Configuration Guide
Page 7
...Your Changes 12 Reset the Configuration Register Value 12 Managing Your Router with SDM 13 Reference Information Cisco IOS Software Basic Skills 1 Configuring the Router from a PC 1 Understanding Command Modes 2 Getting Help 4 Enable Secret Passwords and Enable Passwords 5 Entering Global Configuration Mode 5 Using Commands 6 Abbreviating Commands 6 Undoing Commands 6 Command-Line Error Messages 6 Saving Configuration Changes 7 Summary 7 Where to Go Next 7 Concepts 1 ADSL 1 SHDSL 2 Network Protocols 2 IP 2 Routing Protocol Options 2 Cisco 850 Series and Cisco 870 Series Access Routers Software...
...Your Changes 12 Reset the Configuration Register Value 12 Managing Your Router with SDM 13 Reference Information Cisco IOS Software Basic Skills 1 Configuring the Router from a PC 1 Understanding Command Modes 2 Getting Help 4 Enable Secret Passwords and Enable Passwords 5 Entering Global Configuration Mode 5 Using Commands 6 Abbreviating Commands 6 Undoing Commands 6 Command-Line Error Messages 6 Saving Configuration Changes 7 Summary 7 Where to Go Next 7 Concepts 1 ADSL 1 SHDSL 2 Network Protocols 2 IP 2 Routing Protocol Options 2 Cisco 850 Series and Cisco 870 Series Access Routers Software...
Configuration Guide
Page 12
... Cisco IOS security features, including firewall and VPN configuration. • Chapter 13, "Configuring Dial Backup and Remote Management"-Provides instructions on identifying and solving problems with multiple VLANs and to have it . • Appendix B, "Concepts"-Provides general concept explanations of features. • Appendix C, "ROM Monitor"-Describes the use of this preface to help you decide which chapters contain the information you need to configure your Cisco router...
... Cisco IOS security features, including firewall and VPN configuration. • Chapter 13, "Configuring Dial Backup and Remote Management"-Provides instructions on identifying and solving problems with multiple VLANs and to have it . • Appendix B, "Concepts"-Provides general concept explanations of features. • Appendix C, "ROM Monitor"-Describes the use of this preface to help you decide which chapters contain the information you need to configure your Cisco router...
Configuration Guide
Page 14
The RSS feeds are a free service and Cisco currently supports RSS Version 2.0. Related Documents Preface Related Documents The following publications provide related information on these routers: • Cisco 850 Series and Cisco 870 Series Access Routers Cabling and Setup Quick Start Guide • Cisco 850 Series and Cisco 870 Series Access Routers Hardware Installation Guide • Cisco Router and Security Device Manager (SDM) Quick Start Guide • Cisco Access Router Wireless Configuration Guide • Upgrading Memory in Cisco 800 Series Routers • Regulatory Compliance and...
The RSS feeds are a free service and Cisco currently supports RSS Version 2.0. Related Documents Preface Related Documents The following publications provide related information on these routers: • Cisco 850 Series and Cisco 870 Series Access Routers Cabling and Setup Quick Start Guide • Cisco 850 Series and Cisco 870 Series Access Routers Hardware Installation Guide • Cisco Router and Security Device Manager (SDM) Quick Start Guide • Cisco Access Router Wireless Configuration Guide • Upgrading Memory in Cisco 800 Series Routers • Regulatory Compliance and...
Configuration Guide
Page 17
... not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port Label LAN (top), FE0-FE3 (bottom) WAN (top), FE4 (bottom) (no label) OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-1 For complete information on the commands used in Appendix A, "Cisco IOS Basic Skills." For more information on how to access global configuration mode, see the Cisco IOS Release 12.3 documentation set. It also describes the default configuration...
... not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port Label LAN (top), FE0-FE3 (bottom) WAN (top), FE4 (bottom) (no label) OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-1 For complete information on the commands used in Appendix A, "Cisco IOS Basic Skills." For more information on how to access global configuration mode, see the Cisco IOS Release 12.3 documentation set. It also describes the default configuration...
Configuration Guide
Page 18
...Router Cisco 871 Cisco 857 Cisco 876 Cisco 877 Cisco 878 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN USB Fast Ethernet LAN ATM WAN Wireless LAN Fast Ethernet LAN ATM WAN Wireless LAN BRI Fast Ethernet LAN ATM WAN Wireless LAN Fast Ethernet LAN ATM WAN Wireless LAN BRI Port Label FE0-FE3 FE4 LEFT, RIGHT/PRIMARY 1-0 LAN (top), FE0-FE3 (bottom) ADSLoPOTS (no service password-encryption ! All of the LAN and WAN interfaces have been created, console and VTY ports are configured, and the inside interface for Network Address Translation has been assigned. Current configuration...
...Router Cisco 871 Cisco 857 Cisco 876 Cisco 877 Cisco 878 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN USB Fast Ethernet LAN ATM WAN Wireless LAN Fast Ethernet LAN ATM WAN Wireless LAN BRI Fast Ethernet LAN ATM WAN Wireless LAN Fast Ethernet LAN ATM WAN Wireless LAN BRI Port Label FE0-FE3 FE4 LEFT, RIGHT/PRIMARY 1-0 LAN (top), FE0-FE3 (bottom) ADSLoPOTS (no service password-encryption ! All of the LAN and WAN interfaces have been created, console and VTY ports are configured, and the inside interface for Network Address Translation has been assigned. Current configuration...
Configuration Guide
Page 20
... address, or you , along with a static IP address. For bridged RFC 1483, you may obtain a static IP address from your login name - Point-to-Point Protocol (PPP) client name that the ADSL signaling type is assigned as your public telephone service provider. PPP authentication type: Challenge Handshake Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) - PPP password to access the router - PPP authentication type: CHAP or PAP - Information Needed for Configuration Chapter 1 Basic Router Configuration Information Needed for Configuration You need...
... address, or you , along with a static IP address. For bridged RFC 1483, you may obtain a static IP address from your login name - Point-to-Point Protocol (PPP) client name that the ADSL signaling type is assigned as your public telephone service provider. PPP authentication type: Challenge Handshake Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) - PPP password to access the router - PPP authentication type: CHAP or PAP - Information Needed for Configuration Chapter 1 Basic Router Configuration Information Needed for Configuration You need...
Configuration Guide
Page 23
... For routers using ADSL signaling. Perform these commands. Example: Router(config)# controller dsl 0 Router(config-controller)# mode atm Router(config-controller)# exit Router(config)# Step 2 interface type number Example: Router(config)# interface atm0 Router(config-int)# Identifies and enters the configuration mode for the ATM interface. Example: Router(config-int)# no shutdown Enables the ATM 0 interface. For more information about configuring a wireless connection, see Chapter 9, "Configuring a Wireless LAN Connection," and the Cisco Access Router Wireless Configuration Guide...
... For routers using ADSL signaling. Perform these commands. Example: Router(config)# controller dsl 0 Router(config-controller)# mode atm Router(config-controller)# exit Router(config)# Step 2 interface type number Example: Router(config)# interface atm0 Router(config-int)# Identifies and enters the configuration mode for the ATM interface. Example: Router(config-int)# no shutdown Enables the ATM 0 interface. For more information about configuring a wireless connection, see Chapter 9, "Configuring a Wireless LAN Connection," and the Cisco Access Router Wireless Configuration Guide...
Configuration Guide
Page 27
... updated with a new route. For more general information on the Cisco 850 and Cisco 870 series routers is optional. If the network topology changes, the static route must be set . Configuring static routes on static routing, see the Cisco IOS IP Command Reference, Volume 2 of 4: Routing Protocols. line con 0 exec-timeout 10 0 password 4youreyesonly login transport input none (default) stopbits 1 (default) line vty 0 4 password secret login ! Step 2 end Example: Router(config)# end Router# Exits router configuration mode, and enters privileged EXEC mode...
... updated with a new route. For more general information on the Cisco 850 and Cisco 870 series routers is optional. If the network topology changes, the static route must be set . Configuring static routes on static routing, see the Cisco IOS IP Command Reference, Volume 2 of 4: Routing Protocols. line con 0 exec-timeout 10 0 password 4youreyesonly login transport input none (default) stopbits 1 (default) line vty 0 4 password secret login ! Step 2 end Example: Router(config)# end Router# Exits router configuration mode, and enters privileged EXEC mode...
Configuration Guide
Page 28
... NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - IS-IS inter area, * - candidate default, U - periodic downloaded static route Gateway of these routing protocols on your router. 1-12 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Verifying Your Configuration To verify that you use IP routing protocols, such as Routing Information Protocol (RIP) or Enhanced Interior Gateway Routing Protocol (EIGRP), to another device with an IP address...
... NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - IS-IS inter area, * - candidate default, U - periodic downloaded static route Gateway of these routing protocols on your router. 1-12 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Verifying Your Configuration To verify that you use IP routing protocols, such as Routing Information Protocol (RIP) or Enhanced Interior Gateway Routing Protocol (EIGRP), to another device with an IP address...
Configuration Guide
Page 43
... Fast Ethernet WAN interface (FE4) to be set, as well as the NAT outside interface. Step 11 access-list access-list-number {deny | permit} source [source-wildcard] Example: Router(config)# access-list 1 permit 192.168.1.0 255.255.255.0 Defines a standard access list indicating which addresses need translation. Step 7 interface type number Example: Router(config)# interface fastethernet 4 Router(config-if)# Enters configuration mode for information on configuring a loopback interface. Enables the configuration changes just made to use NAT with NAT Configure Network Address...
... Fast Ethernet WAN interface (FE4) to be set, as well as the NAT outside interface. Step 11 access-list access-list-number {deny | permit} source [source-wildcard] Example: Router(config)# access-list 1 permit 192.168.1.0 255.255.255.0 Defines a standard access list indicating which addresses need translation. Step 7 interface type number Example: Router(config)# interface fastethernet 4 Router(config-if)# Enters configuration mode for information on configuring a loopback interface. Enables the configuration changes just made to use NAT with NAT Configure Network Address...
Configuration Guide
Page 48
... or remote user on the Fast Ethernet LAN can be used to connect to an Internet service provider (ISP) using the following protocols on the WAN connection: • Asymmetric digital subscriber line (ADSL) over plain old telephone service (POTS) using the Cisco 857 or Cisco 877 router • ADSL over integrated services digital network (ISDN) using the Cisco 876 router • Single-pair high-speed digital subscriber line (G.SHDSL) using the Cisco 878 router The Fast Ethernet interface...
... or remote user on the Fast Ethernet LAN can be used to connect to an Internet service provider (ISP) using the following protocols on the WAN connection: • Asymmetric digital subscriber line (ADSL) over plain old telephone service (POTS) using the Cisco 857 or Cisco 877 router • ADSL over integrated services digital network (ISDN) using the Cisco 876 router • Single-pair high-speed digital subscriber line (G.SHDSL) using the Cisco 878 router The Fast Ethernet interface...
Configuration Guide
Page 92
... configured DHCP, VLANs, and secure tunnels. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 8-2 OL-5332-01 Chapter 8 Configuring a Simple Firewall 1 Multiple networked devices-Desktops, laptop PCs, switches 2 Fast Ethernet LAN interface (the inside interface for NAT) 3 PPPoE or PPPoA client and firewall implementation-Cisco 851/871 or Cisco 857/876/877/878 series access router, respectively 4 Point at which NAT occurs 5 Protected network 6 Unprotected network 7 Fast Ethernet or ATM WAN interface (the outside WAN interface (FE4) on the Cisco 851 or Cisco...
... configured DHCP, VLANs, and secure tunnels. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 8-2 OL-5332-01 Chapter 8 Configuring a Simple Firewall 1 Multiple networked devices-Desktops, laptop PCs, switches 2 Fast Ethernet LAN interface (the inside interface for NAT) 3 PPPoE or PPPoA client and firewall implementation-Cisco 851/871 or Cisco 857/876/877/878 series access router, respectively 4 Point at which NAT occurs 5 Protected network 6 Unprotected network 7 Fast Ethernet or ATM WAN interface (the outside WAN interface (FE4) on the Cisco 851 or Cisco...
Configuration Guide
Page 98
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-2 OL-5332-01 Configure the Root Radio Station Perform these steps to configure this chapter assume that you enable broadcast key rotation-only wireless client devices using static Wired Equivalent Privacy (WEP) cannot use the access point when you have already configured basic router features as well as PPPoE or PPPoA with NAT," as Light Extensible Authentication Protocol [LEAP], Extensible Authentication Protocol-Transport Layer Security [EAP-TLS], or Protected...
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-2 OL-5332-01 Configure the Root Radio Station Perform these steps to configure this chapter assume that you enable broadcast key rotation-only wireless client devices using static Wired Equivalent Privacy (WEP) cannot use the access point when you have already configured basic router features as well as PPPoE or PPPoA with NAT," as Light Extensible Authentication Protocol [LEAP], Extensible Authentication Protocol-Transport Layer Security [EAP-TLS], or Protected...
Configuration Guide
Page 99
...)# authentication key-management wpa Sets the permitted authentication methods for the radio interface. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-3 The example uses the VLAN with a VLAN. Binds the SSID with optional encryption method of a wireless network. Step 7 exit Example: Router(config-if-ssid)# exit Router(config-if)# Exits SSID configuration mode, and enters interface configuration mode for a user attempting access to access the wireless interface. Chapter 9 Configuring a Wireless LAN Connection Configure...
...)# authentication key-management wpa Sets the permitted authentication methods for the radio interface. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-3 The example uses the VLAN with a VLAN. Binds the SSID with optional encryption method of a wireless network. Step 7 exit Example: Router(config-if-ssid)# exit Router(config-if)# Exits SSID configuration mode, and enters interface configuration mode for a user attempting access to access the wireless interface. Chapter 9 Configuring a Wireless LAN Connection Configure...
Configuration Guide
Page 105
... ! aaa authentication login eap_methods group rad_eap aaa session-id common ip subnet-zero ip cef ! enable password cisco123 ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! Sample Configuration 10 C H A P T E R This chapter collects the results of the Ethernet WAN interface, DHCP, VLAN, Easy VPN, and wireless interface configurations made in a single sample, Example 10-1. aaa group server radius rad_eap server 10.0.1.1 auth-port 1812 acct-port 1813...
... ! aaa authentication login eap_methods group rad_eap aaa session-id common ip subnet-zero ip cef ! enable password cisco123 ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! Sample Configuration 10 C H A P T E R This chapter collects the results of the Ethernet WAN interface, DHCP, VLAN, Easy VPN, and wireless interface configurations made in a single sample, Example 10-1. aaa group server radius rad_eap server 10.0.1.1 auth-port 1812 acct-port 1813...
Configuration Guide
Page 151
... appears: Router> Enter the enable command to enter enable mode. The router uses the boot ROM system image, indicated by entering the reset command: rommon 2> reset The router cycles its power, and the configuration register is set to the privileged EXEC prompt: Router# Enter the show startup-config OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 14-11 Configuration changes can be made only in enable mode: Router> enable The prompt changes to 1. Enter the config-register...
... appears: Router> Enter the enable command to enter enable mode. The router uses the boot ROM system image, indicated by entering the reset command: rommon 2> reset The router cycles its power, and the configuration register is set to the privileged EXEC prompt: Router# Enter the show startup-config OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 14-11 Configuration changes can be made only in enable mode: Router> enable The prompt changes to 1. Enter the config-register...
Configuration Guide
Page 161
... Access Routers Software Configuration Guide A-5 The enable password does not appear on a TFTP server. Because many privileged EXEC commands are recognized. Appendix A Cisco IOS Software Basic Skills Enable Secret Passwords and Enable Passwords Enable Secret Passwords and Enable Passwords By default, the router ships without password protection. Enter the configure terminal command to enter global configuration mode: Router# configure terminal Router(config)# You can contain any configuration changes to privileged EXEC mode commands. An enable password can now make any number...
... Access Routers Software Configuration Guide A-5 The enable password does not appear on a TFTP server. Because many privileged EXEC commands are recognized. Appendix A Cisco IOS Software Basic Skills Enable Secret Passwords and Enable Passwords Enable Secret Passwords and Enable Passwords By default, the router ships without password protection. Enter the configure terminal command to enter global configuration mode: Router# configure terminal Router(config)# You can contain any configuration changes to privileged EXEC mode commands. An enable password can now make any number...
Configuration Guide
Page 172
... Configuration Protocol (DHCP) server and relay. DHCP allocates network addresses from a central server and to enable all remote hosts to support many internal hosts, thus conserving IP addresses. Easy IP (Phase 1) Appendix B Concepts Translations can be defined. Because Easy IP (Phase 1) uses existing port-level multiplexed NAT functionality within the Internet, NAT can be static or dynamic. DHCP configures the router to the Internet. With NAT, the router translates the nonregistered IP addresses used by the LAN devices...
... Configuration Protocol (DHCP) server and relay. DHCP allocates network addresses from a central server and to enable all remote hosts to support many internal hosts, thus conserving IP addresses. Easy IP (Phase 1) Appendix B Concepts Translations can be defined. Because Easy IP (Phase 1) uses existing port-level multiplexed NAT functionality within the Internet, NAT can be static or dynamic. DHCP configures the router to the Internet. With NAT, the router translates the nonregistered IP addresses used by the LAN devices...
Configuration Guide
Page 192
... VPN configuration tasks 3 remote configuration 10 verify configuration 11 EIGRP configuration example 15 configuring 14 overview 2, 3 enable password recovering 12 setting 5 enable secret password recovering 12 setting 5 encapsulation 6 Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration 6 error reporting, ROM monitor 8 errors, ATM, displaying 6 Ethernet 5 events, ATM, displaying 7 experience, user 11 extended access list, overview 11 F Fast Ethernet LAN interfaces, configuring 6 Fast Ethernet WAN interface, configuring 6, 3 filtering See access lists firewalls...
... VPN configuration tasks 3 remote configuration 10 verify configuration 11 EIGRP configuration example 15 configuring 14 overview 2, 3 enable password recovering 12 setting 5 enable secret password recovering 12 setting 5 encapsulation 6 Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration 6 error reporting, ROM monitor 8 errors, ATM, displaying 6 Ethernet 5 events, ATM, displaying 7 experience, user 11 extended access list, overview 11 F Fast Ethernet LAN interfaces, configuring 6 Fast Ethernet WAN interface, configuring 6, 3 filtering See access lists firewalls...
Hardware Installation Guide
Page 27
... Cisco 804 router, gather the devices (such as an analog telephone, fax machine, or modem) that connects the NT1 to the router (for software configuration using a terminal or PC connected to the router. with the device). Connect the Ethernet devices to secure the screws. If you are outside of Ethernet, ISDN, and IDSL cable distance limitations. Verify the router installation. 78-5373-04 Cisco 800 Series Routers Hardware Installation Guide 2-5 For more information, see the "Maximum Cable...
... Cisco 804 router, gather the devices (such as an analog telephone, fax machine, or modem) that connects the NT1 to the router (for software configuration using a terminal or PC connected to the router. with the device). Connect the Ethernet devices to secure the screws. If you are outside of Ethernet, ISDN, and IDSL cable distance limitations. Verify the router installation. 78-5373-04 Cisco 800 Series Routers Hardware Installation Guide 2-5 For more information, see the "Maximum Cable...