User Guide
Page 18
... are at least 8 characters) to users. Secure Operation of the Cisco 2621XM/2651XM Router • The Crypto Officer must disable IOS Password Recovery by executing the following commands: configure terminal no other than its default. • The Crypto Officer may be loaded. • The value...the "configure terminal" command line, the Crypto Officer enters the following syntax: line con 0 password login local • The Crypto Officer shall only assign users to a privilege level 1 (the default). • The Crypto Officer shall not assign a command to any IOS image onto the router...
... are at least 8 characters) to users. Secure Operation of the Cisco 2621XM/2651XM Router • The Crypto Officer must disable IOS Password Recovery by executing the following commands: configure terminal no other than its default. • The Crypto Officer may be loaded. • The value...the "configure terminal" command line, the Crypto Officer enters the following syntax: line con 0 password login local • The Crypto Officer shall only assign users to a privilege level 1 (the default). • The Crypto Officer shall not assign a command to any IOS image onto the router...
Software Configuration Guide
Page 5
...Where to Go Next 2-24 Configuring with the Command-Line Interface 3-1 Configuring the Host Name and Password 3-2 Verifying the Host Name and Password 3-2 Configuring 1-Port and 2-Port Ethernet Interfaces 3-3 Configuring Fast Ethernet Interfaces 3-4 Configuring Asynchronous/Synchronous ...-Through) 3-16 Configuring Codec Complexity 3-17 Configuring T1 (FT1) WAN Interface Cards 3-18 Default Configuration 3-18 Configuring ATM Interfaces 3-20 Configuring PVCs 3-20 Configuring SVCs 3-21 Configuring Inverse ...Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers v
...Where to Go Next 2-24 Configuring with the Command-Line Interface 3-1 Configuring the Host Name and Password 3-2 Verifying the Host Name and Password 3-2 Configuring 1-Port and 2-Port Ethernet Interfaces 3-3 Configuring Fast Ethernet Interfaces 3-4 Configuring Asynchronous/Synchronous ...-Through) 3-16 Configuring Codec Complexity 3-17 Configuring T1 (FT1) WAN Interface Cards 3-18 Default Configuration 3-18 Configuring ATM Interfaces 3-20 Configuring PVCs 3-20 Configuring SVCs 3-21 Configuring Inverse ...Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers v
Software Configuration Guide
Page 12
...of the Cisco IOS software. Nonprinting characters, for the Cisco routers. Also provides a basic Software Basics understanding of the interface numbering Numbering and Cisco IOS conventions for example passwords, appear in angle brackets in the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series... for which you must select one. Variables for the Cisco Flash the Compact Flash Memory memory. Default responses to Facility configure your router. Using the Setup Command Describes how to use the Cisco IOS software command-line interface (CLI) to convey instructions...
...of the Cisco IOS software. Nonprinting characters, for the Cisco routers. Also provides a basic Software Basics understanding of the interface numbering Numbering and Cisco IOS conventions for example passwords, appear in angle brackets in the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series... for which you must select one. Variables for the Cisco Flash the Compact Flash Memory memory. Default responses to Facility configure your router. Using the Setup Command Describes how to use the Cisco IOS software command-line interface (CLI) to convey instructions...
Software Configuration Guide
Page 66
... physical-layer async All serial ports are being configured on the interface. It can take several minutes for your global configuration. Password: password Router# You have previously enabled these protocols as asynchronous. Step 5 Router(config-if)# ip address 172.16.74.1 Assign ...Cards Chapter 3 Configuring with CNTL/Z. See Table 3-1 for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-6 OL-1957-04 Step 8 Router(config-if)# async mode dedicated Router(config-if)# async default routing Configure asynchronous parameters according to Router(config-if)#. ...
... physical-layer async All serial ports are being configured on the interface. It can take several minutes for your global configuration. Password: password Router# You have previously enabled these protocols as asynchronous. Step 5 Router(config-if)# ip address 172.16.74.1 Assign ...Cards Chapter 3 Configuring with CNTL/Z. See Table 3-1 for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-6 OL-1957-04 Step 8 Router(config-if)# async mode dedicated Router(config-if)# async default routing Configure asynchronous parameters according to Router(config-if)#. ...
Software Configuration Guide
Page 69
... Router# ipx routing Enable routing protocols as required for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-9 The router tries to run AutoInstall whenever you add a new interface). Password: password Router# You have a valid configuration file stored in ...nonvolatile random-access memory (NVRAM) (for 4-Port/8-Port Asynchronous/Synchronous Serial Network Module Timer (bits per second) 300 1200 2400 4800 9600 14400 Syntax (bits per second) 19200 28800 32000 38400 56000 57600 Default...
... Router# ipx routing Enable routing protocols as required for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-9 The router tries to run AutoInstall whenever you add a new interface). Password: password Router# You have a valid configuration file stored in ...nonvolatile random-access memory (NVRAM) (for 4-Port/8-Port Asynchronous/Synchronous Serial Network Module Timer (bits per second) 300 1200 2400 4800 9600 14400 Syntax (bits per second) 19200 28800 32000 38400 56000 57600 Default...
Software Configuration Guide
Page 71
...You have previously enabled these protocols as required for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-11 See Table 3-5 for... ISDN switch type. Assign the IP address and subnet mask to Router(config-if)#. By default, the router allocates 25 percent of ISDN switch types. entered global configuration mode when the ... 40 Step 10 Router(config)# Ctrl-z Repeat Step 5 through Step 7 if your global configuration. Password: password Router# You have entered interface configuration mode when the prompt changes to the interface. prompt changes to...
...You have previously enabled these protocols as required for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-11 See Table 3-5 for... ISDN switch type. Assign the IP address and subnet mask to Router(config-if)#. By default, the router allocates 25 percent of ISDN switch types. entered global configuration mode when the ... 40 Step 10 Router(config)# Ctrl-z Repeat Step 5 through Step 7 if your global configuration. Password: password Router# You have entered interface configuration mode when the prompt changes to the interface. prompt changes to...
Software Configuration Guide
Page 78
... type is a WAN connection on both ends and the router does not have entered enable mode when the prompt changes to configure. Password: password Router# You have a valid configuration file stored in nonvolatile random-access memory (NVRAM) (for fractionalized T1 service. Step 2 Router#... called configuration mode, provides the greatest power and flexibility. It can take several minutes for CSU/DSU- Default Configuration The Cisco IOS software provides the following default configuration for the router to determine that you power it from the router to keep it ON, if...
... type is a WAN connection on both ends and the router does not have entered enable mode when the prompt changes to configure. Password: password Router# You have a valid configuration file stored in nonvolatile random-access memory (NVRAM) (for fractionalized T1 service. Step 2 Router#... called configuration mode, provides the greatest power and flexibility. It can take several minutes for CSU/DSU- Default Configuration The Cisco IOS software provides the following default configuration for the router to determine that you power it from the router to keep it ON, if...
Software Configuration Guide
Page 83
...view command descriptions by including the ? option after the long or short commands. The choices are internal, line, or loop. Password: password Router# You have Enter configuration commands, one of the following: line, local, payload, remote. Router(config)# Step 3 Router... clock line Enter the transmit clock mode for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-23 Enter the password. Step 4 Router(config)# interface atm 1/0 Router(config-if)# Enter interface configuration mode. The default is line. Chapter 3 Configuring with CNTL/Z. ...
...view command descriptions by including the ? option after the long or short commands. The choices are internal, line, or loop. Password: password Router# You have Enter configuration commands, one of the following: line, local, payload, remote. Router(config)# Step 3 Router... clock line Enter the transmit clock mode for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-23 Enter the password. Step 4 Router(config)# interface atm 1/0 Router(config-if)# Enter interface configuration mode. The default is line. Chapter 3 Configuring with CNTL/Z. ...
Software Configuration Guide
Page 87
...Interfaces Command Step 1 Router> enable Password: password Router# Step 2 Router# configure terminal Enter configuration commands, one interface that you can configure asynchronous interfaces either individually or as required for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-27 This ...modem country microcom_hdms country-name Step 14 Router(config-if)# line 1 16 Return to Step 4 if your needs. The default is usa. Enable routing protocols as a group. Assign asynchronous interfaces to Router(config-if)#. Configure asynchronous parameters according to...
...Interfaces Command Step 1 Router> enable Password: password Router# Step 2 Router# configure terminal Enter configuration commands, one interface that you can configure asynchronous interfaces either individually or as required for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-27 This ...modem country microcom_hdms country-name Step 14 Router(config-if)# line 1 16 Return to Step 4 if your needs. The default is usa. Enable routing protocols as a group. Assign asynchronous interfaces to Router(config-if)#. Configure asynchronous parameters according to...
Software Configuration Guide
Page 106
... command. Configuration Examples The following benefits: 3-46 Software Configuration Guide for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers OL-1957-04 Backup is not automatic, but the ... 2) during this prompt, the user can reach speeds of up the configuration to the defaults. (All commands require a carriage return.) In the case of the AIC card. Two... see an AIC Boot]: prompt. If an ASCII character is received on that the configured administrator password is lost, the AIC provides a method for configuration. The new configuration takes effect upon a ...
... command. Configuration Examples The following benefits: 3-46 Software Configuration Guide for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers OL-1957-04 Backup is not automatic, but the ... 2) during this prompt, the user can reach speeds of up the configuration to the defaults. (All commands require a carriage return.) In the case of the AIC card. Two... see an AIC Boot]: prompt. If an ASCII character is received on that the configured administrator password is lost, the AIC provides a method for configuration. The new configuration takes effect upon a ...
Software Configuration Guide
Page 143
... ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 no service password-encryption ! dial-peer cor custom ! ! ! ! line con 0 line aux 0 line vty 0 4 login ! ! hostname c2620xm ! ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no ip http server ip pim bidir-enable ! ! mgcp profile default ! Appendix A Configuration Examples Cisco 2600 Series Router Configuration Example...
... ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 no service password-encryption ! dial-peer cor custom ! ! ! ! line con 0 line aux 0 line vty 0 4 login ! ! hostname c2620xm ! ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no ip http server ip pim bidir-enable ! ! mgcp profile default ! Appendix A Configuration Examples Cisco 2600 Series Router Configuration Example...
Software Configuration Guide
Page 147
...public view cutdown RO snmp-server community private view cutdown RW ! dial-peer cor custom ! ! ! ! Appendix A Configuration Examples Cisco 3631 Router Configuration Example OL-1957-04 ppp multilink group-range 4 5 ! router ospf 1 redistribute connected subnets network X.X.X.X 0.0.0.X ...txspeed 115200 flowcontrol hardware line 6 line aux 0 password 7 08314D5D1A0E0A0516 login modem InOut transport input all line vty 0 4 password 7 00141215174C04140B login Software Configuration Guide for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers A-9 mgcp profile default !
...public view cutdown RO snmp-server community private view cutdown RW ! dial-peer cor custom ! ! ! ! Appendix A Configuration Examples Cisco 3631 Router Configuration Example OL-1957-04 ppp multilink group-range 4 5 ! router ospf 1 redistribute connected subnets network X.X.X.X 0.0.0.X ...txspeed 115200 flowcontrol hardware line 6 line aux 0 password 7 08314D5D1A0E0A0516 login modem InOut transport input all line vty 0 4 password 7 00141215174C04140B login Software Configuration Guide for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers A-9 mgcp profile default !
Software Configuration Guide
Page 161
... aaa authentication login vty local aaa authentication login dialin local aaa authentication ppp default local aaa authentication ppp dialin if-needed local enable secret cisco ! controller T1 1/1 framing esf clock source line linecode b8zs pri-group timeslots... service timestamps log datetime msec service password-encryption no service udp-small-servers no service tcp-small-servers ! username admin password cisco username remotelan1 password dialpass1 username remotelan2 password dialpass2 username PCuser1 password dialpass3 username PCuser2 password dialpass4 async-bootp dns-server 10.1.3.1...
... aaa authentication login vty local aaa authentication login dialin local aaa authentication ppp default local aaa authentication ppp dialin if-needed local enable secret cisco ! controller T1 1/1 framing esf clock source line linecode b8zs pri-group timeslots... service timestamps log datetime msec service password-encryption no service udp-small-servers no service tcp-small-servers ! username admin password cisco username remotelan1 password dialpass1 username remotelan2 password dialpass2 username PCuser1 password dialpass3 username PCuser2 password dialpass4 async-bootp dns-server 10.1.3.1...
User Guide
Page 10
...and authentication of the console port is the only allowable image. Cisco 2621 Modular Access Router Security Policy 10 78-13824-01 The Crypto Officer must be stored securely. The password must create the "enable" password for FIPS 140-1. From the "configure terminal" command line, ... image. Secure Operation of the Cisco 2621 Router Secure Operation of the Cisco 2621 Router The Cisco 2621 router meets all the Level 2 requirements for the Crypto Officer role. The Crypto Officer must perform the initial configuration. No other than its default. The IOS version shipped with...
...and authentication of the console port is the only allowable image. Cisco 2621 Modular Access Router Security Policy 10 78-13824-01 The Crypto Officer must be stored securely. The password must create the "enable" password for FIPS 140-1. From the "configure terminal" command line, ... image. Secure Operation of the Cisco 2621 Router Secure Operation of the Cisco 2621 Router The Cisco 2621 router meets all the Level 2 requirements for the Crypto Officer role. The Crypto Officer must perform the initial configuration. No other than its default. The IOS version shipped with...
User Guide
Page 24
..., or oil with the router, version 12.1(5)T, is required for FIPS 140-1. Cisco 2651 Modular Access Router Security Policy 10 78-13697-01 Operating this document. No other than its default. From the "configure terminal" command line, the Crypto Officer enters the following ... shipped with an alcohol-based cleaning pad. The password must perform the initial configuration. Only a Crypto Officer may be 0x0101 (the factory default). Secure Operation of the Cisco 2651 Router Secure Operation of the Cisco 2651 Router The Cisco 2651 router meets all the Level 2 requirements for...
..., or oil with the router, version 12.1(5)T, is required for FIPS 140-1. Cisco 2651 Modular Access Router Security Policy 10 78-13697-01 Operating this document. No other than its default. From the "configure terminal" command line, the Crypto Officer enters the following ... shipped with an alcohol-based cleaning pad. The password must perform the initial configuration. Only a Crypto Officer may be 0x0101 (the factory default). Secure Operation of the Cisco 2651 Router Secure Operation of the Cisco 2651 Router The Cisco 2651 router meets all the Level 2 requirements for...
Hardware Installation Guide
Page 8
... Chapter 1 Chapter 2 Chapter 3 Appendix A Appendix B Appendix C Title Overview of Cisco 2600 Series Routers Preparing to prepare for which you supply values. Default responses to isolate problems and read the LEDs. Examples of Cisco 2600 series routers. Table 2 Document Conventions Convention boldface font italic font [] {x |...prompts appear in braces separated by trained and qualified personnel. Audience Preface Audience This guide is designed for example passwords appear in angle brackets in contexts where italic font is not available. for the person installing the router, ...
... Chapter 1 Chapter 2 Chapter 3 Appendix A Appendix B Appendix C Title Overview of Cisco 2600 Series Routers Preparing to prepare for which you supply values. Default responses to isolate problems and read the LEDs. Examples of Cisco 2600 series routers. Table 2 Document Conventions Convention boldface font italic font [] {x |...prompts appear in braces separated by trained and qualified personnel. Audience Preface Audience This guide is designed for example passwords appear in angle brackets in contexts where italic font is not available. for the person installing the router, ...
Hardware Installation Guide
Page 72
...and run the setup command facility again. At any prompt. Default settings are shown as examples only. Step 1 Step 2 ... sequence: yourname con0 is now available Press RETURN to configure a hostname for the router, set passwords, and configure an interface for basic information about your router model, the installed interface modules, and...may enter a question mark '?' Configuring the Router Chapter 3 Installing the Router Initial Configuration Using SDM If Cisco Router and Security Device Manager has been installed on page 1-9. for help . For a description of ...
...and run the setup command facility again. At any prompt. Default settings are shown as examples only. Step 1 Step 2 ... sequence: yourname con0 is now available Press RETURN to configure a hostname for the router, set passwords, and configure an interface for basic information about your router model, the installed interface modules, and...may enter a question mark '?' Configuring the Router Chapter 3 Installing the Router Initial Configuration Using SDM If Cisco Router and Security Device Manager has been installed on page 1-9. for help . For a description of ...
Hardware Installation Guide
Page 74
... Step 12 Respond to the following configuration command script was created: hostname fig enable secret 5 $1$D5P6$PYx41/lQIASK.HcSbfO5q1 enable password xxxxxx line vty 0 4 password xxxxxx snmp-server community public ! Select [2] to save the initial configuration.: [0] Go to the IOS command prompt without saving...if you may enter a question mark '?' At any point you see the following messages at any prompt. Default settings are in square brackets '[]'. 3-28 Cisco 2600 Series Routers Hardware Installation Guide OL-2171-06 interface FastEthernet0/0 no ip address ! Use the enabled mode...
... Step 12 Respond to the following configuration command script was created: hostname fig enable secret 5 $1$D5P6$PYx41/lQIASK.HcSbfO5q1 enable password xxxxxx line vty 0 4 password xxxxxx snmp-server community public ! Select [2] to save the initial configuration.: [0] Go to the IOS command prompt without saving...if you may enter a question mark '?' At any point you see the following messages at any prompt. Default settings are in square brackets '[]'. 3-28 Cisco 2600 Series Routers Hardware Installation Guide OL-2171-06 interface FastEthernet0/0 no ip address ! Use the enabled mode...
Hardware Installation Guide
Page 94
...all zeros. 5, 11, 12 0x0020, Console line speed. 0x0800, 0x1000 13 0x2000 Boots default ROM software if the network boot fails. 14 0x4000 IP broadcasts do the following tasks: • Recover a lost password • Change the console data rate • Enable or disable the Break function •...system using the blue RJ-45 to enter the initial dialog? [yes]: no parity, and 1 stop bit. Configure your password to enter privileged EXEC mode: Cisco 2600 Series Routers Hardware Installation Guide C-2 OL-2171-06 When asked if you would like to automatically boot its system image...
...all zeros. 5, 11, 12 0x0020, Console line speed. 0x0800, 0x1000 13 0x2000 Boots default ROM software if the network boot fails. 14 0x4000 IP broadcasts do the following tasks: • Recover a lost password • Change the console data rate • Enable or disable the Break function •...system using the blue RJ-45 to enter the initial dialog? [yes]: no parity, and 1 stop bit. Configure your password to enter privileged EXEC mode: Cisco 2600 Series Routers Hardware Installation Guide C-2 OL-2171-06 When asked if you would like to automatically boot its system image...
Hardware Installation Guide
Page 95
... of the display: Configuration register is effective after the router reboots. Appendix C Configuration Register Configuring the Boot Field Router> enable Password: password Step 6 At the privileged EXEC prompt (Router#), enter the configure terminal command: Router# configure terminal Enter configuration commands, one ...memory as a system image Enables default booting from flash memory Enables boot system commands that override default booting from the console. for example, when you enter a reload command from flash memory OL-2171-06 Cisco 2600 Series Routers Hardware Installation ...
... of the display: Configuration register is effective after the router reboots. Appendix C Configuration Register Configuring the Boot Field Router> enable Password: password Step 6 At the privileged EXEC prompt (Router#), enter the configure terminal command: Router# configure terminal Enter configuration commands, one ...memory as a system image Enables default booting from flash memory Enables boot system commands that override default booting from the console. for example, when you enter a reload command from flash memory OL-2171-06 Cisco 2600 Series Routers Hardware Installation ...