[HELP] Second hand 877W - complete n00b, setup? in Cisco http://www.dslreports.com/forum/r20715451 en Fri, 05 Dec 2008 02:05:22 EDT Fri, 05 Dec 2008 02:05:22 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20750588 aryoba : Some comments on following

said by bigsy See Profile :

Step 1 Enable the router's HTTP/HTTPS server, using the following Cisco IOS commands:

Router(config)# ip http server

Router(config)# ip http secure-server

Router(config)# ip http authentication local
If you really have to have Web or Secure Web access, then you should lock down the source IP subnet using ACL. In addition, you may want to consider using either TACACS+ or RADIUS to store account instead relying solely on local account.

said by bigsy See Profile :

If the router uses an IPSec Cisco IOS image, the HTTPS server is enabled. Otherwise only the HTTP server is enabled.
From the show version above, it looks like the IOS image support Security feature, hence it supports the HTTPS. Therefore, you may want to only enable the secure server instead both secure and non-secure server.

said by bigsy See Profile :

Step 2 Create a user account with privilege level 15 (enable privileges).

Router(config)# username username privilege 15 password 0 password
You may want to use secret parameter instead of password since the secret uses more secure method to encrypt password.

said by bigsy See Profile :

Router(config)# line vty 0 4

Router(config-line)# privilege level 15

Router(config-line)# login local
You may not want to let everybody remote access in automatically having privilege level 15. You may want to let the router (or external TACACS+ or RADIUS if there is one) decides if the credential has privilege level 15 or lower.

said by bigsy See Profile :

Router(config-line)# transport input telnet

Router(config-line)# transport input telnet ssh

Router(config-line)# exit
When you need to enable both telnet and ssh as the remote access method to use, then you don't need the transport input telnet since the transport input telnet ssh covers both telnet and ssh.

Note that ssh requires key to work. The simplest way to have key is to generate one (if there is none yet) and store locally.]]> http://www.dslreports.com/forum/remark,20750588 Sun, 06 Jul 2008 20:58:44 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20750054 pfalk : I'm pretty sure that your router has the CRWS (web based setup tool).

To launch it, just make sure that your LAN interface has been properly setup (if not, do a "show webflash:"
you should see a bunch of files there, one of which has a name similar to: config.??? (I don't remember exactly what the extension is).
Anyway, copy that file to running (copy webflash:config.* running), and then you should be able to get an ip address from the router to your PC (assuming that you have DHCP configured on your PC).

then point your browser to 10.10.10.1 (or whatever IP address you end up having on the LAN interface of the router.

The rest is done very simply.

P.]]> http://www.dslreports.com/forum/remark,20750054 Sun, 06 Jul 2008 18:49:25 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20744862 bigsy : "I Want to Enable Cisco SDM on a Router I Configured Using the Cisco IOS Startup Sequence"
Taken from »www.cisco.com/en/US/docs/routers···#wp44788


Step 1 Enable the router's HTTP/HTTPS server, using the following Cisco IOS commands:

Router(config)# ip http server

Router(config)# ip http secure-server

Router(config)# ip http authentication local

If the router uses an IPSec Cisco IOS image, the HTTPS server is enabled. Otherwise only the HTTP server is enabled.

Step 2 Create a user account with privilege level 15 (enable privileges).

Router(config)# username username privilege 15 password 0 password

Replace username and password with the username and password that you want to configure.

Step 3 Configure SSH and Telnet for local login and privilege level 15:

Router(config)# line vty 0 4

Router(config-line)# privilege level 15

Router(config-line)# login local

Router(config-line)# transport input telnet

Router(config-line)# transport input telnet ssh

Router(config-line)# exit

Step 4 (Optional) Enable local logging to support the log monitoring function:

Router(config)# logging buffered 51200 warning
]]> http://www.dslreports.com/forum/remark,20744862 Sat, 05 Jul 2008 10:28:54 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20744793 anon : Yes I've done that,

enable
configure
interface vlan1
ip address 10.1.28.1 255.255.255.0
no shutdown
interface FastEthernet0
no shutdown
exit
exit

I then assigned my machine 10.1.28.2... it found "network 3" as a local network only.

I then loaded up the SDM and typed in 10.1.28.1; it failed and said there was no http running.

I then tried the configuration assistant, selected create a community, gave it a name, then attempted to add a single ip (10.1.28.1). This also failed.

I tried reading through the configuraiton pdf but it doesn't make much sense... I don't seem to be able to even manage over ethernet / see the router which I'd have throught would be the logical first step.]]> http://www.dslreports.com/forum/remark,20744793 Sat, 05 Jul 2008 10:09:53 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20739338 anon : Did you follow the steps mentioned by Lasko above? It is straight forward -

interface vlan1
ip address 10.1.28.100 255.255.255.0
no shutdown
interface FastEthernet0
no shutdown

Assign your PC the IP address 10.1.28.101 and plug it into FastEthernet port 0.]]> http://www.dslreports.com/forum/remark,20739338 Thu, 03 Jul 2008 21:52:17 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20737391 anon : I've download SDM.. its asking for a router ip?

How do i find out and set my router's ip?
I would like to turn on management over http (via ethernet), and I would like to assign it 10.1.28.1 as its ip.

At the moment i can only access via serial.

Thank you :)]]> http://www.dslreports.com/forum/remark,20737391 Thu, 03 Jul 2008 14:37:13 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20719017 bigsy : There are some examples of basic access and setup given in the 850/870 series Software Configuration Guide.
If you're in the UK chances are that you'll need to configure PPPoA with NAT and there's also an example of this in the above guide.

If you want to go the SDM route, the latest version (2.5) is available for free download from this link.]]> http://www.dslreports.com/forum/remark,20719017 Mon, 30 Jun 2008 01:42:36 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20718269 anon : To get going you need to set the IP address on interface vlan1. FastEthernet0 (as well as FastEthernet1, FastEthernet2 and FastEthernet3) are switch ports. The router has a 4 port switch built in. Do not assign IP addresses to these ports.

Once you set the IP address on vlan1 and "no shut" it as well as "no shut" on the ethernet ports you may plug into any of the fastethernet ports and access the router via the network.]]> http://www.dslreports.com/forum/remark,20718269 Sun, 29 Jun 2008 22:07:53 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20717092 Innuendo : You can download SDM here:

»www.cisco.com/go/sdm]]> http://www.dslreports.com/forum/remark,20717092 Sun, 29 Jun 2008 17:13:19 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20717038 anon :
just a thought - for a newbie like yourself you would be better to use the Security Device Manager rather than the cli.


I have no software provided with the router... where can i get a copy of Security Device Manager? Does it work over the serial port because as the above shows, I'm having a little difficultly 'activating' the lan ports...]]> http://www.dslreports.com/forum/remark,20717038 Sun, 29 Jun 2008 17:03:33 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20716956 aryoba : I think CLI is fine for a newbie. You can always browse this forum FAQ for hints, tips, tricks; even some CLI introduction and sample configurations. In addition, there are great people here that are more than happy to help out as long as some attempt to self problem solving have shown :D

Note that 877 model is designed to use with ADSL Internet. If you have let's say Cable Internet, then it won't work :)]]> http://www.dslreports.com/forum/remark,20716956 Sun, 29 Jun 2008 16:43:50 EDT Re: [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20716605 linksysinfo : just a thought - for a newbie like yourself you would be better to use the Security Device Manager rather than the cli.]]> http://www.dslreports.com/forum/remark,20716605 Sun, 29 Jun 2008 15:00:14 EDT [HELP] Second hand 877W - complete n00b, setup? http://www.dslreports.com/forum/remark,20715451 anon : Hello,

I'm hoping someone can help me out here because I'm in over my head atm. I recently bought a 877w (uk, i'm from england... hello :) )... i also bought a serial cable and plugged it in.

Using putty i connected in and was met by a basic doohikey, i gave it the following values:

System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
Technical Support: »www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.

C870 series (Board ID: 1-148) platform with 131072 Kbytes of main memory

Booting flash:/c870-advipservicesk9-mz.124-11.XJ3.bin
Self decompressing the image : #################################################

############################################################### [OK]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(11)XJ3,

RELEASE SOFTWARE (fc1)
Synched to technology version 12.4(11)T
Technical Support: »www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 25-Apr-07 14:27 by prod_rel_team
Image text-base: 0x8002008C, data-base: 0x81E6E5E4

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
»www.cisco.com/wwl/export/crypto/···qrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Installed image archive
Cisco 877W (MPC8272) processor (revision 0x300) with 118784K/12288K bytes of mem

ory.
Processor board ID FCZ1141R0E3
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
1 802.11 Radio
128K bytes of non-volatile configuration memory.
28672K bytes of processor board System flash (Intel Strataflash)

--- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: yes

At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.

Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system

Would you like to enter basic management setup? [yes/no]: yes
Configuring global parameters:

Enter host name [Router]: cisco-877w

The enable secret is a password used to protect access to
privileged EXEC and configuration modes. This password, after
entered, becomes encrypted in the configuration.
Enter enable secret: xxx

The enable password is used when you do not specify an
enable secret password, with some older software versions, and
some boot images.
Enter enable password: xxxx

The virtual terminal password is used to protect
access to the router over a network interface.
Enter virtual terminal password: xxxx
Configure SNMP Network Management? [yes]: yes
Community string [public]: XXXX

Current interface summary

Any interface listed with OK? value "NO" does not have a valid configuration

Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset initializing down
FastEthernet1 unassigned YES unset initializing down
FastEthernet2 unassigned YES unset initializing down
FastEthernet3 unassigned YES unset initializing down
Dot11Radio0 unassigned NO unset initializing down
ATM0 unassigned NO unset initializing down
Vlan1 unassigned YES unset up down

Enter interface name used to connect to the
management network from the above interface summary: FastEthernet0

Configuring interface FastEthernet0:
Configure IP on this interface? [no]: yes
IP address for this interface: 10.1.28.100
Subnet mask for this interface [255.0.0.0] : 255.255.255.0
Class A network is 10.0.0.0, 24 subnet bits; mask is /24

The following configuration command script was created:

hostname cisco-877w
enable secret 5 $1$k/6Q$x.tRPvEtuqHVS74gClM.V/
enable password xxxxx
line vty 0 4
password xxxxx
snmp-server community XXXX
!
no ip routing

!
interface FastEthernet0
no shutdown
ip address 10.1.28.100 255.255.255.0
!
interface FastEthernet1
shutdown
no ip address
!
interface FastEthernet2
shutdown
no ip address
!
interface FastEthernet3
shutdown
no ip address
!
interface Dot11Radio0
shutdown
no ip address
!
interface ATM0
shutdown
no ip address
!
interface Vlan1
shutdown
no ip address
!
end

[0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.

Enter your selection [2]: 2

% IP addresses may not be configured on L2 links.

Building configuration...
Use the enabled mode 'configure' command to modify this configuration.

Press RETURN to get started!

System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
Technical Support: »www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.

C870 series (Board ID: 1-148) platform with 131072 Kbytes of main memory

Booting flash:/c870-advipservicesk9-mz.124-11.XJ3.bin
Self decompressing the image : #################################################

############################################################### [OK]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(11)XJ3,

RELEASE SOFTWARE (fc1)
Synched to technology version 12.4(11)T
Technical Support: »www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 25-Apr-07 14:27 by prod_rel_team
Image text-base: 0x8002008C, data-base: 0x81E6E5E4

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
»www.cisco.com/wwl/export/crypto/···qrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Installed image archive
Cisco 877W (MPC8272) processor (revision 0x300) with 118784K/12288K bytes of mem

ory.
Processor board ID FCZ1141R0E3
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
1 802.11 Radio
128K bytes of non-volatile configuration memory.
28672K bytes of processor board System flash (Intel Strataflash)

--- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: yes

At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.

Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system

Would you like to enter basic management setup? [yes/no]: yes
Configuring global parameters:

Enter host name [Router]: cisco-877w

The enable secret is a password used to protect access to
privileged EXEC and configuration modes. This password, after
entered, becomes encrypted in the configuration.
Enter enable secret: dogfood

The enable password is used when you do not specify an
enable secret password, with some older software versions, and
some boot images.
Enter enable password: xxxx

The virtual terminal password is used to protect
access to the router over a network interface.
Enter virtual terminal password: xxxx
Configure SNMP Network Management? [yes]: yes
Community string [public]: XXXX

Current interface summary

Any interface listed with OK? value "NO" does not have a valid configuration

Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset initializing down
FastEthernet1 unassigned YES unset initializing down
FastEthernet2 unassigned YES unset initializing down
FastEthernet3 unassigned YES unset initializing down
Dot11Radio0 unassigned NO unset initializing down
ATM0 unassigned NO unset initializing down
Vlan1 unassigned YES unset up down

Enter interface name used to connect to the
management network from the above interface summary: FastEthernet0

Configuring interface FastEthernet0:
Configure IP on this interface? [no]: yes
IP address for this interface: 10.1.28.100
Subnet mask for this interface [255.0.0.0] : 255.255.255.0
Class A network is 10.0.0.0, 24 subnet bits; mask is /24

The following configuration command script was created:

hostname cisco-877w
enable secret 5 $1$k/6Q$x.tRPvEtuqHVS74gClM.V/
enable password xxxxx
line vty 0 4
password xxxxx
snmp-server community XXXX
!
no ip routing

!
interface FastEthernet0
no shutdown
ip address 10.1.28.100 255.255.255.0
!
interface FastEthernet1
shutdown
no ip address
!
interface FastEthernet2
shutdown
no ip address
!
interface FastEthernet3
shutdown
no ip address
!
interface Dot11Radio0
shutdown
no ip address
!
interface ATM0
shutdown
no ip address
!
interface Vlan1
shutdown
no ip address
!
end

[0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.

Enter your selection [2]: 2

% IP addresses may not be configured on L2 links.

Building configuration...
Use the enabled mode 'configure' command to modify this configuration.

Press RETURN to get started!

*Mar 1 00:00:06.175: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized
*Mar 1 00:00:06.179: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled
*Mar 1 00:00:07.779: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:00:10.827: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
*Mar 1 00:04:49.131: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Mar 1 00:04:50.135: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 00:04:51.115: %LINK-5-CHANGED: Interface FastEthernet1, changed state to administratively down
*Mar 1 00:04:51.115: %LINK-5-CHANGED: Interface FastEthernet2, changed state to administratively down
*Mar 1 00:04:51.119: %LINK-5-CHANGED: Interface FastEthernet3, changed state to administratively down
*Mar 1 00:04:51.319: %LINK-5-CHANGED: Interface ATM0, changed state to administratively down
*Mar 1 00:04:51.319: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
*Mar 1 00:04:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to down
*Mar 1 00:04:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down
*Mar 1 00:04:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down
*Mar 1 00:04:52.327: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to down
*Mar 1 00:04:52.327: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Mar 1 00:08:51.371: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(11)XJ3, RELEASE SOFTWARE (fc1)
Synched to technology version 12.4(11)T
Technical Support: »www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 25-Apr-07 14:27 by prod_rel_team
*Mar 1 00:08:51.371: %SNMP-5-COLDSTART: SNMP agent on host cisco-877w is undergoing a cold start
*Mar 1 00:08:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:08:51.415: Unable to open socket on port 161
*Mar 1 00:08:51.463: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Mar 1 00:08:52.991: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:08:53.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
*Mar 1 00:09:38.207: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to down
*Mar 1 00:09:40.703: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:09:41.703: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
*Mar 1 00:09:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:09:51.415: Unable to open socket on port 161
cisco-877w>
cisco-877w>
cisco-877w>
*Mar 1 00:10:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:10:51.415: Unable to open socket on port 161
*Mar 1 00:11:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:11:51.415: Unable to open socket on port 161
*Mar 1 00:12:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:12:51.415: Unable to open socket on port 161
*Mar 1 00:13:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:13:51.415: Unable to open socket on port 161
*Mar 1 00:14:51.415: %IP_SNMP-3-SOCKET: can't open UDP socket
*Mar 1 00:14:51.415: Unable to open socket on port 161

I set my pc to 10.1.28.101, and connected it to eth0. I have downloaded some software called Cisco Configuration Assistant and did a search for 10.1.28.100 but it says it couldn't connect.

Can someone help me out here?

Thank you!]]> http://www.dslreports.com/forum/remark,20715451 Sun, 29 Jun 2008 08:52:38 EDT