First-Time Configuration

This chapter describes the actions to take before turning on your router for the first time.

Setup Mode

The setup mode guides you through creating a basic router configuration. If you prefer to configure the router manually or to configure a module or interface that is not included in setup mode, go to Using the Command-Line Interface to familiarize yourself with the CLI.

Before Starting Your Router

Complete the following steps before you power on your router and begin using the setup mode:

Procedure
    Step 1   Set up the hardware and connect the console and network cables as described in the “Connecting Cables” section of the Cisco ASR 901 Series Aggregation Services Router Hardware Installation Guide. Cisco ASR 901S Series Aggregation Services Router Hardware Installation Guide.
    Step 2   Configure your PC terminal emulation program for 9600 baud, 8 data bits, no parity, and 1 stop bit.

    Using Setup Mode

    The setup command facility appears in your PC terminal emulation program window. To create a basic configuration for your router, perform the following:


    Note
    If you made a mistake while using the setup command facility, exit the facility and run it again. Press Ctrl-C, and type setup at the enable mode prompt ( 1900# ).

    Configuring Global Parameters

    Complete the following steps to configure global parameters.

    Procedure
      Step 1   Power on the router. Messages appear in the terminal emulation program window.
      Caution   

      Do not press any keys on the keyboard until the messages stop . Any keys that you press during this time are interpreted as the first command entered after the messages stop, which might cause the router to power off and start over. Wait a few minutes. The messages stop automatically.

      The messages look similar to the following:



      Example: 
      System Bootstrap, Version 15.1(2r)SNG, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2011 by cisco Systems, Inc.
Compiled Tue 25-Oct-11 12:09 by tinhuang
P2020 platform with 524288 Kbytes of main memory
program load complete, entry point: 0x2000000, size: 0x1d29954
Self decompressing the image : ############################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### [OK]
              Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, 901 Software (ASR901-UNIVERSALK9-M), Version 15.1(2)SNG, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 25-Oct-11 13:13 by prod_rel_team
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco ASR901-E (P2020) processor (revision 1.0) with 393216K/131072K bytes of memory.
Processor board ID CAT1529U01P
P2020 CPU at 792MHz, E500v2 core, 512KB L2 Cache
1 FastEthernet interface
12 Gigabit Ethernet interfaces
1 terminal line
256K bytes of non-volatile configuration memory.
98304K bytes of processor board System flash (Read/Write)
65536K bytes of processor board RAM Disk (Read/Write)
--- System Configuration Dialog ---
 
Would you like to enter the initial configuration dialog? [yes/no]:


      Example: 
      System Bootstrap, Version 15.4(1r)S2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2013 by cisco Systems, Inc.
Compiled Tue 29-Oct-13 11:18 by shawnk
P2020 platform with 524288 Kbytes of main memory
program load complete, entry point: 0x2000000, size: 0x24a8738
Self decompressing the image :
##########################################################################################
##########################################################################################
##########################################################################################
##########################################################################################
##########################################################################################
##########################################################################################
##########################################################################################
##################################################### [OK]
*** No sreloc section
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software, 901 Software (ASR901-UNIVERSALK9-M), Version 15.4(0.19)S0.11, EARLY
DEPLOYMENT ENGINEERING WEEKLY BUILD, synced to BASE_FOR_V154_1_S_XE311_THROTTLE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Wed 06-Nov-13 13:54 by alnguyen
WDC is not configured 36
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco A901S-4SG-F-D (P2020) processor (revision 1.0) with 393216K/131072K bytes of memory.
Processor board ID FOC1738N74D
P2020 CPU at 800MHz, E500v2 core, 512KB L2 Cache
1 FastEthernet interface
6 Gigabit Ethernet interfaces
1 terminal line
256K bytes of non-volatile configuration memory.
98304K bytes of processor board System flash (Read/Write)
--- System Configuration Dialog ---
Would you like to enter the initial configuration dialog? [yes/no]:
      Note    The messages vary, depending on the Cisco IOS software image and interface modules in your router. This section is for reference only, and output might not match the messages on your console.
      Step 2   To begin the initial configuration dialog, enter yes when the following message appears:

      Example: 
      Would you like to enter the initial configuration dialog? [yes/no]:yes
Would you like to enter basic management setup? [yes/no]: yes
Configuring global parameters:
      Step 3   Enter a hostname for the router (this example uses 901 -1).

      Example: 
      Configuring global parameters:
 Enter host name [Router]: 901-1
      Step 4   Enter an enable secret password. This password is encrypted (more secure) and cannot be seen when viewing the configuration.

      Example: 
      The enable secret is a password used to protect access to
privileged EXEC and configuration modes. This password, after
entered, becomes encrypted in the configuration.
Enter enable secret: ciscoenable
      Note    When you enter the enable secret password, the password is visible as you type it. Once you enter the password, it becomes encrypted in the configuration.
      Step 5   Enter an enable password that is different from the enable secret password. This password is not encrypted (less secure) and can be seen when viewing the configuration.

      Example: 
      The enable password is used when you do not specify an
enable secret password, with some older software versions, and
some boot images.
Enter enable password: ciscoenable
      Step 6   To prevent unauthenticated access to the router through ports other than the console port, enter the virtual terminal password.

      Example: 
      The virtual terminal password is used to protect
access to the router over a network interface.
Enter virtual terminal password: ciscoterminal
      Step 7   Respond to the following prompts as appropriate for your network:

      Example: 
      Configure System Management? [yes/no]: no
Configure SNMP Network Management? [yes]:
    Community string [public]: public
      Step 8   The summary of interfaces appears. This list varies, depending on the network modules installed in your router.
      Step 9   Specify the interface to be used to connect to the network management system.
      Step 10   Configure the specified interface as prompted.

      Completing the Configuration

      When you have provided all of the information prompted for by the setup command facility, the configuration appears. Messages similar to the following appear: 

      The following configuration command script was created:
!
hostname 901-1
enable secret 5 $1$5fH0$Z6Pr5EgtR5iNJ2nBg3i6y1 enable password ciscoenable line vty 0 98
password ciscoenablesnmp-server community public !
no ip routing
!
interface GigabitEthernet0/1
shutdown
!
end

      Complete the following steps to configure the router:

      Procedure
        Step 1   The setup command facility displays the following prompt.

        Example: 
        [0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.
Enter your selection [2]: 2
Building configuration...
[OK]
Use the enabled mode 'configure' command to modify this configuration.
Press RETURN to get started!

        If you answer:

        • 0—The configuration information that you entered is not saved, and you return to the router enable prompt. To return to the system configuration dialog, enter setup.
        • 1—The configuration is not saved, and you return to the EXEC prompt.

        The 901-1> prompt appears indicating that you are at the CLI and you completed a basic router configuration.

        Note    The basic configuration is not a complete configuration.
        Step 2   When the messages stop displaying in your window, press Return to view the command line prompt.

        Verifying the Cisco IOS Software Version

        To verify the version of Cisco IOS software, use the show version command. The show version command displays the configuration of the system hardware, the software version, the names and sources of the configuration files, and the boot images.

        Configuring the Hostname and Password

        First configure the hostname and set an encrypted password. Configuring a hostname allows you to distinguish multiple Cisco routers from each other. Setting an encrypted password allows you to prevent unauthorized configuration changes.


        Note
        In the following procedure, press the Return key after each step unless otherwise noted. At any time, you can exit the privileged level and return to the user level by entering disable at the Router# prompt.

        Complete the following steps to configure a hostname and to set an encrypted password:

        Procedure
          Step 1   Enter enable mode.

          Example: 
          Router> enable

          The Password prompt appears. Enter your password.



          Example: 
          Password: password

          When the prompt changes to Router , you have entered enable mode.

          Step 2   Enter global configuration mode.

          Example: 
          Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.

          When the prompt changes to Router(config) , you have entered global configuration mode.

          Step 3   Change the name of the router to a meaningful name. Substitute your hostname for Router .

          Example: 
          Router(config)# hostname Router
          Step 4   Enter an enable secret password. This password provides access to privileged EXEC mode. When you type enable at the EXEC prompt ( Router> ), you must enter the enable secret password to access configuration mode. Enter your secret password.

          Example: 
          Router(config)# enable secret secret password
          Step 5   Exit back to global configuration mode.

          Example: 
          Router(config)# exit

          Verifying the Hostname and Password

          Complete the following steps to verify that you have correctly configured the hostname and password:

          Procedure
            Step 1   Enter the show config command:

            Example: 
            Router# show config
Using 1888 out of 126968 bytes
!
version XX.X
.
.
.
!
hostname Router
!
enable secret 5 $1$60L4$X2JYOwoDc0.kqa1loO/w8/
.
.
.
            Step 2   Check the hostname and encrypted password, which appear near the top of the command output.
            Step 3   Exits the global configuration mode and attempt to re-enter it using the new enable password:

            Example: 
            Router# exit
.
.Router con0 is now available
Press RETURN
 to get started.
Router> enable
Password: password
Router#