Software Guide
Page 3
...Interfaces 1-4 Configure WAN Interfaces 1-4 Configure the Fast Ethernet WAN Interface 1-5 Configure the ATM WAN Interface 1-5 Configure the Wireless Interface 1-6 Configuring a Loopback Interface 1-6 Configuration Example 1-7 Verifying Your Configuration 1-7 Configuring Command-Line Access to the Router 1-8 Configuration Example 1-9 Configuring Static Routes 1-10 Configuration Example 1-10 Verifying Your Configuration 1-10 Configuring Dynamic Routes 1-11 Configuring RIP 1-11 Configuration Example 1-12 Verifying Your Configuration 1-12 Cisco Secure Router 520 Series Software Configuration Guide...
...Interfaces 1-4 Configure WAN Interfaces 1-4 Configure the Fast Ethernet WAN Interface 1-5 Configure the ATM WAN Interface 1-5 Configure the Wireless Interface 1-6 Configuring a Loopback Interface 1-6 Configuration Example 1-7 Verifying Your Configuration 1-7 Configuring Command-Line Access to the Router 1-8 Configuration Example 1-9 Configuring Static Routes 1-10 Configuration Example 1-10 Verifying Your Configuration 1-10 Configuring Dynamic Routes 1-11 Configuring RIP 1-11 Configuration Example 1-12 Verifying Your Configuration 1-12 Cisco Secure Router 520 Series Software Configuration Guide...
Software Guide
Page 21
... settings, routing protocols, interfaces, and command-line access using the CLI. As part of service (QoS) features. This chapter provides procedures for Customizing the Default Parameters • Interface Port Labels • Configuring Basic Parameters • Configuring Static Routes • Configuring Dynamic Routes Each section includes a configuration example and verification steps, as available. Note Individual router routers may not support every feature described throughout this guide. For more information on how to the Internet. OL-14210-01 Cisco Secure Router 520 Series...
... settings, routing protocols, interfaces, and command-line access using the CLI. As part of service (QoS) features. This chapter provides procedures for Customizing the Default Parameters • Interface Port Labels • Configuring Basic Parameters • Configuring Static Routes • Configuring Dynamic Routes Each section includes a configuration example and verification steps, as available. Note Individual router routers may not support every feature described throughout this guide. For more information on how to the Internet. OL-14210-01 Cisco Secure Router 520 Series...
Software Guide
Page 22
... Network Address Translation has been assigned. For each PVC determine the type of encapsulation, you plan to view the initial configuration. AAL5MUX PPP-With this type of AAL5 encapsulation supported. All of the LAN and WAN interfaces have been created, console and VTY ports are typically virtual path identifier (VPI), virtual circuit identifier (VCI), and traffic shaping parameters. - Step 2 Use the show running-config command to connect over an ADSL line: Cisco Secure Router 520 Series Software Configuration Guide...
... Network Address Translation has been assigned. For each PVC determine the type of encapsulation, you plan to view the initial configuration. AAL5MUX PPP-With this type of AAL5 encapsulation supported. All of the LAN and WAN interfaces have been created, console and VTY ports are typically virtual path identifier (VPI), virtual circuit identifier (VCI), and traffic shaping parameters. - Step 2 Use the show running-config command to connect over an ADSL line: Cisco Secure Router 520 Series Software Configuration Guide...
Software Guide
Page 24
...to configure selected global parameters for your router are automatically configured as part of the default VLAN and as such, they are connecting to the router using the console port. Configure Fast Ethernet LAN Interfaces The Fast Ethernet LAN interfaces on the global parameter commands, see Chapter 5, "Configuring a LAN with individual addresses. The Cisco Secure Router 520 ADSL-over-POTS and Cisco Secure Router 520 ADSL-over-ISDN routers have one ATM interface for WAN connection. For more information about creating VLANs, see the Cisco IOS Release 12.3 documentation...
...to configure selected global parameters for your router are automatically configured as part of the default VLAN and as such, they are connecting to the router using the console port. Configure Fast Ethernet LAN Interfaces The Fast Ethernet LAN interfaces on the global parameter commands, see Chapter 5, "Configuring a LAN with individual addresses. The Cisco Secure Router 520 ADSL-over-POTS and Cisco Secure Router 520 ADSL-over-ISDN routers have one ATM interface for WAN connection. For more information about creating VLANs, see the Cisco IOS Release 12.3 documentation...
Software Guide
Page 28
...Cisco Secure Router 520 Series Software Configuration Guide 1-8 OL-14210-01 This example specifies a console terminal for the console terminal line. Enables password checking at terminal session login. Entering a timeout of 0 0 specifies never to the router, beginning in global configuration mode: Step 1 Command line [aux | console | tty | vty] line-number Example: Router(config)# line console 0 Router(config-line)# Step 2 password password Example: Router(config-line)# password 5dr4Hepw3 Router(config-line)# Step 3 login Example: Router(config-line)# login Router(config-line...
...Cisco Secure Router 520 Series Software Configuration Guide 1-8 OL-14210-01 This example specifies a console terminal for the console terminal line. Enables password checking at terminal session login. Entering a timeout of 0 0 specifies never to the router, beginning in global configuration mode: Step 1 Command line [aux | console | tty | vty] line-number Example: Router(config)# line console 0 Router(config-line)# Step 2 password password Example: Router(config-line)# password 5dr4Hepw3 Router(config-line)# Step 3 login Example: Router(config-line)# login Router(config-line...
Software Guide
Page 29
...Enables password checking at the virtual terminal session login. line con 0 exec-timeout 10 0 password 4youreyesonly login transport input none (default) stopbits 1 (default) line vty 0 4 password secret login ! OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide 1-9 You do not need to privileged EXEC mode. Exits line configuration mode, and returns to input the commands marked "default." These commands appear automatically in the configuration file generated when you use the show running-config command. ! Specifies a unique password for remote console access...
...Enables password checking at the virtual terminal session login. line con 0 exec-timeout 10 0 password 4youreyesonly login transport input none (default) stopbits 1 (default) line vty 0 4 password secret login ! OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide 1-9 You do not need to privileged EXEC mode. Exits line configuration mode, and returns to input the commands marked "default." These commands appear automatically in the configuration file generated when you use the show running-config command. ! Specifies a unique password for remote console access...
Software Guide
Page 31
...S* 0.0.0.0/0 is directly connected, FastEthernet0 Configuring Dynamic Routes In dynamic routing, the network protocol adjusts the path automatically, based on which RIP is to be applied, using the address of the network of these steps to learn routes dynamically. per-user static route o - Changes in dynamic routes are shared with other routers in global configuration mode: Step 1 Command router rip Example: Router# configure terminal Router(config)# router rip Router(config-router)# Task Enters router configuration mode, and enables RIP on the router, beginning in the network.
...S* 0.0.0.0/0 is directly connected, FastEthernet0 Configuring Dynamic Routes In dynamic routing, the network protocol adjusts the path automatically, based on which RIP is to be applied, using the address of the network of these steps to learn routes dynamically. per-user static route o - Changes in dynamic routes are shared with other routers in global configuration mode: Step 1 Command router rip Example: Router# configure terminal Router(config)# router rip Router(config-router)# Task Enters router configuration mode, and enables RIP on the router, beginning in the network.
Software Guide
Page 41
... route prefix mask {interface-type interface-number} Example: Router(config)# ip route 10.10.25.2 255.255.255.255 dialer 0 Router(config)# Sets the IP route for the default gateway for either static or dynamic address translations. You can be set, see the Cisco IOS Dial Technologies Command Reference. Chapter 3 Configuring PPP over Ethernet with it. OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide 3-5 dialer pool number Example: Router(config-if)# dialer pool 1 Router(config-if)# Specifies the dialer pool to use to connect to your router...
... route prefix mask {interface-type interface-number} Example: Router(config)# ip route 10.10.25.2 255.255.255.255 dialer 0 Router(config)# Sets the IP route for the default gateway for either static or dynamic address translations. You can be set, see the Cisco IOS Dial Technologies Command Reference. Chapter 3 Configuring PPP over Ethernet with it. OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide 3-5 dialer pool number Example: Router(config-if)# dialer pool 1 Router(config-if)# Specifies the dialer pool to use to connect to your router...
Software Guide
Page 58
...-server server-address1 [server-address2...server-address6] Example: Specifies the address of the user's physical location or LAN connection. Configure DHCP Chapter 5 Configuring a LAN with DHCP and VLANs Note Whenever you change server properties, you must reload the server with NAT. Cisco Secure Router 520 Series Software Configuration Guide 5-2 OL-14210-01 In this chapter assume you can configure VLANs. VLANs The Cisco Secure Router 520 Series routers support four Fast Ethernet ports on which you have not performed these steps to configure your router. Configure DHCP...
...-server server-address1 [server-address2...server-address6] Example: Specifies the address of the user's physical location or LAN connection. Configure DHCP Chapter 5 Configuring a LAN with DHCP and VLANs Note Whenever you change server properties, you must reload the server with NAT. Cisco Secure Router 520 Series Software Configuration Guide 5-2 OL-14210-01 In this chapter assume you can configure VLANs. VLANs The Cisco Secure Router 520 Series routers support four Fast Ethernet ports on which you have not performed these steps to configure your router. Configure DHCP...
Software Guide
Page 81
... Router(config)# This example uses a local authentication database. See the Cisco IOS Security Configuration Guide and the Cisco IOS Security Command Reference for details. When such a transform set is found, it is the same at method1 [method2...] login, and specifies the method used to use a RADIUS server for this . You could also use a RADIUS server for this . This example implements a username of cisco with an encrypted password of all level | reverse-access | configuration} {default | network-related service requests, including PPP, list...
... Router(config)# This example uses a local authentication database. See the Cisco IOS Security Configuration Guide and the Cisco IOS Security Command Reference for details. When such a transform set is found, it is the same at method1 [method2...] login, and specifies the method used to use a RADIUS server for this . You could also use a RADIUS server for this . This example implements a username of cisco with an encrypted password of all level | reverse-access | configuration} {default | network-related service requests, including PPP, list...
Software Guide
Page 116
...: DSL: Sent command 0x5 12-6 Cisco Secure Router 520 Series Software Configuration Guide OL-14210-01 For this reason, use debug commands only to troubleshoot specific problems. The best time to diagnose problems in an ATM network. Note that is up and training successfully. The no form of low network traffic so that other activity on the network is not communicating correctly. The no form of the network. Example 12-6 shows an ADSL line...
...: DSL: Sent command 0x5 12-6 Cisco Secure Router 520 Series Software Configuration Guide OL-14210-01 For this reason, use debug commands only to troubleshoot specific problems. The best time to diagnose problems in an ATM network. Note that is up and training successfully. The no form of low network traffic so that other activity on the network is not communicating correctly. The no form of the network. Example 12-6 shows an ADSL line...
Software Guide
Page 121
... configuration file: Router# show startup-config command output. Instead, complete the password recovery process by performing the steps in the "Reset the Configuration Register Value" section. Router(config)# config-reg value OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide 12-11 Chapter 12 Troubleshooting Recovering a Lost Password Step 7 Step 8 Enter the enable command to display an enable password in the show startup-config If you recorded. Configuration changes can be made only in enable mode: Router> enable The prompt changes...
... configuration file: Router# show startup-config command output. Instead, complete the password recovery process by performing the steps in the "Reset the Configuration Register Value" section. Router(config)# config-reg value OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide 12-11 Chapter 12 Troubleshooting Recovering a Lost Password Step 7 Step 8 Enter the enable command to display an enable password in the show startup-config If you recorded. Configuration changes can be made only in enable mode: Router> enable The prompt changes...
Software Guide
Page 125
... use Cisco IOS software can configure your router from a PC connected through the console port using . Table A-1 lists some common types of this software, which are based on the type of the configuration topic chapters described in Chapter 10, "Additional Configuration Options." This appendix contains the following chapters: • Chapter 1, "Basic Router Configuration" • Chapter 2, "Sample Network Deployments" • One of PC you are configuring your router. Configuring the Router from a PC • Understanding Command Modes...
... use Cisco IOS software can configure your router from a PC connected through the console port using . Table A-1 lists some common types of this software, which are based on the type of the configuration topic chapters described in Chapter 10, "Additional Configuration Options." This appendix contains the following chapters: • Chapter 1, "Basic Router Configuration" • Chapter 2, "Sample Network Deployments" • One of PC you are configuring your router. Configuring the Router from a PC • Understanding Command Modes...
Software Guide
Page 127
... logout command. • Change terminal settings. • Perform basic tests. • Display system information. • To exit to user EXEC Use this mode to your router command. and serial interfaces or • To exit to this guide. Router# Global configuration Enter the configure command from user EXEC mode. command. OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide A-3 EXEC mode, enter the end command, or press Ctrl-Z. • To enter subinterface configuration mode, specify a subinterface with your router configuration, access...
... logout command. • Change terminal settings. • Perform basic tests. • Display system information. • To exit to user EXEC Use this mode to your router command. and serial interfaces or • To exit to this guide. Router# Global configuration Enter the configure command from user EXEC mode. command. OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide A-3 EXEC mode, enter the end command, or press Ctrl-Z. • To enter subinterface configuration mode, specify a subinterface with your router configuration, access...
Software Guide
Page 128
... Arrow key. Cisco Secure Router 520 Series Software Configuration Guide A-4 OL-14210-01 enter the exit command. • To exit to interface clear Reset functions ... access-enable Create a temporary access-list entry access-profile Apply user-profile to privileged EXEC mode, enter the end command, or press Ctrl-Z. For a list of the router commands followed by a question mark (with the desired line number and optional line type, for example router rip, from global configuration mode. To redisplay a command you should password-protect these commands to...
... Arrow key. Cisco Secure Router 520 Series Software Configuration Guide A-4 OL-14210-01 enter the exit command. • To exit to interface clear Reset functions ... access-enable Create a temporary access-list entry access-profile Apply user-profile to privileged EXEC mode, enter the end command, or press Ctrl-Z. For a list of the router commands followed by a question mark (with the desired line number and optional line type, for example router rip, from global configuration mode. To redisplay a command you should password-protect these commands to...
Software Guide
Page 138
... dialer interface from a DHCP server. Dynamic address translations are invisible to allocate outside domain. NAT is a client-server protocol that require external access, saving time and money. This feature enables a Cisco router to automatically negotiate its own registered WAN interface IP address from which to the Internet. Because Easy IP (Phase 1) uses existing port-level multiplexed NAT functionality within the Internet, NAT can support a separate address pool for all hosts that enables devices on the remote LAN are...
... dialer interface from a DHCP server. Dynamic address translations are invisible to allocate outside domain. NAT is a client-server protocol that require external access, saving time and money. This feature enables a Cisco router to automatically negotiate its own registered WAN interface IP address from which to the Internet. Because Easy IP (Phase 1) uses existing port-level multiplexed NAT functionality within the Internet, NAT can support a separate address pool for all hosts that enables devices on the remote LAN are...
Software Guide
Page 143
... to the router over the console port. OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide C-1 If there is connected to perform certain configuration tasks, such as recovering a lost password or downloading software over the console port. Perform these steps to configure the router to initialize the processor hardware and boot the operating system software. Enters global configuration mode. Enter your password if prompted. The firmware helps to boot up or reset. You can use the ROM...
... to the router over the console port. OL-14210-01 Cisco Secure Router 520 Series Software Configuration Guide C-1 If there is connected to perform certain configuration tasks, such as recovering a lost password or downloading software over the console port. Perform these steps to configure the router to initialize the processor hardware and boot the operating system software. Enters global configuration mode. Enter your password if prompted. The firmware helps to boot up or reset. You can use the ROM...
Software Guide
Page 146
... during the TFTP download process. IP_SUBNET_MASK= ip_address IP address of the default gateway of the router. MAC address 00:00:0c:07:ac:01 Cisco Secure Router 520 Series Software Configuration Guide C-4 OL-14210-01 There are case sensitive and must be set with these commands before using the tftpdnld command: Variable Command Configures how the router displays file download progress. This is the default setting. 2-Detailed progress is displayed. 1-Exclamation points (!!!) are used during the file download process; Note...
... during the TFTP download process. IP_SUBNET_MASK= ip_address IP address of the default gateway of the router. MAC address 00:00:0c:07:ac:01 Cisco Secure Router 520 Series Software Configuration Guide C-4 OL-14210-01 There are case sensitive and must be set with these commands before using the tftpdnld command: Variable Command Configures how the router displays file download progress. This is the default setting. 2-Detailed progress is displayed. 1-Exclamation points (!!!) are used during the file download process; Note...
Software Guide
Page 156
... A-4 reset C-3 ROM monitor C-2 to C-3 ROM monitor debugging C-8, C-9 show atm interface 12-5 show dsl interface atm 4-7 IN-2 Cisco Secure Router 520 Series Software Configuration Guide show interface 12-3 stack C-8 sysret C-8 tftpdnld C-3, C-5 undoing A-6 xmodem C-7 command variables listing A-4 TFTP download C-4 committed access rate See CAR configuration changes making A-5 saving 12-11, A-6 configuration examples command-line access 1-9 DHCP server 5-4 dynamic routes 1-12 PPPoA with NAT 4-9 PPPoE with NAT 3-8 simple firewall 8-5 static route 1-10 VPN with IPsec and GRE 7-9 VPN with IPsec...
... A-4 reset C-3 ROM monitor C-2 to C-3 ROM monitor debugging C-8, C-9 show atm interface 12-5 show dsl interface atm 4-7 IN-2 Cisco Secure Router 520 Series Software Configuration Guide show interface 12-3 stack C-8 sysret C-8 tftpdnld C-3, C-5 undoing A-6 xmodem C-7 command variables listing A-4 TFTP download C-4 committed access rate See CAR configuration changes making A-5 saving 12-11, A-6 configuration examples command-line access 1-9 DHCP server 5-4 dynamic routes 1-12 PPPoA with NAT 4-9 PPPoE with NAT 3-8 simple firewall 8-5 static route 1-10 VPN with IPsec and GRE 7-9 VPN with IPsec...
Software Guide
Page 157
... A-1 static routes 1-10 VLANs 5-1 VPDN group number 3-2 VPNs 6-1, 7-2 WAN interface 1-4 your network, preparing for 1-2 confreg command C-6 connections, setting up 1-2 console download C-7 to C-8 context command C-8 copy running-config startup-config command A-6 copy tftp flash command C-3 corporate network, connecting to 1-2 crypto map, applying to interface 6-8, 7-7 D debug atm commands 12-5 debug atm errors command 12-6 debug atm events command 12-6, 12-7 debug atm packet command 12-7 debug commands, ROM monitor C-8, C-9 default configuration, viewing 1-2 DHCP configuring DHCP server 5-2 OL...
... A-1 static routes 1-10 VLANs 5-1 VPDN group number 3-2 VPNs 6-1, 7-2 WAN interface 1-4 your network, preparing for 1-2 confreg command C-6 connections, setting up 1-2 console download C-7 to C-8 context command C-8 copy running-config startup-config command A-6 copy tftp flash command C-3 corporate network, connecting to 1-2 crypto map, applying to interface 6-8, 7-7 D debug atm commands 12-5 debug atm errors command 12-6 debug atm events command 12-6, 12-7 debug atm packet command 12-7 debug commands, ROM monitor C-8, C-9 default configuration, viewing 1-2 DHCP configuring DHCP server 5-2 OL...