Archive for the ‘Cisco Router Config’ Category

Telnet, part of the TCP/IP protocol suite, is a virtual terminal protocol that allows you to make connections to remote devices, gather information, and run programs.

After your routers and switches are configured, you can use the Telnet program to reconfigure and/or check up on your routers and switches without using a console cable. You run the Telnet program by typing telnet from any command prompt (DOS or Cisco). You need to have VTY passwords set on the routers for this to work.

Remember, you can’t use CDP to gather information about routers and switches that aren’t directly connected to your device. But you can use the Telnet application to connect to your neighbor devices, and then run CDP on those remote devices to get information on them. You can issue the telnet command from any router prompt like this:

RouterA#telnet 172.16.10.2
Trying 172.16.10.2 … Open
Password required, but none set
[Connection to 172.16.10.2 closed by foreign host]
RouterA#

As you can see, I didn’t set my passwords—how embarrassing! Remember that the VTY ports on a router are configured as login, meaning that we have to either set the VTY passwords or use the no login command.

There are five passwords used to secure your Cisco routers: console, auxiliary, telnet (VTY), enable password, and enable secret. Just as you learned earlier in the chapter, the first two passwords are used to set your enable password that’s used to secure privileged mode. This will prompt a user for a password when the enable command is used. The other three are used to configure a password when user mode is accessed either through the console port, through the auxiliary port, or via Telnet.

Enable Passwords

You can set the enable passwords from global configuration mode like this:

Router(config)#enable ?
last-resort Define enable action if no TACACS servers respond
password Assign the privileged level password
secret Assign the privileged level secret
use-tacacs Use TACACS to check enable passwords

The following points describe the enable password parameters:

Last-resort Allows you to still enter the router if you set up authentication through a TACACS server and it’s not available. But it isn’t used if the TACACS server is working.

Password Sets the enable password on older, pre-10.3 systems, and isn’t ever used if an enable secret is set.

Secret Is the newer, encrypted password that overrides the enable password if it’s set.

A banner is more than just a little cool—one very good reason for having a banner is to give any and all who dare attempt to telnet or dial into your internetwork a little security notice.

And you can create a banner to give anyone who shows up on the router exactly the information you want them to have. Make sure you’re familiar with these four available banner types: exec process creation banner, incoming terminal line banner, login banner, and message of the day banner (all illustrated in the code below):

Router(config)#banner ?
LINE c banner-text c, where ‘c’ is a delimiting character
exec Set EXEC process creation banner
incoming Set incoming terminal line banner
login Set login banner
motd Set Message of the Day banner

Message of the day (MOTD) is the most extensively used banner. It gives a message to every person dialing into or connecting to the router via Telnet or auxiliary port, or even through a console port as seen here:

Router(config)#banner motd ?
LINE c banner-text c, where ‘c’ is a delimiting character
Router(config)#banner motd #
Enter TEXT message. End with the character ‘#’.
$ Type your motd banner here.
#
Router(config)#^Z
Router#
00:25:12: %SYS-5-CONFIG_I: Configured from console by console

You can set the identity of the router with the hostname command. This is only locally significant, which means that it has no bearing on how the router performs name lookups or how the router works on the internetwork.

Router#config t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname RouterA
Todd(config)#hostname RouterB
Atlanta(config)#

Even though it’s pretty tempting to configure the hostname after your own name, it’s definitely a better idea to name the router something pertinent to the location.

This is because giving it a hostname that’s somehow relevant to where the device actually lives will make finding it a whole lot easier.

And it also helps you confirm that you are, indeed, configuring the right device.

Learn more about cisco router configuration on how to setting up router banners here.

A router typically goes through five steps when booting up:

1. The router loads and runs POST (located in ROM), testing its hardware components, including memory and interfaces.
2. The bootstrap program is loaded and executed.
3. The bootstrap program finds and loads an IOS image: Possible locations of the IOS image include flash, a TFTP server, or the Mini-IOS in ROM.
4. Once the IOS is loaded, the IOS attempts to find and load a configuration file, which is normally stored in NVRAM if the IOS cannot find a configuration file, it starts up the System Configuration Dialog.
5. After the configuration is loaded, you are presented with the CLI interface (remember that the first mode you are placed into is User EXEC mode.

If you are connected to the console port, you’ll see the following output as your router boots up:

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 6144 Kbytes of main memory
F3: 5593060+79544+421160 at 0×3000060
Cisco Internetwork Operating System Software
IOS ™ 2500 Software (C2500-I-L), Version 12.0(5)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 15-Jun-99 19:49 by phanguye
Image text-base: 0×0302EC70, data-base: 0×00001000

Understanding the Configuration Register Bits

The 16 bits of the configuration register are read from 15 to 0, from left to right. The default configuration setting on Cisco routers is 0×2102. This means that bits 13, 8, and 1 are on, as shown in Table as below. Notice that each set of 4 bits is read in binary with a value of 8, 4, 2, 1:

config-register

Below table is lists of software configuration bit meanings. Notice that bit 6 can be used to ignore the NVRAM contents. This bit is used for password recovery.

Bit
Hex
Description
0–3 0×0000–0×000F Boot field (see Table 9.4).
6 0×0040 Ignore NVRAM contents.
7 0×0080 OEM bit enabled.
8 0×101 Break disabled.
10 0×0400 IP broadcast with all zeros.
5, 11–12 0×0800–0×1000 Console line speed.
13 0×2000 Boot default ROM software if network boot fails.
14 0×4000 IP broadcasts do not have net numbers.
15 0×8000 Enable diagnostic messages and ignore NVRAM
contents.

The boot field, which consists of bits 0–3 in the configuration register, controls the router boot sequence. Table as below describes the boot field bits.

After the interface status messages appear and you press Enter, the Router> prompt will appear. This is called user exec mode (user mode) and it’s mostly used to view statistics, but it’s also a stepping-stone to logging into privileged mode.

You can only view and change the configuration of a Cisco router in privileged exec mode (privileged mode), which you get into with the enable command.

Router>
Router>enable
Router#

You now end up with a Router# prompt, which indicates that you’re in privileged mode, where you can both view and change the router’s configuration.

You can go back from privileged mode into user mode by using the disable command, as seen here:

Router#disable
Router>

At this point, you can type logout to exit the console:

Router>logout
Router con0 is now available
Press RETURN to get started.

Or you could just type logout or exit from the privileged-mode prompt to log out:

Router>en
Router#logout
Router con0 is now available
Press RETURN to get started.

This is steps to logging in to your cisco router after these you need to learn  how to use the commands to config your router follow your jobs or your network diagrams linking, hope this is help you fix out in begin.

Cisco Router Subinterfaces

Subinterfaces allow you to create logical interfaces within the router. The prompt then changes to Router(config-subif)#

Router(config)#int fastethernet0/0.?
<0-4294967295> FastEthernet interface number

Router(config)#int fastethernet0/0.1
Router(config-subif)#

Line Commands
To configure user-mode passwords, use the line command. The prompt then becomes Router(config-line)#:

Router#config t
Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#line ?
<0-70> First Line number
aux Auxiliary line
console Primary terminal line
tty Terminal controller
vty Virtual terminal
x/y Slot/Port for Modems

2600A(config)#line
Router(config)#line console 0
Router(config-line)#

The line console 0 command is known as a major command (also called a global command), and any command typed from the (config-line) prompt is known as a subcommand.

Routing Protocol Configurations

To configure routing protocols such as RIP and IGRP, use the prompt (config-router)#:

Router#config t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#router rip
Router(config-router)#

Learn more next on how to setting up hostname on the cisco router here!

In order to configure and troubleshoot a Cisco internetwork, you need to know the major components of Cisco routers and understand what each one does. Table as below describes the major Cisco router components.

Component
Description
Bootstrap Stored in the microcode of the ROM, the bootstrap is used to bring
a router up during initialization. It will boot the router and then
load the IOS.
POST (power-onself-test) Stored in the microcode of the ROM, the POST is used to check the
basic functionality of the router hardware and determine which interfaces
are present.
ROM monitor Stored in the microcode of the ROM, the ROM monitor is used for
manufacturing, testing, and troubleshooting.
Mini-IOS Called the RXBOOT or bootloader by Cisco, the mini-IOS is a small
IOS in ROM that can be used to bring up an interface and load a Cisco
IOS into flash memory. The mini-IOS can also perform a few other maintenance
operations.
RAM (randomaccessmemory) Used to hold packet buffers, ARP cache, routing tables, and also
the software and data structures that allow the router to function.
Running-config is stored in RAM, and the IOS can also be run from
RAM in some routers.

To make changes to an interface, you use the interface command from global configuration mode:

Router(config)#interface ?
Async Async interface
BVI Bridge-Group Virtual Interface
CTunnel CTunnel interface
Dialer Dialer interface
FastEthernet FastEthernet IEEE 802.3
Group-Async Async Group interface
Lex Lex interface
Loopback Loopback interface
MFR Multilink Frame Relay bundle interface
Multilink Multilink-group interface
Null Null interface
Serial Serial Interface
Tunnel Tunnel interface
Vif PGM Multicast Host interface
Virtual-Template Virtual Template interface
Virtual-TokenRing Virtual TokenRing Interface
range interface range command

Router(config)#interface fastethernet 0/0
Router(config-if)#

Did you notice that the prompt changed to Router(config-if)#? This tells you that you’re in interface configuration mode. And wouldn’t it be nice if the prompt also gave you an indication of what interface you were configuring? Well, at least for now we’ll have to live without the prompt information, because it doesn’t.

You can also learn more about Cisco Router Subinterfaces here!