Configuration Guide
Page 3
... Getting Started Basic Router Configuration 1 Interface Port Labels 1 Viewing the Default Configuration 2 Information Needed for Configuration 4 Configuring Basic Parameters 5 Configure Global Parameters 5 Configure Fast Ethernet LAN Interfaces 6 Configure WAN Interfaces 6 Configure the Fast Ethernet WAN Interface 6 Configure the ATM WAN Interface 7 Configure the Wireless Interface 7 Configuring a Loopback Interface 8 Configuration Example 8 Verifying Your Configuration 9 Configuring Command-Line Access to the Router 9 Configuration Example 11 Configuring Static Routes 11 Configuration Example...
... Getting Started Basic Router Configuration 1 Interface Port Labels 1 Viewing the Default Configuration 2 Information Needed for Configuration 4 Configuring Basic Parameters 5 Configure Global Parameters 5 Configure Fast Ethernet LAN Interfaces 6 Configure WAN Interfaces 6 Configure the Fast Ethernet WAN Interface 6 Configure the ATM WAN Interface 7 Configure the Wireless Interface 7 Configuring a Loopback Interface 8 Configuration Example 8 Verifying Your Configuration 9 Configuring Command-Line Access to the Router 9 Configuration Example 11 Configuring Static Routes 11 Configuration Example...
Configuration Guide
Page 11
...and Cisco 870 Series Access Routers Software Configuration Guide 11 Preface This software configuration guide provides instructions for network administrators whose backgrounds vary from having no or little experience in the following Cisco 800 series routers: • Cisco 850 Series Routers - You can use the Cisco Router and Security Device Manager (SDM)-a web-based configuration tool that allows you want to configure the software using the Cisco Router Web Setup tool, and you to configure LAN and WAN interfaces, routing, Network Address Translation (NAT), firewalls, VPNs, and...
...and Cisco 870 Series Access Routers Software Configuration Guide 11 Preface This software configuration guide provides instructions for network administrators whose backgrounds vary from having no or little experience in the following Cisco 800 series routers: • Cisco 850 Series Routers - You can use the Cisco Router and Security Device Manager (SDM)-a web-based configuration tool that allows you want to configure the software using the Cisco Router Web Setup tool, and you to configure LAN and WAN interfaces, routing, Network Address Translation (NAT), firewalls, VPNs, and...
Configuration Guide
Page 17
... settings, routing protocols, interfaces, and command-line access. Note Individual router models may not support every feature described throughout this guide. For complete information on startup. It also describes the default configuration on how to access global configuration mode, see the Cisco IOS Release 12.3 documentation set. Features not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port Label LAN (top), FE0-FE3 (bottom) WAN (top), FE4 (bottom) (no label) OL-5332-01 Cisco 850 Series and Cisco 870 Series Access...
... settings, routing protocols, interfaces, and command-line access. Note Individual router models may not support every feature described throughout this guide. For complete information on startup. It also describes the default configuration on how to access global configuration mode, see the Cisco IOS Release 12.3 documentation set. Features not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port Label LAN (top), FE0-FE3 (bottom) WAN (top), FE4 (bottom) (no label) OL-5332-01 Cisco 850 Series and Cisco 870 Series Access...
Configuration Guide
Page 18
Current configuration : 1090 bytes ! boot-start-marker boot-end-marker ! All of the LAN and WAN interfaces have been created, console and VTY ports are configured, and the inside interface for Network Address Translation has been assigned. Use the show running -config command to view the initial configuration, as shown in Example 1-1. Example 1-1 Cisco 851 Default Configuration on Startup Router# show running -config Building configuration... version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no label) LAN (top...
Current configuration : 1090 bytes ! boot-start-marker boot-end-marker ! All of the LAN and WAN interfaces have been created, console and VTY ports are configured, and the inside interface for Network Address Translation has been assigned. Use the show running -config command to view the initial configuration, as shown in Example 1-1. Example 1-1 Cisco 851 Default Configuration on Startup Router# show running -config Building configuration... version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no label) LAN (top...
Configuration Guide
Page 20
... a static IP address. PPP password to access your IP network. - PPP client name to access the router - Generate the addressing scheme for your Internet service provider (ISP) account - Determine the IP routing parameter information, including IP address, and ATM permanent virtual circuits (PVCs). Order the appropriate line from your public telephone service provider. DNS server IP address and default gateways • If you are setting up a connection to a corporate network, you and the network administrator...
... a static IP address. PPP password to access your IP network. - PPP client name to access the router - Generate the addressing scheme for your Internet service provider (ISP) account - Determine the IP routing parameter information, including IP address, and ATM permanent virtual circuits (PVCs). Order the appropriate line from your public telephone service provider. DNS server IP address and default gateways • If you are setting up a connection to a corporate network, you and the network administrator...
Configuration Guide
Page 26
... to privileged EXEC mode. For complete information about the command line commands, see the Cisco IOS Release 12.3 documentation set. 1-10 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Specifies a unique password for remote console access. Exits line configuration mode, and returns to the interval value. Enables password checking at terminal session login. This example shows a timeout of 0 0 specifies never to time out. Specifies a virtual terminal for the virtual terminal line. The default is detected. Entering a timeout...
... to privileged EXEC mode. For complete information about the command line commands, see the Cisco IOS Release 12.3 documentation set. 1-10 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 Specifies a unique password for remote console access. Exits line configuration mode, and returns to the interval value. Enables password checking at terminal session login. This example shows a timeout of 0 0 specifies never to time out. Specifies a virtual terminal for the virtual terminal line. The default is detected. Entering a timeout...
Configuration Guide
Page 27
... can be updated with a new route. These commands appear automatically in global configuration mode: Step 1 Command ip route prefix mask {ip-address | interface-type interface-number [ip-address]} Example: Router(config)# ip route 192.168.1.0 255.255.0.0 10.10.10.2 Router(config)# Purpose Specifies the static route for the IP packets. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-11 Static routes are private routes unless they are manually configured on the static routing commands, see the Cisco IOS Release 12.3 documentation set , see...
... can be updated with a new route. These commands appear automatically in global configuration mode: Step 1 Command ip route prefix mask {ip-address | interface-type interface-number [ip-address]} Example: Router(config)# ip route 192.168.1.0 255.255.0.0 10.10.10.2 Router(config)# Purpose Specifies the static route for the IP packets. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-11 Static routes are private routes unless they are manually configured on the static routing commands, see the Cisco IOS Release 12.3 documentation set , see...
Configuration Guide
Page 30
... Access Routers Software Configuration Guide OL-5332-01 router rip version 2 network 10.0.0.0 network 192.168.1.0 no auto-summary ! RIP, M - mobile, B - EIGRP external, O - OSPF NSSA external type 2 E1 - IS-IS summary, L1 - IS-IS level-2 ia - IS-IS inter area, * - ODR, P - Router# show ip route command and look for RIP routes signified by "R." connected, S - BGP D - candidate default, U - Configuring Enhanced IGRP Chapter 1 Basic Router Configuration Configuration Example The following configuration example shows RIP version 2 enabled in global configuration mode...
... Access Routers Software Configuration Guide OL-5332-01 router rip version 2 network 10.0.0.0 network 192.168.1.0 no auto-summary ! RIP, M - mobile, B - EIGRP external, O - OSPF NSSA external type 2 E1 - IS-IS summary, L1 - IS-IS level-2 ia - IS-IS inter area, * - ODR, P - Router# show ip route command and look for RIP routes signified by "R." connected, S - BGP D - candidate default, U - Configuring Enhanced IGRP Chapter 1 Basic Router Configuration Configuration Example The following configuration example shows RIP version 2 enabled in global configuration mode...
Configuration Guide
Page 31
... the Cisco IOS Release 12.3 documentation set 10.0.0.0/24 is subnetted, 1 subnets C 10.108.1.0 is to be applied, using the IP address of the network of last resort is 109. OSPF inter area N1 - Execute the show running-config command from privileged EXEC mode to the following configuration example shows the EIGRP routing protocol enabled in IP networks 192.145.1.0 and 10.10.12.115. static, R - periodic downloaded static route Gateway...
... the Cisco IOS Release 12.3 documentation set 10.0.0.0/24 is subnetted, 1 subnets C 10.108.1.0 is to be applied, using the IP address of the network of last resort is 109. OSPF inter area N1 - Execute the show running-config command from privileged EXEC mode to the following configuration example shows the EIGRP routing protocol enabled in IP networks 192.145.1.0 and 10.10.12.115. static, R - periodic downloaded static route Gateway...
Configuration Guide
Page 41
... the Cisco IOS IP Command Reference, Volume 2; OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-5 Chapter 3 Configuring PPP over Ethernet with it. Packets are then forwarded through the specified interface dialer group. Specifies the dialer pool to use to connect to Challenge Handshake Authentication Protocol (CHAP). Step 10 ip route prefix mask {interface-type interface-number} Example: Router(config)# ip route 10.10.25.2 255.255.255.255 dialer 0 Router(config)# Sets the IP route for the default gateway...
... the Cisco IOS IP Command Reference, Volume 2; OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-5 Chapter 3 Configuring PPP over Ethernet with it. Packets are then forwarded through the specified interface dialer group. Specifies the dialer pool to use to connect to Challenge Handshake Authentication Protocol (CHAP). Step 10 ip route prefix mask {interface-type interface-number} Example: Router(config)# ip route 10.10.25.2 255.255.255.255 dialer 0 Router(config)# Sets the IP route for the default gateway...
Configuration Guide
Page 42
...Example: Router(config-if)# ip nat inside | outside Fast Ethernet WAN interface with NAT Configure Network Address Translation Network Address Translation (NAT) translates packets from the router, or both are checked against the access list for either static or dynamic address translations. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-6 OL-5332-01 For details about this command and additional parameters that can be set , as well as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of 4: Addressing...
...Example: Router(config-if)# ip nat inside | outside Fast Ethernet WAN interface with NAT Configure Network Address Translation Network Address Translation (NAT) translates packets from the router, or both are checked against the access list for either static or dynamic address translations. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-6 OL-5332-01 For details about this command and additional parameters that can be set , as well as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of 4: Addressing...
Configuration Guide
Page 60
..., and DHCP options. Step 2 ip name-server server-address1 [server-address2...server-address6] Example: Specifies the address of the user's physical location or LAN connection. Note Whenever you change server properties, you must reload the server with DHCP and VLANs When you configure a DHCP server, you have not performed these steps to configure your router. VLANs The Cisco 870 series access routers support four Fast Ethernet ports on which you have already configured basic router features as well as PPPoE or...
..., and DHCP options. Step 2 ip name-server server-address1 [server-address2...server-address6] Example: Specifies the address of the user's physical location or LAN connection. Note Whenever you change server properties, you must reload the server with DHCP and VLANs When you configure a DHCP server, you have not performed these steps to configure your router. VLANs The Cisco 870 series access routers support four Fast Ethernet ports on which you have already configured basic router features as well as PPPoE or...
Configuration Guide
Page 83
... control model. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 7-5 username name {nopassword | password password | password encryption-type encrypted-password} Example: Router(config)# username cisco password 0 cisco Router(config)# Establishes a username-based authentication system. aaa authorization {network | exec | commands Specifies AAA authorization of selected users at both peers' configurations. Example: Router(config)# aaa new-model Router(config)# Step 2 Step 3 Step 4 aaa authentication login {default | list...
... control model. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 7-5 username name {nopassword | password password | password encryption-type encrypted-password} Example: Router(config)# username cisco password 0 cisco Router(config)# Establishes a username-based authentication system. aaa authorization {network | exec | commands Specifies AAA authorization of selected users at both peers' configurations. Example: Router(config)# aaa new-model Router(config)# Step 2 Step 3 Step 4 aaa authentication login {default | list...
Configuration Guide
Page 97
... the router using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP). Each remote user has his own VLAN. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-1 With a management system based on Cisco IOS software, the Cisco routers act as access points, and are Wi-Fi certified, IEEE 802.11a/b/g-compliant wireless LAN transceivers. CH A P T E R 9 Configuring a Wireless LAN Connection The Cisco 850 and Cisco 870 series routers support a secure, affordable, and easy-to-use wireless LAN...
... the router using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP). Each remote user has his own VLAN. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-1 With a management system based on Cisco IOS software, the Cisco routers act as access points, and are Wi-Fi certified, IEEE 802.11a/b/g-compliant wireless LAN transceivers. CH A P T E R 9 Configuring a Wireless LAN Connection The Cisco 850 and Cisco 870 series routers support a secure, affordable, and easy-to-use wireless LAN...
Configuration Guide
Page 128
Tip You may add multiple server addresses if available. For sample commands you can be a string or an integer. • Configure the DHCP address pool. Chapter 13 Configuring Dial Backup and Remote Management Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port Figure 13-1 shows the network configuration used for remote management access and for providing backup to Internet service provider series router 2 Modem B Dial backup; serves as dial-in access to allow changes or updates to Cisco IOS configurations Configuration Tasks Perform these steps to...
Tip You may add multiple server addresses if available. For sample commands you can be a string or an integer. • Configure the DHCP address pool. Chapter 13 Configuring Dial Backup and Remote Management Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port Figure 13-1 shows the network configuration used for remote management access and for providing backup to Internet service provider series router 2 Modem B Dial backup; serves as dial-in access to allow changes or updates to Cisco IOS configurations Configuration Tasks Perform these steps to...
Configuration Guide
Page 146
... Cisco IOS Debug Command Reference. You can render your network. Example 14-4 shows a sample output. The no arguments. • To disable debugging, enter the undebug all command. • To use debug commands is on your router unusable. ATM Troubleshooting Commands Chapter 14 Troubleshooting Table 14-2 show atm interface Command Output Description (continued) Field Maximum Transmit Channels Max Datagram Size PLIM Type Description Maximum number of this reason, use debug commands only to troubleshoot specific problems...
... Cisco IOS Debug Command Reference. You can render your network. Example 14-4 shows a sample output. The no arguments. • To disable debugging, enter the undebug all command. • To use debug commands is on your router unusable. ATM Troubleshooting Commands Chapter 14 Troubleshooting Table 14-2 show atm interface Command Output Description (continued) Field Maximum Transmit Channels Max Datagram Size PLIM Type Description Maximum number of this reason, use debug commands only to troubleshoot specific problems...
Configuration Guide
Page 159
... a specific interface, such as a whole. Router (config)# Interface configuration Enter the interface command (with the interface command. and serial interfaces or • To exit to global Use this mode for the router Ethernet enter the exit command. operating parameters. • To enter global configuration mode, enter the configure • Perform the verification steps shown in this chapter. • To exit to privileged Use this guide. Router# Global configuration Enter the configure command from user EXEC mode. command. Appendix A Cisco IOS...
... a specific interface, such as a whole. Router (config)# Interface configuration Enter the interface command (with the interface command. and serial interfaces or • To exit to global Use this mode for the router Ethernet enter the exit command. operating parameters. • To enter global configuration mode, enter the configure • Perform the verification steps shown in this chapter. • To exit to privileged Use this guide. Router# Global configuration Enter the configure command from user EXEC mode. command. Appendix A Cisco IOS...
Configuration Guide
Page 165
... site to Internet service providers or network administrators when they configure Cisco routers. It is asymmetric in this appendix: • ADSL • SHDSL • Network Protocols • Routing Protocol Options • PPP Authentication Protocols • TACACS+ • Network Interfaces • Dial Backup • NAT • Easy IP (Phase 1) • Easy IP (Phase 2) • QoS • Access Lists ADSL is always on additional details or configuration topics, see Chapter 2, "Sample Network Deployments." This...
... site to Internet service providers or network administrators when they configure Cisco routers. It is asymmetric in this appendix: • ADSL • SHDSL • Network Protocols • Routing Protocol Options • PPP Authentication Protocols • TACACS+ • Network Interfaces • Dial Backup • NAT • Easy IP (Phase 1) • Easy IP (Phase 2) • QoS • Access Lists ADSL is always on additional details or configuration topics, see Chapter 2, "Sample Network Deployments." This...
Configuration Guide
Page 177
...; Disaster Recovery with TFTP Download • Configuration Register • Console Download • Debug Commands • Exiting the ROM Monitor Entering the ROM Monitor To use the ROM monitor to boot up in ROM monitor mode the next time it is powered up or reset. If there is connected to initialize the processor hardware and boot the operating system software. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide C-1 The firmware helps...
...; Disaster Recovery with TFTP Download • Configuration Register • Console Download • Debug Commands • Exiting the ROM Monitor Entering the ROM Monitor To use the ROM monitor to boot up in ROM monitor mode the next time it is powered up or reset. If there is connected to initialize the processor hardware and boot the operating system software. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide C-1 The firmware helps...
Configuration Guide
Page 192
...3 remote configuration 10 verify configuration 11 EIGRP configuration example 15 configuring 14 overview 2, 3 enable password recovering 12 setting 5 enable secret password recovering 12 setting 5 encapsulation 6 Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration 6 error reporting, ROM monitor 8 errors, ATM, displaying 6 Ethernet 5 events, ATM, displaying 7 experience, user 11 extended access list, overview 11 F Fast Ethernet LAN interfaces, configuring 6 Fast Ethernet WAN interface, configuring 6, 3 filtering See access lists firewalls access list configuration...
...3 remote configuration 10 verify configuration 11 EIGRP configuration example 15 configuring 14 overview 2, 3 enable password recovering 12 setting 5 enable secret password recovering 12 setting 5 encapsulation 6 Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration 6 error reporting, ROM monitor 8 errors, ATM, displaying 6 Ethernet 5 events, ATM, displaying 7 experience, user 11 extended access list, overview 11 F Fast Ethernet LAN interfaces, configuring 6 Fast Ethernet WAN interface, configuring 6, 3 filtering See access lists firewalls access list configuration...