Overview

This section contains the following topics:

ESR6300 embedded router modules

An ESR6300 is a compact form factor embedded router module that:

  • provides a board size of 3.0" x 3.75" for integration into PC/104-compatible enclosures with adaptation,

  • simplifies integration and offers system integrators flexibility for use in a wide variety of embedded applications, and

  • runs IOS-XE, a Linux-based OS with enhanced features compared to classic IOS.

ESR6300 configuration options

The ESR card is available in two configuration options:

  • ESR-6300-CON-K9: With a Cisco-designed cooling plate customized to the ESR.

  • ESR-6300-NCP-K9: Without the cooling plate for system integrators who want to design their own custom thermal solution.


Note
The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product.

Note
IOx development is not supported on the ESR6300. While this is platform independent code, it is unsupported and untested on this device.

Complete details on the ESR6300 are found in the product data sheet that is located here:

https://www.cisco.com/c/dam/en/us/products/routers/cisco-embedded-series-router-c78-742901.pdf

Access the CLI using a router console on the ESR6300 router

Procedure

Step 1

Connect your PC or laptop to the ESR6300 router console port using a USB or RS232 cable.

Note

 

If your computer warns that the proper drivers are missing, obtain them from your computer manufacturer or from the USB-to-UART bridge driver site.

Step 2

Power on the router. If the device is fresh from the factory, the System Configuration Dialog appears.

Example:


            --- System Configuration Dialog ---
            
            Would you like to enter the initial configuration dialog? [yes/no]: yes

Note

 

If the router is provisioned for Cisco PnP connect services, the initial dialog is skipped.

Step 3

Respond to the prompts in the System Configuration Dialog to perform basic management setup, including hostname and passwords.

Example:


            Would you like to enter basic management setup? [yes/no]: yes
            
            Enter host name [Router]: <your-host-name>
            
            Enter enable secret: <your-password>
            
            Enter enable password: <your-password>
            
            Enter virtual terminal password: <your-password>

Step 4

Set up the HTTP server account and SNMP configuration as prompted.

Example:


            Setup account for accessing HTTP server? [yes]: <return>
            Username  [admin]: <your-username>
            Password  [cisco]: <your-password>
            Password is UNENCRYPTED.
            Configure SNMP Network Management? [no]: <return>

Step 5

Review the interface summary and select the management interface to configure IP addressing.

Example:


            Enter interface name used to connect to the management network from the above interface summary: vlan1
            
            Configure IP on this interface? [no]: yes
            IP address for this interface: 192.168.1.1
            Subnet mask for this interface [255.255.255.0]: <return>

Step 6

Configure DHCP settings for the network as prompted.

Example:


            Would you like to configure DHCP? [yes/no]: yes
            Enter DHCP pool name: wDHCPool
            Enter DHCP network: 192.168.1.0
            Enter DHCP netmask: 255.255.255.0
            Enter Default router: 192.168.1.1

Step 7

Review the generated configuration script and save the configuration to NVRAM.

Example:


            Enter your selection [2]: 2
            Press RETURN to complete the setup and access the router prompt.

Step 8

After setup completes, press RETURN to access the router CLI prompt and begin further configuration.

Use the console interface

Use this task to access the CLI through the console interface in privileged EXEC mode for performing administrative tasks on your router.

Procedure

Step 1

Use the enable command from user EXEC mode to enter privileged EXEC mode.

Example:

Router> enable

Step 2

Enter your system password at the password prompt. Skip this step if the enable password has not been configured. When your password is accepted, the privileged EXEC mode prompt is displayed.

Example:

Password: enablepass
            Router#

Step 3

Use the quit command to exit the console session.

Example:

Router# quit

Remote console access

Remote console access is a network connectivity method that:

  • enables access to the ESR6300 CLI from a remote location,

  • supports both Telnet and SSH protocols for connection establishment, and

  • provides secure management capabilities through encrypted SSH connections.

Remote console access methods

The ESR6300 supports two primary methods for remote console access:

  • Telnet: Standard protocol for remote terminal access.

  • SSH: Secure Shell protocol providing encrypted communication.

For SSH configuration details, see Secure Shell.

Telnet router console connection preparation

Telnet router console connection preparation is a configuration process that:

  • configures virtual terminal lines to support remote access via Telnet,

  • establishes authentication and password requirements for user login, and

  • ensures proper hostname or IP address configuration for network connectivity.

Configuration requirements

To access the router remotely using Telnet from a TCP/IP network, configure the router to support virtual terminal lines using the line vty global configuration command. Configure the virtual terminal lines to require users to log in and specify a password.

To prevent disabling login on a line, specify a password with the password command when you configure the login command.

If you are using authentication, authorization, and accounting (AAA), configure the login authentication command. To prevent disabling login on a line for AAA authentication when you configure a list with the login authentication command, you must also configure that list using the aaa authentication login global configuration command.

In addition, before you make a Telnet connection to the router, you must have a valid hostname for the router or have an IP address configured on the router.

Configuring the diagnostic and wait banners is optional, but recommended. The banners are especially useful as indicators to users about the status of their Telnet or SSH attempts.


Note

See the Cisco IOS-XE Device hardening guide at https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html for details.

Use Telnet to access a console interface

Use this task to access a router's console interface using Telnet to perform CLI management and configuration tasks.


Note

If you are using an access server, specify a valid port number, such as telnet 172.20.52.40 2004, in addition to the hostname or IP address.

Procedure

Step 1

Use the connect host [port] [keyword] or telnet host [port] [keyword] command from your terminal or PC to connect to the router. Here, host is the router hostname or IP address, port is a decimal port number (23 is the default), and keyword is a supported keyword.

Example:

unix_host% telnet router
            Trying 172.20.52.40...
            Connected to 172.20.52.40.
            Escape character is '^]'.
            unix_host% connect

Step 2

Enter your login password at the prompt. If no password has been configured, press Return.

Example:

User Access Verification
            Password: mypassword

Step 3

Use the enable command from user EXEC mode to enter privileged EXEC mode.

Example:

Router> enable

Step 4

Enter your system password at the password prompt. When the enable password is accepted, the privileged EXEC mode prompt is displayed.

Example:

Password: enablepass
            Router#

Step 5

Use the exit or logout command to exit the Telnet session.

Example:

Router# logout

CLI session management

CLI session management is a network device feature that:

  • enforces configurable inactivity timeouts to automatically terminate idle sessions,

  • provides session locking protection to prevent multiple users from overwriting each other's changes, and

  • reserves spare capacity for CLI session access to ensure remote access availability even when internal processes consume system resources.

Change the CLI session timeout

Use this task for setting the CLI session timeout. It increases the security of a CLI session by automatically ending idle sessions after a specified period.

Procedure

Step 1

Use the configure terminal command to enter global configuration mode.

Example:

Router# configure terminal

Step 2

Use the line console console line -number command to access the console line configuration mode.

Example:

Router(config)# line console 0

Step 3

Use the session-timeout minutes command to set the CLI session timeout interval.

Example:

Router(config-line)# session-timeout 10

Note

 

The minutes value sets the amount of time the CLI waits before timing out. Specify 0 to disable the session timeout.

Step 4

Use the show line console console line -number command to verify the session timeout setting, shown as the value for "Idle Session".

Example:

Router# show line console 0

Lock a CLI session

Use this task to lock a CLI session which prevents unauthorized access by requiring a temporary password to unlock the session.


Note

Before you can use the lock command, you need to configure the line using the lockable command.

Procedure

Step 1

Use the configure terminal command to enter global configuration mode.

Example:

Router# configure terminal

Step 2

Use the line console line-number command to enter the line upon which you want to be able to use the lock command.

Example:

Router(config)# line console 0

Step 3

Use the lockable command to enable the line to be locked.

Example:

Router(config)# lockable

Step 4

Use the exit command to exit line configuration mode.

Example:

Router(config)# exit

Step 5

Use the lock command to lock the CLI session. The system prompts you for a password, which you must enter twice.

Example:

Router# lock
            Password: <password>
            Again: <password>
            Locked