Cisco 861W - Integrated Services Router, Configuration Professional Express, Configuration Professional Wireless Quick Start Manual

Cisco Configuration Professional Quick Start Guide
April 29, 2011
This document explains how to start using Cisco Configuration Professional Express (Cisco CP Express) and Cisco Configuration Professional (Cisco CP).
Cisco Configuration Professional (Cisco CP) is a GUI based device management tool for Cisco access routers. This tool simplifies routing, firewall, IPS, VPN, unified communications, WAN and LAN configuration through GUI based easy-to-use wizards.
Cisco CP is a valuable productivity enhancing tool for network administrators and channel partners for deploying routers with increased confidence and ease. It offers a one-click router lockdown and an innovative voice and security auditing capability to check and recommend changes to router configuration. Cisco CP also monitors router status and troubleshoots WAN and VPN connectivity issues.
Cisco CP Express is a light weight version of Cisco CP. You can use Cisco CP Express to configure basic security features on the router’s LAN and WAN interfaces. Cisco CP Express is available on the router Flash memory.
This document shows you how to set up a PC to connect to the router, give the router an initial network configuration using Cisco CP Express, and then begin using Cisco CP.
This document is intended for users with one of the ordering options (SKU) listed in Table 1, and for users who download these configuration tools from Cisco.com. Refer to the Release Notes for Cisco Configuration Professional for information about supported routers, web browsers, and plug-ins.
Cisco CP ordering options are provided to suit a variety of deployments. Tab le 1 describes the Cisco CP ordering options, the deployment each supports, and how this document can be used.
Americas Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
© 2011 Cisco Systems, Inc. All rights reserved.
Table 1 Cisco CP Ordering Options
ORDERING OPTION (SKU) CD and Configuration File Which Task Sections You Can Use
CCP-CD
This option lets you use Cisco CP Express to set up an individual router when you receive it, and to install Cisco CP from the CD and begin using it.
CCP-CD-NOCF
This option gives you the flexibility of loading a configuration on the router by using a TFTP server or by other means, and allows for batch configuration. If you start a console session, the Setup Command Facility starts automatically.
CCP-EXPRESS
This option lets you use Cisco CP Express to set up an individual router when you receive it. If you want Cisco CP, you can download it from www.cisco.com.
Cisco CP CD?
Yes. The Cisco CP CD is provided.
Default Configuration File in NVRAM?
Yes. A default configuration file is in NVRAM, so the router will have a basic configuration with an IP address on startup.
Default Configuration File in Flash?
Yes. The router can be set to factory defaults using the Factory Defaults feature in Cisco CP Express.
Cisco CP CD?
Yes. The Cisco CP CD is provided.
Default Configuration File in NVRAM?
No. If a console session is established with the router, the Setup Command Facility starts automatically
Default Configuration File in Flash?
Yes. The router can be set to factory defaults using the Factory Defaults feature in Cisco CP Express.
Cisco CP CD?
No. The Cisco CP CD is not provided. If you want to use Cisco CP, you can download it from the following page:
http://www.cisco.com/go/ciscocp
Default Configuration File in NVRAM?
Yes. A default configuration file is in NVRAM, so the router will have a basic configuration with an IP address on startup.
Default Configuration File in Flash?
Yes. The router can be set to factory defaults using the Factory Defaults feature in Cisco CP Express.
You can use the following task sections of this document:
Task 3: Configure the IP Address on the PC
Task 4: Connect the PC to the Router
Task 5: Run the Cisco CP Express Wizard
Task 6: Verify the Initial Configuration
Task 7: Install Cisco CP
Task 8: Start Using Cisco CP
You can use the following task sections of this document:
Task 2: Configure the Router for Cisco CP
Task 7: Install Cisco CP
Task 8: Start Using Cisco CP
You can use the following task sections of this document:
Task 1: Download the Cisco CP Files
Task 3: Configure the IP Address on the PC
Task 4: Connect the PC to the Router
Task 5: Run the Cisco CP Express Wizard
Task 6: Verify the Initial Configuration
Task 7: Install Cisco CP
Task 8: Start Using Cisco CP
Cisco Configuration Professional Quick Start Guide
2
78-18480-08
Task 1: Download the Cisco CP Files
Table 1 Cisco CP Ordering Options (continued)
ORDERING OPTION (SKU) CD and Configuration File Which Task Sections You Can Use
CCP-EXPRESS-NOCF
This option gives you the flexibility of loading a configuration on the router by using a TFTP server or by other means, and allows for batch configuration. If you start a console session, the Setup Command Facility starts automatically.
Cisco CP CD?
No. The Cisco CP CD is not provided. If you want to use Cisco CP, you can download it from the following page:
http://www.cisco.com/go/ciscocp
Default Configuration File in NVRAM?
No. If a console session is established with the router, the Setup Command Facility starts automatically
Default Configuration File in Flash?
Yes. The router can be set to factory defaults using the Factory Defaults feature in Cisco CP Express. Cisco CP is not shipped with the router.
You can use the following task sections of this document:
Task 1: Download the Cisco CP Files
Task 2: Configure the Router for Cisco CP
Task 7: Install Cisco CP
Task 8: Start Using Cisco CP
Task 1: Download the Cisco CP Files
This task section explains how to download the Cisco CP files. See the following table to determine if you need to use this section.
Who Should Use this Section
Who Can Skip this Section
To download Cisco CP, complete the following tasks:
Step 1 Open a web browser and go to the following link:
http://www.cisco.com/go/ciscocp
Step 2 In the Support box, click Download Software.
Step 3 If a web page is displayed that asks for your Cisco.com credentials, enter them in this page, and click
Log In. If you need to obtain Cisco.com credentials, click Register at the top of the page, and then return to this page.
Step 4 In the Download page that allows you to select a release, choose the release that you want to download.
If you did not receive the CD, but you want to install and use Cisco CP, use this section.
If you received the CD, skip this section, and go to Task 2: Configure the
Router for Cisco CP.
78-18480-08
Cisco Configuration Professional Quick Start Guide
3
Task 2: Configure the Router for Cisco CP
Step 5 In the Download page for the release that you chose, click the link Cisco-config-pro-k9-pkg-N_N-ln.zip
to download Cisco CP. In this filename, N_N represents the version number and ln represents the language. If you wanted English-language Cisco CP 1.1, you would click on the link Cisco-config-pro-k9-pkg-1_1-en.zip.
Step 6 Save the downloaded file to the PC.
This package will be used in Task 7: Install Cisco CP, page 20.
Task 2: Configure the Router for Cisco CP
This task section explains how to configure the router to support Cisco CP Express and Cisco CP.
Note The tasks that follow can also be accomplished using the Application > Setup New Device option in
Cisco CP by connecting the PC to the console port of the device. See the topic Device Wizard in the Cisco Configuration Professional User Guide 2.5 at
http://www.cisco.com/en/US/products/ps9422/products_user_guide_list.html for more details.
Who Should Use this Section
If your ordering option does not include a configuration file in NVRAM, and you want to use Cisco CP Express or Cisco CP, use this section.
Who Can Skip this Section
If your ordering option includes a configuration file in NVRAM, you can skip this section. The router is configured to support Cisco CP Express and Cisco CP.
Note Make sure that the PC on which Cisco CP Express and Cisco CP is installed can connect to the router
using its IP address.
Cisco CP Express and Cisco CP require the following basic configuration in order to connect to the router and manage it.
An http or https server must be enabled with local authentication.
A local user account with privilege level 15 and accompanying password must be configured.
Vty line with protocol ssh/telnet must be enabled with local authentication. This is needed for
interactive commands.
An http timeout policy must be configured with the parameters shown in the following procedure to
avoid a known launch issue with Cisco CP.
The PC on which Cisco CP is to run and the interface through which Cisco CP will be launched must
be configured with IP addresses from the same subnet.
There are two ways that you can ensure that the router configuration meets these requirements:
You can copy the default configuration file from router Flash memory to router NVRAM. Each
ordering option provides the default configuration file in router Flash memory. To use this method, see Copying the Default Configuration File to Router NVRAM.
Cisco Configuration Professional Quick Start Guide
4
78-18480-08
You can use the Cisco IOS CLI to enter the necessary configuration commands. To use this method,
see Entering the Configuration Commands Manually.
Copying the Default Configuration File to Router NVRAM
If you want to start with a factory default configuration that is designed to support Cisco CP, you can use the procedure in this section. The factory default configuration includes all the commands necessary to support Cisco CP and configures an Ethernet interface with the IP address 10.10.10.1.
To copy the default configuration file from router Flash memory to NVRAM, complete the following steps.:
Step 1 Log on to the router through the Console port or through an Ethernet port.
Step 2 If you use the Console port, and no running configuration is present in the router, the Setup command
Facility starts automatically, and displays the following text:
--- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]:
Task 2: Configure the Router for Cisco CP
Enter no so that you can enter Cisco IOS CLI commands directly.
If the Setup Command Facility does not start automatically, a running configuration is present, and you should go to the next step.
Step 3 When the router displays the user EXEC mode prompt, enter the enable command, and the enable
password, if one is configured, as shown below:
Router> enable password password Router#
Step 4 To identify the default configuration file, enter the show flash command. The filename is of the form
cpconfig-modelnumber.cfg, where modelnumber represents the router series. For example the configuration file name for the Cisco 860 and 880 series routers is cpconfig-8xx.cfg.
Router# show flash
-#- --length-- -----date/time------ path 1 2903 Apr 15 2008 20:34:48 +00:00 cpconfig-8xx.cfg 2 115712 Apr 15 2008 20:34:50 +00:00 home.tar 3 2279424 Apr 15 2008 20:34:54 +00:00 cpexpress.tar Router#
Step 5 To copy the default configuration file to router NVRAM, enter the copy flash: nvram: command, as
shown in the following example:
Router# copy flash:cpconfig-8xx.cfg nvram:
When the default configuration file is in NVRAM, it becomes the router startup configuration.
Step 6 To make the new startup configuration the running configuration, so that the router can support Cisco
CP, enter the copy startup-config running-config command, as shown in the following example:
Router# copy startup-config running-config
78-18480-08
Cisco Configuration Professional Quick Start Guide
5
Task 2: Configure the Router for Cisco CP
Entering the Configuration Commands Manually
If you don’t want to use the factory default configuration because the router already has a configuration, or for any other reason, you can use the procedure in this section to add each required command to the configuration.
To enter the Cisco IOS commands manually, complete the following steps:
Step 1 Log on to the router through the Console port or through an Ethernet port.
Step 2 If you use the Console port, and no running configuration is present in the router, the Setup command
Facility starts automatically, and displays the following text:
--- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]:
Enter no so that you can enter Cisco IOS CLI commands directly.
If the Setup Command Facility does not start automatically, a running configuration is present, and you should go to the next step.
Step 3 When the router displays the user EXEC mode prompt, enter the enable command, and the enable
password, if one is configured, as shown in the following example:
Router> enable password password
Step 4 Enter config mode by entering the config terminal command, as shown in the following example.
Router> config terminal Router(config)#
Step 5 Using the command syntax shown, create a user account with privilege level 15.
Router(config)# username name privilege 15 secret 0 password
Step 6 If no router interface is configured with an IP address, configure one so that you can access the router
over the network. The following example shows the interface Fast Ethernet 0 configured.
Router(config)# int FastEthernet0 Router(config-if)# ip address 10.10.10.1 255.255.255.248 Router(config-if)# no shutdown Router(config-if)# exit
If you are going to connect the PC directly to the router, the PC must be on the same subnet as this interface.
Step 7 Configure the router as an http server for nonsecure communication, or as an https server for secure
communication.
To configure the router as an http server, enter the ip http server command shown in the example:
Router(config)# ip http server
To configure the router as an https server, enter the ip http secure-server command shown in the example:
Router(config)# ip http secure-server
Step 8 Configure the router for local authentication, by entering the ip http authentication local command, as
shown in the example:
Router(config)# ip http authentication local
Cisco Configuration Professional Quick Start Guide
6
78-18480-08
Configure the Switch for Cisco CP
Step 9 Configure the http timeout policy as shown in the example:
Router(config)# ip http timeout-policy idle 60 life 86400 requests 10000
Step 10 Configure the vty lines for privilege level 15. For nonsecure access, enter the transport input telnet
command. For secure access, enter the transport input telnet ssh command. An example of these commands follows:
Router(config)# line vty 0 4 Router(config-line)# privilege level 15 Router(config-line)# login local Router(config-line)# transport input telnet Router(config-line)# transport output telnet Router(config-line)# transport input telnet ssh Router(config-line)# transport output telnet ssh Router(config-line)# exit Router(config)# line vty 5 15 Router(config-line)# privilege level 15 Router(config-line)# login local Router(config-line)# transport input telnet Router(config-line)# transport output telnet Router(config-line)# transport input telnet ssh Router(config-line)# transport output telnet ssh Router(config-line)# end
Configure the Switch for Cisco CP
This task section explains how to configure the switch to support Cisco CP.
Note The tasks that follow can also be accomplished using the Application > Setup New Device option in
Cisco CP by connecting the PC to the console port of the device. See the topic Device Wizard in the Cisco Configuration Professional User Guide 2.5 at
http://www.cisco.com/en/US/products/ps9422/products_user_guide_list.html for more details.
Note Make sure that the PC on which Cisco CP is installed can connect to the switch using its IP address.
Cisco CP require the following basic configuration in order to connect to the switch and manage it.
An http or https server must be enabled with local authentication.
A local user account with privilege level 15 and accompanying password must be configured.
Vty line with protocol ssh/telnet must be enabled with local authentication. This is needed for
interactive commands.
An http timeout policy must be configured with the parameters shown in the following procedure to
avoid a known launch issue with Cisco CP.
The PC on which Cisco CP is to run and the interface through which Cisco CP will be launched must
be configured with IP addresses from the same subnet.
You can use the Cisco IOS CLI to enter the necessary configuration commands. To use this method, see
Entering the Configuration Commands Manually.
78-18480-08
Cisco Configuration Professional Quick Start Guide
7
Configure the Switch for Cisco CP
Entering the Configuration Commands Manually
To enter the Cisco IOS commands manually, complete the following steps:
Step 1 Log on to the switch through the Console port or through an Ethernet port.
Step 2 If you use the Console port, and no running configuration is present in the switch, the Setup command
Facility starts automatically, and displays the following text:
---System Configuration Dialog---
Continue with configuration dialog? [yes/no]:
Enter no so that you can enter Cisco IOS CLI commands directly.
If the Setup Command Facility does not start automatically, a running configuration is present, and you should go to the next step.
Step 3 When the switch displays the user EXEC mode prompt, enter the enable command, and the enable
password, if one is configured, as shown in the following example:
Switch> enable password password
Step 4 Enter config mode by entering the config terminal command, as shown in the following example.
Switch> config terminal Switch(config)#
Step 5 Using the command syntax shown, create a user account with privilege level 15.
Switch(config)# username name privilege 15 secret 0 password
Step 6 If IP Address is not configured, configure one so that you can access the switch over the network. The
following example shows the IP Address configured on interface Vlan1.
Switch(config)# interface Vlan1 Switch(config-if)# ip address 10.10.10.1 255.255.255.248 Switch(config-if)# no shutdown Switch(config-if)# exit
If you are going to connect the PC directly to the switch, the PC must be on the same subnet as this interface.
Step 7 Configure the switch as an http server for nonsecure communication, or as an https server for secure
communication.
To configure the switch as an http server, enter the ip http server command shown in the example:
Switch(config)# ip http server
To configure the switch as an https server, enter the ip http secure-server command shown in the example:
Switch(config)# ip http secure-server
Step 8 Configure the switch for local authentication, by entering the ip http authentication local command, as
shown in the example:
Switch(config)# ip http authentication local
Step 9 Configure the http timeout policy as shown in the example:
Switch(config)# ip http timeout-policy idle 60 life 86400 requests 10000
Cisco Configuration Professional Quick Start Guide
8
78-18480-08
Task 3: Configure the IP Address on the PC
Step 10 Configure the vty lines for privilege level 15. For nonsecure access, enter the transport input telnet
command. For secure access, enter the transport input telnet ssh command. An example of these commands follows:
Switch(config)# line vty 0 4 Switch(config-line)# privilege level 15 Switch(config-line)# login local Switch(config-line)# transport input telnet Switch(config-line)# transport output telnet Switch(config-line)# transport input telnet ssh Switch(config-line)# transport output telnet ssh Switch(config-line)# exit Switch(config)# line vty 5 15 Switch(config-line)# privilege level 15 Switch(config-line)# login local Switch(config-line)# transport input telnet Switch(config-line)# transport output telnet Switch(config-line)# transport input telnet ssh Switch(config-line)# transport output telnet ssh Switch(config-line)# end
Task 3: Configure the IP Address on the PC
This task section explains how to configure an IP address on the PC so that you can connect to Cisco CP Express and begin configuring the router.
Who Should Use this Section
Who Can Skip this Section
The default configuration file assigns an IP address to a LAN interface on the router, and you must configure the PC to be on the same subnet as the router LAN interface. If the router is a fixed-interface model, it is configured as a DHCP server, and the PC must be configured to accept an IP address automatically. If the router can accept modular interfaces, it is not configured as a DHCP server, and you must configure the PC with a static IP address on the same subnet as the router.
To configure the IP address on the PC, complete the following steps:
Step 1 Find your router model number in Tab l e 2. Note the required IP address configuration for the PC.
Note If the router model you want to configure does not appear in Table 2, see the Release Notes for
Cisco Configuration Professional for updated information.
If you are setting up a new router, and want to use Cisco CP Express to give the router a basic configuration, use this section.
If you don’t want to use Cisco CP Express to give the router a basic configuration, you can skip this section.
78-18480-08
Cisco Configuration Professional Quick Start Guide
9
Task 3: Configure the IP Address on the PC
Table 2 Required PC IP Address Configurations
Router Model DHCP Server Required PC IP Address Configuration
Cisco 815, Cisco 85x, Cisco 86x, Cisco 87x, Cisco 88x, Cisco 891, Cisco 892, Cisco 180x, Cisco 1805, Cisco 1811 and 1812
Cisco 1841, Cisco 1861, Cisco 28xx, Cisco 38xx
Step 2 Configure the IP address on the PC.
If the PC runs Microsoft Windows XP, complete the following steps to display the Internet Protocol TCP/IP Properties dialog:
a. Click Start > Control Panel > Network Connections > Local Area Connection.
b. In the item list, select Internet Protocol (TCP/IP).
c. Click Properties.
d. Go to Step 3.
Yes Obtain an IP address automatically.
No Static IP address from 10.10.10.2 to
10.10.10.6
Subnet Mask: 255.255.255.248
If the PC runs Microsoft Windows Vista, complete the following steps to display the Internet Protocol TCP/IP Properties dialog:
a. Click Start > Control Panel > Network and Sharing Center.
b. In the Tasks column on the left, click Manage network connections.
c. In the Network Connections screen, click Local Area Connection.
d. In the Networking tab of the Local Area Connection Properties dialog, select Internet Protocol
Version 4, and click Properties.
e. Go to Step 3.
Cisco Configuration Professional Quick Start Guide
10
78-18480-08
Step 3 In the General tab, configure the IP address.
To configure the PC to obtain an IP address from a DHCP server, click Obtain an IP address automatically. See Figure 1.
Figure 1 Configuring the PC To Obtain an IP Address Automatically
Task 3: Configure the IP Address on the PC
Click OK to close the dialog.
To configure the PC with a static IP address of 10.10.10.2 and a subnet mask of 255.255.255.248, complete the following steps in the General Tab:
78-18480-08
Cisco Configuration Professional Quick Start Guide
11
Loading...
+ 23 hidden pages