the cli.
	to forum · permalink · · 2008-06-29 15:00:14 ·
aryoba Premium,MVM join:2002-08-22	reply to spamalam I think CLI is fine for a newbie. You can always browse this forum FAQ for hints, tips, tricks; even some CLI introduction and sample configurations. In addition, there are great people here that are more than happy to help out as long as some attempt to self problem solving have shown Note that 877 model is designed to use with ADSL Internet. If you have let's say Cable Internet, then it won't work
	to forum · permalink · · 2008-06-29 16:43:50 ·
spamalam @co.uk	reply to linksysinfo just a thought - for a newbie like yourself you would be better to use the Security Device Manager rather than the cli. I have no software provided with the router... where can i get a copy of Security Device Manager? Does it work over the serial port because as the above shows, I'm having a little difficultly 'activating' the lan ports...
	to forum · permalink · 2008-06-29 17:03:33 ·
Innuendo Premium join:2002-12-20	reply to spamalam You can download SDM here: »www.cisco.com/go/sdm
	to forum · permalink · · 2008-06-29 17:13:19 ·
Lasko @cox.net	reply to spamalam To get going you need to set the IP address on interface vlan1. FastEthernet0 (as well as FastEthernet1, FastEthernet2 and FastEthernet3) are switch ports. The router has a 4 port switch built in. Do not assign IP addresses to these ports. Once you set the IP address on vlan1 and "no shut" it as well as "no shut" on the ethernet ports you may plug into any of the fastethernet ports and access the router via the network.
	to forum · permalink · 2008-06-29 22:07:53 ·
bigsy join:2001-07-18 UK	reply to spamalam There are some examples of basic access and setup given in the 850/870 series Software Configuration Guide. If you're in the UK chances are that you'll need to configure PPPoA with NAT and there's also an example of this in the above guide. If you want to go the SDM route, the latest version (2.5) is available for free download from this link.
	to forum · permalink · · 2008-06-30 01:42:36 ·
spamalam @co.uk	I've download SDM.. its asking for a router ip? How do i find out and set my router's ip? I would like to turn on management over http (via ethernet), and I would like to assign it 10.1.28.1 as its ip. At the moment i can only access via serial. Thank you
	to forum · permalink · 2008-07-03 14:37:13 ·
Concorde @cox.net	Did you follow the steps mentioned by Lasko above? It is straight forward - interface vlan1 ip address 10.1.28.100 255.255.255.0 no shutdown interface FastEthernet0 no shutdown Assign your PC the IP address 10.1.28.101 and plug it into FastEthernet port 0.
	to forum · permalink · 2008-07-03 21:52:17 ·
spamalam @co.uk	Yes I've done that, enable configure interface vlan1 ip address 10.1.28.1 255.255.255.0 no shutdown interface FastEthernet0 no shutdown exit exit I then assigned my machine 10.1.28.2... it found "network 3" as a local network only. I then loaded up the SDM and typed in 10.1.28.1; it failed and said there was no http running. I then tried the configuration assistant, selected create a community, gave it a name, then attempted to add a single ip (10.1.28.1). This also failed. I tried reading through the configuraiton pdf but it doesn't make much sense... I don't seem to be able to even manage over ethernet / see the router which I'd have throught would be the logical first step.
	to forum · permalink · 2008-07-05 10:09:53 ·
bigsy join:2001-07-18 UK	"I Want to Enable Cisco SDM on a Router I Configured Using the Cisco IOS Startup Sequence" Taken from »www.cisco.com/en/US/docs/routers···#wp44788 Step 1 Enable the router's HTTP/HTTPS server, using the following Cisco IOS commands: Router(config)# ip http server Router(config)# ip http secure-server Router(config)# ip http authentication local If the router uses an IPSec Cisco IOS image, the HTTPS server is enabled. Otherwise only the HTTP server is enabled. Step 2 Create a user account with privilege level 15 (enable privileges). Router(config)# username username privilege 15 password 0 password Replace username and password with the username and password that you want to configure. Step 3 Configure SSH and Telnet for local login and privilege level 15: Router(config)# line vty 0 4 Router(config-line)# privilege level 15 Router(config-line)# login local Router(config-line)# transport input telnet Router(config-line)# transport input telnet ssh Router(config-line)# exit Step 4 (Optional) Enable local logging to support the log monitoring function: Router(config)# logging buffered 51200 warning
	to forum · permalink · · 2008-07-05 10:28:54 ·
pfalk join:2008-07-01 Sunnyvale, CA ·Etheric Networks	I'm pretty sure that your router has the CRWS (web based setup tool). To launch it, just make sure that your LAN interface has been properly setup (if not, do a "show webflash:" you should see a bunch of files there, one of which has a name similar to: config.??? (I don't remember exactly what the extension is). Anyway, copy that file to running (copy webflash:config.* running), and then you should be able to get an ip address from the router to your PC (assuming that you have DHCP configured on your PC). then point your browser to 10.10.10.1 (or whatever IP address you end up having on the LAN interface of the router. The rest is done very simply. P.
	to forum · permalink · · 2008-07-06 18:49:25 ·
aryoba Premium,MVM join:2002-08-22	reply to bigsy Some comments on following said by bigsy : Step 1 Enable the router's HTTP/HTTPS server, using the following Cisco IOS commands: Router(config)# ip http server Router(config)# ip http secure-server Router(config)# ip http authentication local If you really have to have Web or Secure Web access, then you should lock down the source IP subnet using ACL. In addition, you may want to consider using either TACACS+ or RADIUS to store account instead relying solely on local account. said by bigsy : If the router uses an IPSec Cisco IOS image, the HTTPS server is enabled. Otherwise only the HTTP server is enabled. From the show version above, it looks like the IOS image support Security feature, hence it supports the HTTPS. Therefore, you may want to only enable the secure server instead both secure and non-secure server. said by bigsy : Step 2 Create a user account with privilege level 15 (enable privileges). Router(config)# username username privilege 15 password 0 password You may want to use secret parameter instead of password since the secret uses more secure method to encrypt password. said by bigsy : Router(config)# line vty 0 4 Router(config-line)# privilege level 15 Router(config-line)# login local You may not want to let everybody remote access in automatically having privilege level 15. You may want to let the router (or external TACACS+ or RADIUS if there is one) decides if the credential has privilege level 15 or lower. said by bigsy : Router(config-line)# transport input telnet Router(config-line)# transport input telnet ssh Router(config-line)# exit When you need to enable both telnet and ssh as the remote access method to use, then you don't need the transport input telnet since the transport input telnet ssh covers both telnet and ssh. Note that ssh requires key to work. The simplest way to have key is to generate one (if there is none yet) and store locally.
	to forum · permalink · · 2008-07-06 20:58:44 ·


Sunday, 12-Oct 00:40:31	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 9 years online! © 1999-2008 dslreports.com.republican-creole page compression OFF