Cisco Connected Grid Router 2010 Software Configuration Guide

Configuring the Router Hostname

The hostname is used in CLI prompts and default configuration filenames. If you do not configure the router hostname, the router uses the factory-assigned default hostname “Router.”

Do not expect case sensitivity to be preserved in the hostname. Uppercase and lowercase characters are treated identically by many Internet software applications. Conventions dictate that computer names appear in all lowercase characters. For more information, see RFC 1178, Choosing a Name for Your Computer.

The name must also follow the rules for ARPANET hostnames. They must start with a letter, end with a letter or digit, and have only letters, digits, and hyphens as interior characters. Names must be 63 characters or fewer. For more information, see RFC 1035, Domain Names—Implementation and Specification.

SUMMARY STEPS

1. enable

2. configure terminal

3. hostname name

4. Verify that the router prompt displays your new hostname.

5. end

DETAILED STEPS

Configuring the Enable and Enable Secret Passwords

To provide an additional layer of security, particularly for passwords that cross the network or are stored on an unsecured TFTP server, you can use either the enable password command or enable secret command. Both commands accomplish the same thing—they allow you to establish an encrypted password that users must enter to access privileged EXEC (enable) mode.

We recommend that you use the enable secret command because it uses an improved encryption algorithm. Use the enable password command only if you boot an older image of the Cisco IOS software or if you boot older boot ROMs that do not recognize the enable secret command.

For more information, see the “ Configuring Security with Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices ” chapter in Cisco IOS Security Configuration Guide: Securing User Services, Release 15.0. Also, see Cisco IOS Password Encryption Facts and Cisco Guide to Harden Cisco IOS Devices.

Restrictions

If you configure the enable secret command, it takes precedence over the enable password command; the two commands cannot be in effect simultaneously.

SUMMARY STEPS

1. enable

2. configure terminal

3. enable password password

4. enable secret password

5. end

6. enable

7. end

DETAILED STEPS

Configuring the Console Idle Privileged EXEC Timeout

This section describes how to configure the console line’s idle privileged EXEC timeout. By default, the privileged EXEC command interpreter waits for 10 minutes to detect user input before timing out.

When you configure the console line, you can also set communication parameters, specify autobaud connections, and configure terminal operating parameters for the terminal that you are using. For more information on configuring the console line, see Cisco IOS Configuration Fundamentals and Network Management Configuration Guide. In particular, see the “Configuring Operating Characteristics for Terminals” and “Troubleshooting and Fault Management” chapters.

SUMMARY STEPS

1. enable

2. configure terminal

3. line console 0

4. exec-timeout minutes [ seconds ]

5. end

6. show running-config

DETAILED STEPS

Examples

The following example shows how to set the console idle privileged EXEC timeout to 2 minutes 30 seconds:

The following example shows how to set the console idle privileged EXEC timeout to 10 seconds:

Configuring Gigabit Ethernet Interfaces

This sections shows how to assign an IP address and interface description to an Ethernet interface on your router.

For comprehensive configuration information on Gigabit Ethernet interfaces, see the “ Configuring LAN Interfaces ” chapter of Cisco IOS Interface and Hardware Component Configuration Guide, Release 15.0.

SUMMARY STEPS

1. enable

2. show ip interface brief

3. configure terminal

4. interface gigabitethernet 0/ port

5. media-type { rj45 | sfp }

6. description string

7. ip address ip-address mask

8. no shutdown

9. end

10. show ip interface brief

DETAILED STEPS

Examples

Sample Output for show interfaces gigabitethernet0/0 and show interfaces gigabitethernet0/1 Commands

Sample Output for the show ip interface brief Command

Specifying a Default Route or Gateway of Last Resort

This section describes how to specify a default route with IP routing enabled. For alternative methods of specifying a default route, see the Configuring a Gateway of Last Resort Using IP Commands tech note.

The Cisco IOS software uses the gateway (router) of last resort if it does not have a better packet route and if the destination is not a connected network. This section describes how to select a network as a default route (a candidate route for computing the gateway of last resort). The way in which routing protocols propagate the default route information varies for each protocol.

For comprehensive configuration information about IP routing and IP routing protocols, see the Cisco IOS IP Addressing Services Configuration Guide, Release 15.0. In particular, see the “ Configuring IPv4 Addresses ” chapter.

IP Routing

You can configure integrated routing and bridging (IRB) so the router can route and bridge simultaneously. The router will act as an IP host on the network whether routing is enabled or not. For more information about IRB, see Integrated Routing and Bridging (IRB).

IP routing is automatically enabled in the Cisco IOS software. When IP routing is configured, the system uses a configured or learned route to forward packets, including a configured default route.

Note This task section does not apply when IP routing is disabled. To specify a default route when IP routing is disabled, refer to Configuring a Gateway of Last Resort Using IP Commands.

Default Routes

A router might not be able to determine the routes to all other networks. To provide complete routing capability, the common practice is to use some routers as smart routers and give the remaining routers default routes to the smart router. (Smart routers have routing table information for the entire internetwork.) These default routes can be passed along dynamically, or can be configured into the individual routers.

Most dynamic interior routing protocols include a mechanism for causing a smart router to generate dynamic default information that is then passed along to other routers.

Default Network

If a router has an interface that is directly connected to the specified default network, the dynamic routing protocols running on the router will generate or source a default route. In the case of Routing Information Protocol (RIP), the router advertises the pseudonetwork 0.0.0.0. In the case of Interior Gateway Routing Protocol (IGRP), the network itself is advertised and flagged as an exterior route.

A router that is generating the default for a network also may need a default of its own. One way a router can generate its own default is to specify a static route to the network 0.0.0.0 through the appropriate device.

Gateway of Last Resort

When default information is being passed along through a dynamic routing protocol, no further configuration is required. The system periodically scans its routing table to choose the optimal default network as its default route. In the case of RIP, there is only one choice, network 0.0.0.0. In the case of IGRP, there might be several networks that can be candidates for the system default. The Cisco IOS software uses both administrative distance and metric information to determine the default route (gateway of last resort). The selected default route appears in the gateway of last resort display of the show ip route EXEC command.

If dynamic default information is not being passed to the software, candidates for the default route are specified with the ip default-network global configuration command. In this usage, the ip default-network command takes an unconnected network as an argument. If this network appears in the routing table from any source (dynamic or static), it is flagged as a candidate default route and is a possible choice as the default route.

If the router has no interface on the default network, but does have a route to it, it considers this network as a candidate default path. The route candidates are examined and the best one is chosen, based on administrative distance and metric. The gateway to the best default path becomes the gateway of last resort.

SUMMARY STEPS

1. enable

2. configure terminal

3. ip routing

4. ip route dest-prefix mask next-hop-ip-address [ admin-distance ] [ permanent ]

5. ip default-network network-number
or
ip route dest-prefix mask next-hop-ip-address

6. end

7. show ip route

DETAILED STEPS

Examples

Sample Output for show ip route Command

Configuring Virtual Terminal Lines for Remote Console Access

Virtual terminal lines (vty) are used to allow remote access to the router. This section shows you how to configure the vty with a password, so that only authorized users can remotely access the router.

The router has five vty lines by default. However, you can create additional vty lines as described in Cisco IOS Terminal Services Configuration Guide, Release 15.0. See Configuring Terminal Operating Characteristics for Dial-In Sessions section.

Line passwords and password encryption is described in the “ Configuring Security with Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices ” section of Cisco IOS Security Configuration Guide: Securing User Services, Release 15.0. If you want to secure the vty lines with an access list, see the “ IP Access List Overview ” chapter of Cisco IOS Security Configuration Guide: Securing the Data Plane, Release 15.0. Also, see Cisco IOS Password Encryption Facts.

SUMMARY STEPS

1. enable

2. configure terminal

3. line vty line-number [ ending-line-number ]

4. password password

5. login

6. end

7. show running-config

8. From another network device, attempt to open a Telnet session to the router.

DETAILED STEPS

Examples

The following example shows how to configure virtual terminal lines with a password:

What to Do Next

After you configure the vty lines, complete these steps:

• (Optional) To encrypt the virtual terminal line password, see the “ Configuring Security with Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices ” section of Cisco IOS Security Configuration Guide: Securing User Services, Release 15.0. Also, see Cisco IOS Password Encryption Facts.
• (Optional) To secure the vty lines with an access list, see Cisco IOS Security Configuration Guide: Securing the Data Plane, Release 15.0.
• (Optional) To configure an ACL on the line for the Ethernet Switch Module (ESM) to secure access to the CGR 2010 and ESM, see Securing Access to the Ethernet Switch Module (ESM).

Securing Access to the Ethernet Switch Module (ESM)

You can configure an access list on the corresponding line number of the CGR 2010 slot containing the ESM to secure access to the ESM and prevent external access to the CGR 2010 using reverse telnet.

On a CGR2010 with an ESM module, the line number is always either 3 or 131. Perform the following steps to determine the line number and apply the ACL to that line.

SUMMARY STEPS

1. enable

2. show line

3. configure terminal

4. line line-number

5. access-class access-list-number in

6. access-class access-list-number out

7. access-list access-list-number deny tcp any any eq 2003

8. access-list access-list-number permit ip any any

9. end

10. write memory

DETAILED STEPS

Example

In the following example, lines 3 and 131 correspond to ESMs in slots 0 and 2, respectively. This example shows configuring the access list for line 3:

Configuring the Auxiliary Line

This section describes how to enter line configuration mode for the auxiliary (AUX) line. How you configure the auxiliary line depends on your particular implementation of the auxiliary port. See the following documents for detailed information on configuring the auxiliary line:

• Technical Note: Configuring a Modem on the AUX Port for EXEC Dialin Connectivity
• Sample Configuration: Configuring Dialout Using a Modem on the AUX Port
• Sample Configuration: Configuring AUX-to-AUX Port Async Backup with Dialer Watch
• Technical Note: Modem-Router Connection Guide

SUMMARY STEPS

1. enable

2. configure terminal

3. line aux 0

4. See the tech notes and sample configurations to configure the line for your particular implementation of the AUX port.

DETAILED STEPS

Verifying Network Connectivity

This section describes how to verify network connectivity for your router.

Prerequisites

• Complete all previous configuration tasks in this document.
• The router must be connected to a properly configured network host.

SUMMARY STEPS

1. enable

2. ping [ ip-address | hostname ]

3. telnet { ip-address | hostname }

DETAILED STEPS

Examples

The following display shows an example output for the ping command when you ping the IP address 172.25.212.39:

The following display shows an example output for the ping command when you ping the IP hostname donald:

Saving Your Router Configuration

This section describes how to avoid losing your configuration at the next system reload or power cycle by saving the running configuration to the startup configuration in NVRAM. The NVRAM provides 256KB of storage on the router.

SUMMARY STEPS

1. enable

2. copy running-config startup-config

DETAILED STEPS

Saving Backup Copies of Configuration and System Image

To aid file recovery and minimize downtime in case of file corruption, we recommend that you save backup copies of the startup configuration file and the Cisco IOS software system image file on a server.

SUMMARY STEPS

1. enable

2. copy nvram:startup-config { ftp: | rcp: | tftp: }

3. show { flash0 | flash1 } :

4. copy { flash0 | flash1 } : { ftp: | rcp: | tftp: }

DETAILED STEPS

Examples

Copying the Startup Configuration to a TFTP Server: Example

The following example shows the startup configuration being copied to a TFTP server:

Copying from Flash Memory to a TFTP Server: Example

The following example shows the use of the show flash command in privileged EXEC to learn the name of the system image file and the use of the copy { flash0 } : tftp: privileged EXEC command to copy the system image to a TFTP server. The router uses the default username and password.

Monitoring Environmental Parameters

The Cisco Connected Grid Router 2010 includes sensors that measure the status and internal temperature of critical components. Internal component temperatures are measured for the central processor, internal components, and interface cards. A 72-hour temperature history is stored for the central processor at one-hour intervals.

Power consumption and power supplies are monitored. The measured temperature is compared to predetermined threshold limits and, if the temperature does not fall within the limits, the information is recorded and a warning sent to the system administrator by means of Simple Network Management Protocol (SNMP) traps until the temperature falls back to its normal range.

A command-line interface (CLI) command allows the display of the current system environment and temperature status.

Use the following CLI to monitor the system environment:

where:

• all—Displays all environmental monitor parameters
• last—Displays the last environmental monitor parameters
• table—Displays the table of temperature and voltage ranges

The following example shows a sample output of the show environment all command. In the following example, the power supplies are external:

The following example shows a sample output of the show environment last command. In the following example, the power supplies are external:

The following example shows a sample output of the show environment table command. In the following example, the power supplies are external: