Basic router configuration

This chapter contains these sections:

IR8140H interface names

The supported hardware interfaces and their naming conventions are as given in the table.

Table 1. IR8140H hardware interfaces and naming conventions

Hardware interface

Naming convention

Gigabit Ethernet ports

GigabitEthernet0/0/0

GigabitEthernet0/0/1

Cellular Interface

Cellular0/2/0

Cellular0/2/1

Cellular0/3/0

Cellular0/3/1

mSATA SSD

msata

GPIO

alarm contact 1-2

WPAN

Wpan0/1/0

Verify basic configuration of router

The basic configuration is a result of the entries you made during the initial configuration dialog. This means the router has at least one interface set with an IP address to be reachable, either through WebUI or to allow the PnP process to work.

Procedure

Use the show running-config command to view the initial configuration.

Example:


                        IR8140H# 
                        show running-config
Building configuration...
Current configuration : 16150 bytes
!
! Last configuration change at 19:21:02 UTC Thu Nov 19 2020
!
version 17.5
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname IR8140H
!
boot-start-marker
boot system bootflash:/ir8100-universalk9.BLD_POLARIS_DEV_LATEST_20201108_112843.SSA.bin
boot-end-marker
!
!
!
aaa new-model
!
!
aaa authorization exec default local
aaa authorization network FlexVPN_Author local
!
aaa session-id common
!
ip domain name cisco.com
!
login on-success log
!
subscriber templating
!
multilink bundle-name authenticated
!
chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"
chat-script hspa-R7 "" "AT!SCACT=1,1" TIMEOUT 60 "OK"
!
!
crypto pki trustpoint TP-self-signed-1536777273
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1536777273
 revocation-check none
 rsakeypair TP-self-signed-1536777273
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
crypto pki trustpoint LDevID
 enrollment retry count 4
 enrollment retry period 2
 enrollment mode ra
 enrollment profile LDevID
 serial-number none
 fqdn none
 ip-address none
 password
 fingerprint 7107DAB5FBDAC555893B7C047D202B5676F6C9AB
 subject-name serialNumber=PID:IR8140H-P-K9 SN:FDO2420J78D,CN= IR8140H
 revocation-check none
 rsakeypair LDevID 2048
!
crypto pki profile enrollment LDevID
 enrollment url  http://172.27.127.21/certsrv/mscep/mscep.dll
!
crypto pki certificate map FlexVPN_Cert_Map 1
 issuer-name co cn = sit-dc-sit-dc-ca
!
crypto pki certificate chain TP-self-signed-1536777273
 certificate self-signed 01
  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 31353336 37373732 3733301E 170D3230 31313137 32323237
  33325A17 0D333031 31313732 32323733 325A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 35333637
  37373237 33308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
  0A028201 01008D4E BBE387AB 5FE56CF9 77532A82 554176A9 3F13D193 729E1C9D
  0E9AC390 D66E845E 78AFEBFE 09DD0848 15DE936F E18FB64D 85E97E52 87412474
  DE16C42B 3101B84E 8C4F14C4 67EF8867 4AEE4996 6229CFBD 15556C90 F37C1C3D
  4D77A046 5934F3C9 6A98DDEE E4413E33 0F260D52 2EBB88C6 C0A1D9DC 633D13BB
  0DAC3ACD 6C980F61 C6521868 52EA0150 95C33DB0 26C0AB56 6CB67AD1 401CBBDD
  D1994822 1337B943 019F9EDF 4FC72749 01B66A31 ACD60696 14AF9A68 3D7578F1
  7BFE63CE A0D4A2F3 DA577B90 15C875EA F175CA24 B17E15A7 9C892E54 1D960D71
  907D4D23 2CE67E1A 720AA7A6 9EE1EFEE 12A26353 B258FECB CBAC3FF2 95DAC73D
  BBEC1F9E E1030203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
  301F0603 551D2304 18301680 14A1A44D ABD867DC 26C5B2F2 3A8D9504 807FFA9C
  E6301D06 03551D0E 04160414 A1A44DAB D867DC26 C5B2F23A 8D950480 7FFA9CE6
  300D0609 2A864886 F70D0101 05050003 82010100 267416FA CF69B1CD 96825C67
  483D698D 2B2838E5 94CDA5ED DA5E6BC0 E45739F9 676A4828 32FA2FDE C613BE3D
  6B00BA4B 97F52155 966726BE B02D6E48 685190E6 2AF094BC E2A4C087 B5F2449B
  4BFF2329 FD4D222D C11C3F73 727FD13C 901C51D0 3F08C6BA C6415D2F 078907E5
  D8CCCB8F E28D9485 D2AA4F6D 300A7A2D 289F5E49 79637E6D 7B678332 EEFF2E80
  E344AB7C F0FC70D5 694C0CC3 DB9F62E5 2A050979 E9171466 81CC91BA A99AB7C7
  12CACA37 D196D178 E349C627 597CFA9C 49132F8A 17C2F471 7E9D80E5 B7D5E673
  A225E086 F6E523AC 0C565E9A 3A7E1610 4275D2B7 9AFD5703 F5E1A8E0 94E53C1B
  ADF8644D EF0541A8 E98A1F41 A3A6F208 920EAE57
        quit
crypto pki certificate chain SLA-TrustPoint
 certificate ca 01
  30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
  32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
  6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
  3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
  43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
  526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
  82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
  CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
  1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
  4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
  7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
  68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
  C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
  C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
  DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
  06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
  4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
  03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
  604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
  D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
  467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
  7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
  5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
  80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
  418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
  D697DF7F 28
        quit
crypto pki certificate chain LDevID
 certificate 5B00005DA8024836ED49AF77AE000000005DA8
  308205B1 30820499 A0030201 0202135B 00005DA8 024836ED 49AF77AE 00000000
  5DA8300D 06092A86 4886F70D 01010B05 00305F31 13301106 0A099226 8993F22C
  64011916 03636F6D 31153013 060A0992 268993F2 2C640119 16056369 73636F31
  16301406 0A099226 8993F22C 64011916 06736974 2D646331 19301706 03550403
  13107369 742D6463 2D534954 2D44432D 43413020 170D3230 31313139 31383531
  30395A18 0F323036 30313130 39313835 3130395A 30463128 30260603 55040513
  1F504944 3A495238 31343048 2D502D4B 3920534E 3A46444F 32343230 4A373844
  311A3018 06035504 030C1143 41424F5F 5349545F 43656C6C 756C6172 30820122
  300D0609 2A864886 F70D0101 01050003 82010F00 3082010A 02820101 00BC58AA
  810C8701 09F8B90F 2DE268BF 0CA253E8 605494F2 6A6E7FA9 387ED47B BA89C51B
  D549F4A5 16A64C04 C443A752 719A7624 DEB96B0F 898CECB5 05F7E32C 83D2FB4D
  1E87F7C0 4CCE92FC 152579FB F1974517 A2B4B05A 2B72CCF8 6FE2583F D25AE93E
  8C695806 13146E94 5B97810F 4BC6E125 78A14A68 24682979 B4ACC67D 7F58D50E
  3170D595 6DE90AD2 9CC37663 6FD9CE7B 5EB425D9 6220E0B4 705ECD1A AEA21BA6
  2071DDAB 21E4D3DC 7E83C843 D8532C6E 41939E56 A510B8F5 0A04CA8F 3F0F6EAE
  596E54C5 5FBFD7E2 70975CB7 5D081F63 F236C694 E7A4CCDD CB1FB336 CB07DD66
  52CC830D F82A684C B74FEC5D 849E0E58 6FA575D1 9F7477BD 04B1354F 77020301
  0001A382 027B3082 0277300B 0603551D 0F040403 0204F030 1D060355 1D0E0416
  04147B0F 6A00A9E8 A6DBB59A 33FD0F6C E0D9913A 7E31301F 0603551D 23041830
  16801422 A59DB25D 909EDA07 4C0039B5 9575B3F8 898F5330 81D50603 551D1F04
  81CD3081 CA3081C7 A081C4A0 81C18681 BE6C6461 703A2F2F 2F434E3D 7369742D
  64632D53 49542D44 432D4341 2C434E3D 7369742D 64632C43 4E3D4344 502C434E
  3D507562 6C696325 32304B65 79253230 53657276 69636573 2C434E3D 53657276
  69636573 2C434E3D 436F6E66 69677572 6174696F 6E2C4443 3D736974 2D64632C
  44433D63 6973636F 2C44433D 636F6D3F 63657274 69666963 61746552 65766F63
  6174696F 6E4C6973 743F6261 73653F6F 626A6563 74436C61 73733D63 524C4469
  73747269 62757469 6F6E506F 696E7430 81CA0608 2B060105 05070101 0481BD30
  81BA3081 B706082B 06010505 07300286 81AA6C64 61703A2F 2F2F434E 3D736974
  2D64632D 5349542D 44432D43 412C434E 3D414941 2C434E3D 5075626C 69632532
  304B6579 25323053 65727669 6365732C 434E3D53 65727669 6365732C 434E3D43
  6F6E6669 67757261 74696F6E 2C44433D 7369742D 64632C44 433D6369 73636F2C
  44433D63 6F6D3F63 41436572 74696669 63617465 3F626173 653F6F62 6A656374
  436C6173 733D6365 72746966 69636174 696F6E41 7574686F 72697479 303B0609
  2B060104 01823715 07042E30 2C06242B 06010401 82371508 8593BB6B 85858C6C
  8289810E 86C7AC03 E7EF037D 84B1A57E B4FB3402 01640201 07301D06 03551D25
  04163014 06082B06 01050507 03010608 2B060105 05070302 30270609 2B060104
  01823715 0A041A30 18300A06 082B0601 05050703 01300A06 082B0601 05050703
  02300D06 092A8648 86F70D01 010B0500 03820101 007D1625 49EB4FA2 199A95B5
  F6E4AD0C 4D410FCB D8EDF68A D7688929 E9F54074 1EBEE52C FEC28615 7E8180D2
  20614BD2 FC5CB729 8480F6C4 5344435E A16A27B8 2D063A7E 0F2E5717 30FBE32C
  4365B580 3FF828F1 006AA660 FFD06854 DCB5808E 8A4B233B 2A2F9ED8 5C2178C8
  C57F0AEC FB6F78DF C47540CE 26CC41C0 F28DF410 A12A1EC0 EBFA6584 3823620E
  63841662 995759C0 5F066DC0 F1E90319 CB0CC687 B25115C1 B0E41D2B D96A84FE
  E0CC0784 135BCB64 F899761D 95A6ACA0 C0B8347F 148D1D94 C6194166 60C752D1
  A788C236 524599E0 90B650A8 B2DE7861 B2CABBAA 43531F78 20C0626A 010E4C67
  DD1A5E64 BBAE382B C38AA018 737F81DA 3A80726E 4C
        quit
 certificate ca 118989AFB1C4AD944B97A1CD898BD73B
  3082039B 30820283 A0030201 02021011 8989AFB1 C4AD944B 97A1CD89 8BD73B30
  0D06092A 864886F7 0D01010B 0500305F 31133011 060A0992 268993F2 2C640119
  1603636F 6D311530 13060A09 92268993 F22C6401 19160563 6973636F 31163014
  060A0992 268993F2 2C640119 16067369 742D6463 31193017 06035504 03131073
  69742D64 632D5349 542D4443 2D434130 20170D31 38303932 35313134 3735335A
  180F3230 36383039 32353131 35373533 5A305F31 13301106 0A099226 8993F22C
  64011916 03636F6D 31153013 060A0992 268993F2 2C640119 16056369 73636F31
  16301406 0A099226 8993F22C 64011916 06736974 2D646331 19301706 03550403
  13107369 742D6463 2D534954 2D44432D 43413082 0122300D 06092A86 4886F70D
  01010105 00038201 0F003082 010A0282 010100AF 6FB5E529 DEF701CD E5ACB737
  D2790873 875E9DBB 53ADAFC2 94C3D991 EC658A69 B1AB69BA C32307BE BF9D225D
  4FEADF33 F396AB70 A4E49526 AE637FE4 6BA0BB32 C98528D0 94658C48 DBE550A1
  ECA35F7A 4279F16C 5F3C2B11 185F95BB 9D68B2C9 82ECB523 BC3E5833 436BD1D1
  AE9616BD 1E0FC85D 67EF135B 6BC68840 3103DA89 923156FC EADD0914 3DD1F75E
  B166E550 A9F0FBEA 80DDE1F4 1B4D7789 3872EEA0 5B375344 03CDDFBA 72DC6F53
  6C3D25A3 BF8E215F 8D55C8D1 D0C279ED 9E061673 3FC6F225 6C405AA3 E6B96310
  4C2798A9 EC561A29 FF875907 B3527352 61A09CF2 D7916631 1F5215E5 6077E8C4
  A5042B6E 3039B222 BCFA1133 53FA51AD 2E972D02 03010001 A351304F 300B0603
  551D0F04 04030201 86300F06 03551D13 0101FF04 05300301 01FF301D 0603551D
  0E041604 1422A59D B25D909E DA074C00 39B59575 B3F8898F 53301006 092B0601
  04018237 15010403 02010030 0D06092A 864886F7 0D01010B 05000382 01010039
  6F03857F 8B5F0A38 E6DFA0E9 8598FE40 9231C4DF 5D747EA8 B968606B DD1593A8
  2348303C 7948DD69 1FDEA891 2A249CCC 9B9C9071 D51B1AC6 EF1567EF 64E8C11A
  85BDA86C AC45954E 7A86861C 1D7C622B 2211652C C8CC6359 09000B78 0E6ABF6E
  06D4247B 572E91B2 1216BC9A 5D715B8D E3220C4B 4B6B1B1A 3AA4B2CB 67F7F6B5
  2B3D9820 0E5A50A3 123E41F5 3C0D46E0 63E7212B 4730D9DA 4E0E8227 AEEAE386
  3C1A1B3A C680B486 5F71B0B5 80C82F6C 58126809 39193ABF D145BA7D 4D695762
  5DB055D4 077E779D AEA96655 576B3085 0CD9E01F 6805EF8B 494EE44B 16ACEED8
  F6529B1F AA324C9F 464FA153 9DAF12C1 74872179 1DA83009 26D36774 77C52F
        Quit
!
no license feature hseck9
license udi pid IR8140H-P-K9 sn FDO2441J91D
license boot level network-advantage
memory free low-watermark processor 47507
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
redundancy
 mode none
!
!
crypto ikev2 authorization policy FlexVPN_Author_Policy
 route set interface
 route set access-list FlexVPN_Client_IPv4_LAN
!
crypto ikev2 proposal FlexVPN_IKEv2_Proposal
 encryption aes-cbc-256
 integrity sha256
 group 14
!
crypto ikev2 policy FLexVPN_IKEv2_Policy
 proposal FlexVPN_IKEv2_Proposal
!
!
crypto ikev2 profile FlexVPN_IKEv2_Profile
 match certificate FlexVPN_Cert_Map
 identity local dn
 authentication remote rsa-sig
 authentication local rsa-sig
 pki trustpoint LDevID
 dpd 120 3 periodic
 aaa authorization group cert list FlexVPN_Author FlexVPN_Author_Policy
!
crypto ikev2 dpd 60 10 periodic
crypto ikev2 client flexvpn FlexVPN_Client_2
  peer 1 103.0.0.254
  client connect Tunnel2
!
crypto ikev2 client flexvpn FlexVPN_Client_1
  peer 1 102.0.0.254
  client connect Tunnel1
!
!
controller Cellular 0/2/0
!
controller Cellular 0/3/0
!
crypto ipsec transform-set FlexVPN_IPsec_Transform_Set esp-aes 256 esp-sha256-hmac
 mode tunnel
!
crypto ipsec profile FlexVPN_IPsec_Profile
 set transform-set FlexVPN_IPsec_Transform_Set
 set pfs group14
 set ikev2-profile FlexVPN_IKEv2_Profile
!
interface Loopback1
 ip address 12.12.12.12 255.255.255.255
!
interface Tunnel1
 ip unnumbered Loopback1
 tunnel source Cellular0/2/0
 tunnel destination dynamic
 tunnel protection ipsec profile FlexVPN_IPsec_Profile
!
interface Tunnel2
 ip unnumbered Loopback1
 tunnel source Cellular0/3/0
 tunnel destination dynamic
 tunnel protection ipsec profile FlexVPN_IPsec_Profile
!
interface VirtualPortGroup1
 ip address 192.168.11.1 255.255.255.0
 no mop enabled
 no mop sysid
!
interface GigabitEthernet0/0/0
 ip address 172.27.127.74 255.255.255.128
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface Cellular0/2/0
 ip address negotiated
 ip access-group 1 out
 ip tcp adjust-mss 1460
 load-interval 30
 dialer in-band
 dialer idle-timeout 0
 dialer-group 1
 ipv6 enable
 pulse-time 1
 ip virtual-reassembly
!
interface Cellular0/2/1
 no ip address
!
interface Cellular0/3/0
 ip address negotiated
 ip access-group 1 out
 ip tcp adjust-mss 1460
 load-interval 30
 dialer in-band
 dialer idle-timeout 0
 dialer-group 2
 ipv6 enable
 pulse-time 1
 ip virtual-reassembly
!
interface Cellular0/3/1
 no ip address
!
interface WPAN0/1/0
 no ip address
 arp timeout 0
 no mop enabled
 no mop sysid
!
no ip http server
ip http auth-retry 3 time-window 1
ip http authentication local
ip http secure-server
ip forward-protocol nd
ip route 102.0.0.0 255.255.255.0 Cellular0/2/0 192.168.5.1
ip route 103.0.0.0 255.255.255.0 Cellular0/3/0 192.168.4.1
ip route 192.168.4.0 255.255.255.0 Cellular0/3/0
ip route 192.168.5.0 255.255.255.0 Cellular0/2/0
!
ip access-list standard FlexVPN_Client_IPv4_LAN
 10 permit 192.168.11.0 0.0.0.255
 20 permit 12.12.12.12
!
!
ip access-list standard 1
 10 permit any
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipv6 permit
!
snmp-server enable traps wpan
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
line con 0
 stopbits 1
line vty 0 4
 transport input ssh
line vty 5 14
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
app-hosting appid iperf
 app-vnic gateway0 virtualportgroup 1 guest-interface 0
  guest-ipaddress 192.168.11.2 netmask 255.255.255.0
 app-default-gateway 192.168.11.1 guest-interface 0
end

Configure global parameters

To configure global parameters for your router, follow these steps.

Procedure

Step 1

Use the configure terminal command to enter the global configuration mode when using the console port.

Example:


						Router> 
						enable
						Router# 
						configure terminal
						Router(config)#

Step 2

Connect to the router with a remote terminal.

Example:

telnet router-name or address
						Login: login-id
						Password: *********
						Router> enable

Step 3

Use the hostname name command to specify the name for the router.

Example:


						Router(config)# 
						hostname Router

Specifies the name for the router.

Step 4

Use the enable password password or enable secret password password command to specify a password to prevent unauthorized access to the router

Example:


						Router(config)# 
						enable password cr1ny5ho

Note

 

In this form of the command, password is not encrypted. To encrypt the password, use enable secret password as noted in the previously mentioned Device Hardening Guide.

Configure Gigabit Ethernet interface

The router features two Gigabit Ethernet (GE) ports that can be used to enable WAN connectivity to a primary substation or a control center.

  • One GigE Copper port (RJ45) on the midplane board. It supports standard 3-speed (10/100/1000) Ethernet features including auto-MDIX.

  • One SFP socket. It supports standard 1000Base-X or 100Base-FX Ethernet over single-mode or multi-mode fiber.

To configure the Gigabit Ethernet interface, follow these steps:

Procedure

Step 1

Use the configure terminal command to enter the global configuration mode.

Step 2

Use the ipv6 unicast-routing command to enable forwarding of IPv6 unicast data packets.

Example:


						Router#configure terminal
						Router(config)# 
						ipv6 unicast-routing

Step 3

Use the interface GigabitEthernet slot/bay/port command to enter the configuration mode for an interface on the router.

Example:


						Router(config)# 
						interface GigabitEthernet 0/0/0

Enters the configuration mode for an interface on the router.

Step 4

Use the ip address ip-address mask command to set the IP address and subnet mask for the specified interface.

Example:


						Router(config-if)# 
						ip address 192.168.12.2 255.255.255.0

Note

 

You can use this step if you are configuring an IPv4 address.

Step 5

Use the ip address ipv6-address/prefix command to set the IPv6 address and prefix for the specified interface.

Example:


						Router(config-if)# 
						ipv6 address 2001.db8::ffff:1/128

Note

 

Use this step instead of Step 2, if you are configuring an IPv6 address. IPv6 unicast-routing needs to be set up as well, see further information in the IPv6 Addressing and Basic Connectivity Configuration Guide, For more information, see https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_basic/configuration/xe-16-10/ip6b-xe-16-10-book/read-me-first.html.

Step 6

Use the no shutdown command to enable the interface and change its state from administratively down to administratively up.

Example:


						Router(config-if)# 
						no shutdown

Step 7

Use the exit command to exit the configuration mode of the interface and return to the global configuration mode.

Example:


						Router(config-if)# 
						exit

Configure sub-interface on GigabitEthernet0/0/0

Cisco IOS XE supports sub-interfaces and dot1q configuration on the g0/0/0 interface.

Procedure

Step 1

Use the configure terminal command to enter the global configuration mode.

Example:


						Router> 
						enable
						Router# 
						configure terminal
						Router(config)#

Step 2

Use the interface g0/0/0.? command to enter the sub-interface mode.to configure a sub-interface and dot1q encapsulation on the GigabitEthernet0/0/0 interface.

Example:


            Router(config)#
            interface g0/0/0.?
            <1-4294967295>  GigabitEthernet interface number
            Router(config-subif)#

Step 3

Use the encapsulation ? command to configure the sub-interface and dot1q encapsulation on the GigabitEthernet0/0/0 interface.

Example:

   Router(config-subif)#
            encapsulation ?
            dot1Q            IEEE 802.1Q Virtual LAN

Configure a loopback interface

Before you begin

The loopback interface acts as a placeholder for the static IP address and provides default routing information.

To configure a loopback interface, follow these steps.

Procedure

Step 1

Use the configure terminal command to enter the global configuration mode

Step 2

Use the interface type number command to enter the configuration mode on the loopback interface.

Example:


						Router(config)# 
						interface Loopback 0

Step 3

(Option 1) Use the ip address ip-address mask command to set the IP address and subnet mask on the loopback interface.

Example:


						Router(config-if)# 
						ip address 10.108.1.1 255.255.255.0

Note

 

If you are configuring an IPv6 address, you can use the ipv6 address ipv6-address/prefix command.

Step 4

(Option 2) Use the ipv6 address ipv6-address/prefix command to set the IPv6 address and prefix on the loopback interface.

Example:


						Router(config-if)# 
						ipv6 address 2001:db8::ffff:1/128

Step 5

Use the exit command to exit the loopback interface mode.

Example:


						Router(config-if)# 
						exit

Step 6

Use the show interface loopback command to verify the loopback interface configuration.

Example:


				Router# 
				show interface loopback 0
				Loopback0 is up, line protocol is up 
				Hardware is Loopback
				Internet address is 192.0.2.0/16
				MTU 1514 bytes, BW 8000000 Kbit, DLY 5000 usec, 
				reliability 255/255, txload 1/255, rxload 1/255
				Encapsulation LOOPBACK, loopback not set
				Last input never, output never, output hang never
				Last clearing of "show interface" counters never
				Queueing strategy: fifo
				Output queue 0/0, 0 drops; input queue 0/75, 0 drops
				5 minute input rate 0 bits/sec, 0 packets/sec
				5 minute output rate 0 bits/sec, 0 packets/sec
				0 packets input, 0 bytes, 0 no buffer
				Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
				0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
				0 packets output, 0 bytes, 0 underruns
				0 output errors, 0 collisions, 0 interface resets
				0 output buffer failures, 0 output buffers swapped out

Configure command-line access

To configure parameters to control access to the router, follow these steps.


Note

Transport input must be set as explained in the previous Telnet and SSH sections of the guide.

Procedure

Step 1

Use the line [ aux | console | tty | vty ] line-number command to enter the line configuration mode, and specify the type of line.

Example:


						Router(config)# 
						line console 0

Note

 

The example provided here specifies a console terminal for access.

Step 2

Use the password password command to specify a unique password for the console terminal line.

Example:


						Router(config-line)# 
						password 5dr4Hepw3

Step 3

Use the login command to enable password checking at terminal session login.

Example:


						Router(config-line)# 
						login

Step 4

Use the exec-timeout minutes [ seconds ] command to set the interval during which the EXEC command interpreter waits until user input is detected.

Example:


						Router(config-line)# 
						exec-timeout 5 30
						Router(config-line)#

Note

 

  • The default is 10 minutes. Optionally, adds seconds to the interval value.

    The example provided here shows a timeout of 5 minutes and 30 seconds. Entering a timeout of 0 0 specifies never to time out.

Step 5

exit

Example:


						Router(config-line)# 
						exit

Exits line configuration mode to re-enter global configuration mode.

Step 6

Use the line [ aux | console | tty | vty ] line-number command to specify a virtual terminal for remote console access.

Example:


						Router(config)# 
						line vty 0 4
						Router(config-line)#

Step 7

Use the password password command to specifies a unique password for the virtual terminal line.

Example:


						Router(config-line)# 
						password aldf2ad1

Step 8

Use the login command to enables password checking at the virtual terminal session login.

Example:


						Router(config-line)# 
						login

Step 9

Use the end command to exit line configuration mode, and returns to privileged EXEC mode.

Example:


						Router(config-line)# 
						end

  1. Use the show running-config command to verify the loopback interface configuration.

    Example:

    
				!
				line console 0
				exec-timeout 10 0
				password 4youreyesonly
				login
				transport input none (
				default
				)
				stopbits 1 (
				default
				)
				line vty 0 4
				password secret
				login
				!

    Note

     

    • The transport input none is the default, but if SSH is enabled this must be set to ssh.

    • You do not have to input the commands marked default.

Configure a static route

Static routes provide fixed routing paths through the network. They are manually configured on the router. update the static route with a new one. Static routes are private routes unless they are redistributed by a routing protocol.

Before you begin

To configure static routes, follow these steps.

Procedure

Step 1

(Option 1) Use the ip route prefix mask { ip-address | interface-type interface-number [ ip-address ]} command to specify a static route for IP packets.

Example:


						Router(config)# 
						ip route 192.10.2.3 255.255.0.0 10.10.10.2

Note

 

If you are configuring an IPv6 address, use the ipv6 route command.

Step 2

(Option 2) Use the ipv6 route prefix/mask { ipv6-address | interface-type interface-number [ ipv6-address ]} command to specify a static route for IP packets.

Example:


						Router(config)# 
						ipv6 route 2001:db8:2::/64 2001:db8:3::0

Note

 

See additional information for IPv6 here: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_basic/configuration/xe-16-10/ip6b-xe-16-10-book/read-me-first.html

Step 3

Use the end command to exit global configuration mode and enter privileged EXEC mode.

Example:


						Router(config)# 
						end

After configuring static routes, the router will use the specified paths for routing IP or IPv6 packets. You can verify the configuration using the appropriate show commands.

Step 4

Use the show ip route (or show ipv6 route) command to verify static routing configuration.

For IPv4 address:

Example:


				Router# 
				show ip route
				Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
				D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
				N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
				E1 - OSPF external type 1, E2 - OSPF external type 2
				i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
				ia - IS-IS inter area, * - candidate default, U - per-user static route
				o - ODR, P - periodic downloaded static route
				Gateway of last resort is not set
				10.0.0.0/24 is subnetted, 1 subnets
				C       10.108.1.0 is directly connected, Loopback0
				S*   0.0.0.0/0 is directly connected, GigabitEthernet0

For IPv6 address:

Example:


				Router# 
				show ipv6 route
				IPv6 Routing Table - default - 5 entries
				Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
				B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
				I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
				EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE -
				Destination
				NDr - Redirect, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
				OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
				ls - LISP site, ld - LISP dyn-EID, a - Application
				C   2001:DB8:3::/64 [0/0]
				via GigabitEthernet0/0/2, directly connected
				S   2001:DB8:2::/64 [1/0]
				via 2001:DB8:3::1
be

Note

 

  • In the example, the static route sends out all IP packets with a destination IP address of 192.168.1.0 and a subnet mask of 255.255.255.0 on the Gigabit Ethernet interface to another device with an IP address of 10.10.10.2. Specifically, the packets are sent to the configured PVC.

  • You do not need to enter the command marked default . This command appears automatically in the configuration file generated when you use the running-config command.

Configuring dynamic routes

In dynamic routing, the network protocol adjusts the path automatically, based on network traffic or topology.

Changes in dynamic routes are shared with other routers in the network.

For more information on Cisco IOS-XE configuration guides, see https://www.cisco.com/c/en/us/support/ios-nx-os-software/ios-xe-amsterdam-17-3-1/model.html.

Configure routing information protocol

To configure the RIP on a router, follow these steps.

Procedure

Step 1

Use the router rip command to enter router configuration mode, and enable RIP on the router.

Example:


						Router(config)# 
						router rip

Step 2

Use the version { 1 | 2 } command to specify use of RIP version 1 or 2.

Example:


						Router(config-router)# 
						version 2

Step 3

Use the network ip-address command to specify a list of networks on which RIP is to be applied, using the address of the network of each directly connected network.

Example:


						Router(config-router)# 
						network 192.168.1.1
						Router(config-router)# 
						network 10.10.7.1

Step 4

Use the no auto-summary command to disable automatic summarization of subnet routes into network-level routes.

Example:


						Router(config-router)# 
						no auto-summary

Note

 

It allows sub prefix routing information to pass across classful network boundaries.

Step 5

Use the end command to exit router configuration mode, and enters privileged EXEC mode.

Example:


						Router(config-router)# 
						end

Step 6

Use the show ip route command to verify RIP configuration.

Example:


				Router# 
				show ip route
				Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
				D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
				N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
				E1 - OSPF external type 1, E2 - OSPF external type 2
				i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
				ia - IS-IS inter area, * - candidate default, U - per-user static route
				o - ODR, P - periodic downloaded static route
				Gateway of last resort is not set
				10.0.0.0/24 is subnetted, 1 subnets
				C       10.108.1.0 is directly connected, Loopback0
				R    3.0.0.0/8 [120/1] via 2.2.2.1, 00:00:02, Ethernet0/0/0

Note

 

You can look for RIP routes marked with the letter R.

Enhanced interior gateway routing protocol

The Enhanced Interior Gateway Routing Protocol (EIGRP) is an enhanced version of the Interior Gateway Routing Protocol (IGRP) developed by Cisco.

  • EIGRP offers improved convergence properties and operating efficiency compared to IGRP.

  • IGRP is now considered obsolete.

  • EIGRP uses the Diffusing Update Algorithm (DUAL) to guarantee loop-free operation and synchronize devices during topology changes.

Convergence and Efficiency in EIGRP

EIGRP's convergence technology is based on the Diffusing Update Algorithm (DUAL), which ensures loop-free operation and device synchronization during route computations.


Note

Devices that are not affected by topology changes are not involved in recomputations.

For more information on configuring Enhanced Interior Gateway Routing Protocol (EIGRP), see https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/xe-16-10/ire-xe-16-10-book/ire-enhanced-igrp.html .

Modular QoS CLIs

Modular QoS CLI (MQC) is a standardized approach for configuring Quality of Service (QoS) features on Cisco routing and switching platforms, including the IoT Integrated Services Router.

  • MQC provides a consistent method to enable and manage QoS across Cisco devices.

  • It is used on both routing and switching platforms.

  • MQC is the primary interface for configuring QoS features on the IoT Integrated Services Router.

Overview and Reference for Modular QoS CLI (MQC)

MQC is the method by which all QoS features are configured on the IoT Integrated Services Router.

For more details, see QoS Modular QoS Command-Line Interface Configuration Guide, Cisco IOS XE 17 .