Configuration Guide
Page 3
... Getting Started Basic Router Configuration 1 Interface Port Labels 1 Viewing the Default Configuration 2 Information Needed for Configuration 4 Configuring Basic Parameters 5 Configure Global Parameters 5 Configure Fast Ethernet LAN Interfaces 6 Configure WAN Interfaces 6 Configure the Fast Ethernet WAN Interface 6 Configure the ATM WAN Interface 7 Configure the Wireless Interface 7 Configuring a Loopback Interface 8 Configuration Example 8 Verifying Your Configuration 9 Configuring Command-Line Access to the Router 9 Configuration Example 11 Configuring Static Routes 11 Configuration Example...
... Getting Started Basic Router Configuration 1 Interface Port Labels 1 Viewing the Default Configuration 2 Information Needed for Configuration 4 Configuring Basic Parameters 5 Configure Global Parameters 5 Configure Fast Ethernet LAN Interfaces 6 Configure WAN Interfaces 6 Configure the Fast Ethernet WAN Interface 6 Configure the ATM WAN Interface 7 Configure the Wireless Interface 7 Configuring a Loopback Interface 8 Configuration Example 8 Verifying Your Configuration 9 Configuring Command-Line Access to the Router 9 Configuration Example 11 Configuring Static Routes 11 Configuration Example...
Configuration Guide
Page 11
... 800 series routers: • Cisco 850 Series Routers - Cisco 857 DSL Access Router • Cisco 870 Series Routers - Preface This software configuration guide provides instructions for network administrators whose backgrounds vary from having no or little experience in the following situations: • You have configured the software by using the Cisco Router Web Setup tool, and you to configure LAN and WAN interfaces, routing, Network Address Translation (NAT), firewalls, VPNs, and other SDM documentation, go to http://www.cisco.com/go/sdm and click the Technical Documentation link.
... 800 series routers: • Cisco 850 Series Routers - Cisco 857 DSL Access Router • Cisco 870 Series Routers - Preface This software configuration guide provides instructions for network administrators whose backgrounds vary from having no or little experience in the following situations: • You have configured the software by using the Cisco Router Web Setup tool, and you to configure LAN and WAN interfaces, routing, Network Address Translation (NAT), firewalls, VPNs, and other SDM documentation, go to http://www.cisco.com/go/sdm and click the Technical Documentation link.
Configuration Guide
Page 17
...routing protocols, interfaces, and command-line access. Features not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port Label LAN (top), FE0-FE3 (bottom) WAN (top), FE4 (bottom) (no label) OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-1 For complete information on the equipment. Interface Port Labels Table 1-1 lists the interfaces supported for each router and their associated port labels on how to access global configuration mode, see the Cisco IOS Release 12.3 documentation...
...routing protocols, interfaces, and command-line access. Features not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port Label LAN (top), FE0-FE3 (bottom) WAN (top), FE4 (bottom) (no label) OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-1 For complete information on the equipment. Interface Port Labels Table 1-1 lists the interfaces supported for each router and their associated port labels on how to access global configuration mode, see the Cisco IOS Release 12.3 documentation...
Configuration Guide
Page 18
...LAN and WAN interfaces have been created, console and VTY ports are configured, and the inside interface for Network Address Translation has been assigned. hostname Router ! boot-start-marker boot-end-marker ! Use the show running -config command to view the initial configuration, as shown in Example 1-1. Example 1-1 Cisco 851 Default Configuration on Startup Router# show running -config Building configuration... Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-2 OL-5332-01 Current configuration : 1090 bytes ! version 12.3 no service pad service...
...LAN and WAN interfaces have been created, console and VTY ports are configured, and the inside interface for Network Address Translation has been assigned. hostname Router ! boot-start-marker boot-end-marker ! Use the show running -config command to view the initial configuration, as shown in Example 1-1. Example 1-1 Cisco 851 Default Configuration on Startup Router# show running -config Building configuration... Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-2 OL-5332-01 Current configuration : 1090 bytes ! version 12.3 no service pad service...
Configuration Guide
Page 20
.... PPP authentication type: Challenge Handshake Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) - Generate the addressing scheme for the WAN interfaces of PVCs that the ADSL signaling type is assigned as your IP network. - Determine the number of the routers: - PPP authentication type: CHAP or PAP - Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-4 OL-5332-01 DNS server IP address and default gateways • If you are setting up a connection to a corporate network, you and...
.... PPP authentication type: Challenge Handshake Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) - Generate the addressing scheme for the WAN interfaces of PVCs that the ADSL signaling type is assigned as your IP network. - Determine the number of the routers: - PPP authentication type: CHAP or PAP - Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-4 OL-5332-01 DNS server IP address and default gateways • If you are setting up a connection to a corporate network, you and...
Configuration Guide
Page 26
... line configuration mode, and returns to the interval value. The default is detected. Sets the interval that the EXEC command interpreter waits until user input is 10 minutes. Optionally, add seconds to privileged EXEC mode. For complete information about the command line commands, see the Cisco IOS Release 12.3 documentation set. 1-10 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Specifies a virtual terminal for the virtual terminal line. Enables password checking at terminal session login...
... line configuration mode, and returns to the interval value. The default is detected. Sets the interval that the EXEC command interpreter waits until user input is 10 minutes. Optionally, add seconds to privileged EXEC mode. For complete information about the command line commands, see the Cisco IOS Release 12.3 documentation set. 1-10 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Specifies a virtual terminal for the virtual terminal line. Enables password checking at terminal session login...
Configuration Guide
Page 27
... mode. For more general information on the static routing commands, see the Cisco IOS Release 12.3 documentation set , see Appendix B, "Concepts." Configuring Static Routes Static routes provide fixed routing paths through the network. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-11 Chapter 1 Basic Router Configuration Configuring Static Routes Configuration Example The following configuration shows the command-line access commands. line con 0 exec-timeout 10 0 password 4youreyesonly login transport input none (default...
... mode. For more general information on the static routing commands, see the Cisco IOS Release 12.3 documentation set , see Appendix B, "Concepts." Configuring Static Routes Static routes provide fixed routing paths through the network. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-11 Chapter 1 Basic Router Configuration Configuring Static Routes Configuration Example The following configuration shows the command-line access commands. line con 0 exec-timeout 10 0 password 4youreyesonly login transport input none (default...
Configuration Guide
Page 30
... Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 BGP D - OSPF NSSA external type 1, N2 - IS-IS, su - IS-IS level-1, L2 - Execute the show running-config command from privileged EXEC mode to see a verification output like the example shown below. Router# show ip route command and look for RIP routes signified by "R." per-user static route o - EIGRP, EX - Configuring Enhanced IGRP Chapter 1 Basic Router Configuration Configuration Example The following configuration example shows RIP version 2 enabled...
... Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 BGP D - OSPF NSSA external type 1, N2 - IS-IS, su - IS-IS level-1, L2 - Execute the show running-config command from privileged EXEC mode to see a verification output like the example shown below. Router# show ip route command and look for RIP routes signified by "R." per-user static route o - EIGRP, EX - Configuring Enhanced IGRP Chapter 1 Basic Router Configuration Configuration Example The following configuration example shows RIP version 2 enabled...
Configuration Guide
Page 31
... running-config command from privileged EXEC mode to see the Cisco IOS Release 12.3 documentation set 10.0.0.0/24 is subnetted, 1 subnets C 10.108.1.0 is not set . mobile, B - OSPF inter area N1 - candidate default, U - periodic downloaded static route Gateway of last resort is directly connected, Loopback0 D 3.0.0.0/8 [90/409600] via 2.2.2.1, 00:00:02, Ethernet0/0 OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-15 Execute the show ip route command, and...
... running-config command from privileged EXEC mode to see the Cisco IOS Release 12.3 documentation set 10.0.0.0/24 is subnetted, 1 subnets C 10.108.1.0 is not set . mobile, B - OSPF inter area N1 - candidate default, U - periodic downloaded static route Gateway of last resort is directly connected, Loopback0 D 3.0.0.0/8 [90/409600] via 2.2.2.1, 00:00:02, Ethernet0/0 OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-15 Execute the show ip route command, and...
Configuration Guide
Page 41
... route for the default gateway for the dialer 0 interface. Tip Using a dialer group controls access to Challenge Handshake Authentication Protocol (CHAP). For details about this command and additional parameters that can be set , see the Cisco IOS IP Command Reference, Volume 2; Example: Router(config-if)# exit Router(config)# Step 9 dialer-list dialer-group protocol protocol-name {permit | deny | list access-list-number | access-group} Example: Router(config)# dialer-list 1 protocol ip permit Router(config)# Creates a dialer list and associates a dial group with NAT Configure...
... route for the default gateway for the dialer 0 interface. Tip Using a dialer group controls access to Challenge Handshake Authentication Protocol (CHAP). For details about this command and additional parameters that can be set , see the Cisco IOS IP Command Reference, Volume 2; Example: Router(config-if)# exit Router(config)# Step 9 dialer-list dialer-group protocol protocol-name {permit | deny | list access-list-number | access-group} Example: Router(config)# dialer-list 1 protocol ip permit Router(config)# Creates a dialer list and associates a dial group with NAT Configure...
Configuration Guide
Page 42
... Cisco IOS IP Command Reference, Volume 1 of global IP addresses for NAT. For details about this command and additional parameters that can be set , as well as the NAT inside source list acl1 pool pool1 The first example shows the addresses permitted by the access list 1 to be the inside interface. interface type number Example: Router(config)# interface vlan 1 Router(config-if)# Enters configuration mode for the VLAN (on the {interface type number | pool name} [overload] inside interface for NAT. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide...
... Cisco IOS IP Command Reference, Volume 1 of global IP addresses for NAT. For details about this command and additional parameters that can be set , as well as the NAT inside source list acl1 pool pool1 The first example shows the addresses permitted by the access list 1 to be the inside interface. interface type number Example: Router(config)# interface vlan 1 Router(config-if)# Enters configuration mode for the VLAN (on the {interface type number | pool name} [overload] inside interface for NAT. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide...
Configuration Guide
Page 60
... name). VLANs enable networks to use for your router. Step 2 ip name-server server-address1 [server-address2...server-address6] Example: Specifies the address of one or more Domain Name System (DNS) servers to be segmented and formed into logical groups of users, regardless of the user's physical location or LAN connection. VLANs The Cisco 870 series access routers support four Fast Ethernet ports on which you must reload the server with DHCP and VLANs When you configure a DHCP server, you can configure VLANs. If...
... name). VLANs enable networks to use for your router. Step 2 ip name-server server-address1 [server-address2...server-address6] Example: Specifies the address of one or more Domain Name System (DNS) servers to be segmented and formed into logical groups of users, regardless of the user's physical location or LAN connection. VLANs The Cisco 870 series access routers support four Fast Ethernet ports on which you must reload the server with DHCP and VLANs When you configure a DHCP server, you can configure VLANs. If...
Configuration Guide
Page 83
... example implements a username of cisco with an encrypted password of selected users at both peers' configurations. See the Cisco IOS Security Configuration Guide and the Cisco IOS Security Command Reference for this . Example: Router(config)# aaa new-model Router(config)# Step 2 Step 3 Step 4 aaa authentication login {default | list-name} Specifies AAA authentication of cisco. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 7-5 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation Configure a VPN Enable...
... example implements a username of cisco with an encrypted password of selected users at both peers' configurations. See the Cisco IOS Security Configuration Guide and the Cisco IOS Security Command Reference for this . Example: Router(config)# aaa new-model Router(config)# Step 2 Step 3 Step 4 aaa authentication login {default | list-name} Specifies AAA authentication of cisco. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 7-5 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation Configure a VPN Enable...
Configuration Guide
Page 97
...multiple networked devices) 2 Cisco 850 or Cisco 870 series access router connected to the Internet 3 VLAN 1 4 VLAN 2 In the configuration example that follows, a remote user is accessing the Cisco 850 or Cisco 870 series access router using a wireless connection. This chapter describes how to configure the router using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP). Figure 9-1 shows a wireless network deployment. Figure 9-1 Wireless Connection to place the device into radio configuration mode. See the Cisco Access Router...
...multiple networked devices) 2 Cisco 850 or Cisco 870 series access router connected to the Internet 3 VLAN 1 4 VLAN 2 In the configuration example that follows, a remote user is accessing the Cisco 850 or Cisco 870 series access router using a wireless connection. This chapter describes how to configure the router using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP). Figure 9-1 shows a wireless network deployment. Figure 9-1 Wireless Connection to place the device into radio configuration mode. See the Cisco Access Router...
Configuration Guide
Page 128
....168.28.12 Router(config)# Step 2 ip dhcp pool name Example: Router(config)# ip dhcp pool 1 Router(config-dhcp)# Purpose Enters your ISP DNS IP address. Tip You may add multiple server addresses if available. Chapter 13 Configuring Dial Backup and Remote Management Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port Figure 13-1 shows the network configuration used for remote management access and for these steps to configure dial backup and remote management for providing backup to the primary WAN line. For sample commands you can...
....168.28.12 Router(config)# Step 2 ip dhcp pool name Example: Router(config)# ip dhcp pool 1 Router(config-dhcp)# Purpose Enters your ISP DNS IP address. Tip You may add multiple server addresses if available. Chapter 13 Configuring Dial Backup and Remote Management Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port Figure 13-1 shows the network configuration used for remote management access and for these steps to configure dial backup and remote management for providing backup to the primary WAN line. For sample commands you can...
Configuration Guide
Page 146
...(ATM0.2):VC(3) Bad SAP received 4500 14-6 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Physical layer interface module (PLIM) type. debug atm errors Command Use the debug atm errors command to troubleshoot configuration problems that other activity on the network is on your router unusable. debug atm Commands Use the debug commands to display ATM errors. You can render your network. For this command disables debugging output. Example 14-4 shows a sample output.
...(ATM0.2):VC(3) Bad SAP received 4500 14-6 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Physical layer interface module (PLIM) type. debug atm errors Command Use the debug atm errors command to troubleshoot configuration problems that other activity on the network is on your router unusable. debug atm Commands Use the debug commands to display ATM errors. You can render your network. For this command disables debugging output. Example 14-4 shows a sample output.
Configuration Guide
Page 159
...-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide A-3 press Ctrl-Z. EXEC mode, enter the end command, or press Ctrl-Z. • To enter subinterface configuration mode, specify a subinterface with your router configuration, access to your router command. Prompt Router> Privileged EXEC Enter the enable command from privileged EXEC mode. command. and serial interfaces or • To exit to your router. Appendix A Cisco IOS Software Basic Skills Understanding Command Modes Table A-2 Command Modes Summary Mode User EXEC Access Method...
...-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide A-3 press Ctrl-Z. EXEC mode, enter the end command, or press Ctrl-Z. • To enter subinterface configuration mode, specify a subinterface with your router configuration, access to your router command. Prompt Router> Privileged EXEC Enter the enable command from privileged EXEC mode. command. and serial interfaces or • To exit to your router. Appendix A Cisco IOS Software Basic Skills Understanding Command Modes Table A-2 Command Modes Summary Mode User EXEC Access Method...
Configuration Guide
Page 165
... topics are included in that it is that it allows more bandwidth from an NSP central office to the customer site than from the customer site to Internet service providers or network administrators when they configure Cisco routers. To review some typical network scenarios, see Chapter 11, "Additional Configuration Options." This asymmetry, combined with a dialup or leased line. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide B-1
... topics are included in that it is that it allows more bandwidth from an NSP central office to the customer site than from the customer site to Internet service providers or network administrators when they configure Cisco routers. To review some typical network scenarios, see Chapter 11, "Additional Configuration Options." This asymmetry, combined with a dialup or leased line. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide B-1
Configuration Guide
Page 177
... monitor mode the next time it is powered up or reset. Enter your password if prompted. The firmware helps to perform certain configuration tasks, such as recovering a lost password or downloading software over the console port. You can use the ROM monitor, you must be using a terminal or PC that is no Cisco IOS software image loaded on the router, the ROM monitor runs the router. Step 1 Command enable Step 2 Step 3 configure terminal config...
... monitor mode the next time it is powered up or reset. Enter your password if prompted. The firmware helps to perform certain configuration tasks, such as recovering a lost password or downloading software over the console port. You can use the ROM monitor, you must be using a terminal or PC that is no Cisco IOS software image loaded on the router, the ROM monitor runs the router. Step 1 Command enable Step 2 Step 3 configure terminal config...
Configuration Guide
Page 192
...3 remote configuration 10 verify configuration 11 EIGRP configuration example 15 configuring 14 overview 2, 3 enable password recovering 12 setting 5 enable secret password recovering 12 setting 5 encapsulation 6 Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration 6 error reporting, ROM monitor 8 errors, ATM, displaying 6 Ethernet 5 events, ATM, displaying 7 experience, user 11 extended access list, overview 11 F Fast Ethernet LAN interfaces, configuring 6 Fast Ethernet WAN interface, configuring 6, 3 filtering See access lists firewalls access list configuration...
...3 remote configuration 10 verify configuration 11 EIGRP configuration example 15 configuring 14 overview 2, 3 enable password recovering 12 setting 5 enable secret password recovering 12 setting 5 encapsulation 6 Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration 6 error reporting, ROM monitor 8 errors, ATM, displaying 6 Ethernet 5 events, ATM, displaying 7 experience, user 11 extended access list, overview 11 F Fast Ethernet LAN interfaces, configuring 6 Fast Ethernet WAN interface, configuring 6, 3 filtering See access lists firewalls access list configuration...