Provisioning the Router

Table Of Contents

Router Provisioning

Secure Device Provisioning

Router Provisioning from USB

Router Provisioning from USB (Load File)

SDP Troubleshooting Tips

Router Provisioning

---

You can provision your router using a USB device attached directly to your router, or using Secure Device Provisioning (SDP). SDP must be supported by your Cisco IOS release to be available in Cisco SDM.

Secure Device Provisioning

This window allows you to use Secure Device Provisioning (SDP) to complete tasks such as enrolling your router with a CA server and configuring your router. Click the Launch SDP button to transfer to the SDP web-browser application to complete the process.

If you are obtaining certificates, Cisco SDM displays the Certificates window where you can view the certificates after they are obtained from the CA.

To learn what you need to do to prepare for SDP enrollment, see SDP Troubleshooting Tips.

For more information on SDP, click the following link:

http://www.cisco.com/en/US/docs/ios/12_4t/12_4t4/s_pkisdp.html

---

Note If the Launch SDP button is absent, you router Cisco IOS release does not support SDP. If the Launch SDP button is disabled, you are logged in to Cisco SDM as a nonroot view user.

---

Router Provisioning from USB

This window tells you if Cisco SDM has detected a USB token or USB flash device connected to your router. You can click the Router Provisioning button to choose a configuration file from the USB token or USB flash device.

If you choose to provision your router this way, the configuration file from the USB token or USB flash device is merged with your router's running configuration file to create a new running configuration file.

Router Provisioning from USB (Load File)

This window allows you to load a configuration file from a USB token or USB flash device connected to your router. The file will be merged with your router's running configuration file to create a new running configuration file.

To load a configuration file, follow these steps:

---

Step 1 Choose the device type from the drop-down menu.

Step 2 Enter the configuration filename in Filename, including the full path, or click Browse and choose the file from the File Selection window.

Step 3 If the device type is a USB token, enter the password to log in to the token in Token PIN.

Step 4 If you want to preview the file, click Preview File to display the contents of the file in the details pane.

Step 5 Click OK to load the chosen file.

---

SDP Troubleshooting Tips

Use this information before enrolling using Secure Device Provisioning (SDP) to prepare the connection between the router and the certificate server. If you experience problems enrolling, you can review these tasks to determine where the problem is.

Guidelines

•When SDP is launched, you must minimize the browser window displaying this help topic so that you can view the SDP web application.

•If you are planning to configure the router using SDP, you should do so immediately after configuring your WAN connection.

•When you complete the configuration changes in SDP, you must return to Cisco SDM and click Refresh on the toolbar to view the status of the trustpoint in the Router Certificates window in the VPN Components tree.

Troubleshooting Tips

These recommendations involve preparations on the local router and on the CA server. You need to communicate these requirements to the administrator of the CA server. Ensure the following:

•The local router and the CA server have IP connectivity between each other. The local router must be able to ping the certificate server successfully, and the certificate server must be able to successfully ping the local router.

•The CA server administrator uses a web browser that supports JavaScript.

•The CA server administrator has enable privileges on the local router.

•The firewall on the local router will permit traffic to and from the certificate server.

•If a firewall is configured on the Petitioner and/or on the Registrar, you must ensure that the Firewall permits HTTP or HTTPS traffic from the PC from which the Cisco SDM /SDP application is invoked.

For more information about SDP, see the following web page:

http://www.cisco.com/en/US/docs/ios/12_4t/12_4t4/s_pkisdp.html