Cisco Systems C819GUK9 manual

Americas Headquarters Cisco Systems, In c. 170 West Tasman Drive San Jose, CA 951 34-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553-NETS (638 7) Fax: 408 527-0883 Cisco 81 9 S eries Integrated S er vices Router s S of tware Configuration Guide Text Part Number: OL -23590-02 September 2, 201 3[...]

THE SPECIFICATION S AND INFORMATION REGA RDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITH OUT NOTICE. ALL STATEMENTS , INFORMATION, AND RECOMMENDATI ONS IN THI S MANUAL ARE BE LIEVED TO BE A CCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR TH EIR APPLICATION OF ANY PRO[...]

1 Cisco 819 Series Integrated Services Routers Software C onfiguration Guide OL-23590-02 CONTENTS CHAPTER 1 Product Overview 1-1 General Description 1-1 SKU Information 1-3 New Features 1-3 3G Features 1-3 WLAN Features 1-4 4G LTE Features 1-4 Platform Features 1-4 Security Features 1-4 CHAPTER 2 Wireless Device Overview 2-1 ScanSafe 2-1 TFTP suppo[...]

Contents 2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Configuring WAN Interfaces 5-9 Configuring a Gigabit Ethernet WAN Interface 5-9 Configuring the Cellular Wireless WAN Interface 5-10 Prerequisites for Configuring the 3G Wireless Interfac e 5-1 1 Restrictions for Configuring t he Cellular Wireless Inter[...]

Contents 3 Cisco 819 Series Integrated Services Routers Software C onfiguration Guide OL-23590-02 CHAPTER 7 Environmental and Power Management 7-1 Cisco EnergyWise Supp ort 7-2 CHAPTER 8 Configuring the Serial Interface 8-1 Legacy Protocol Transport 8-2 Configuring Serial Interfaces 8-2 Information About Configuring Serial Interfaces 8-3 Cisco HDLC[...]

Contents 4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Configuring AutoSecure 9-2 Configuring Access Lists 9-2 Access Groups 9-3 Configuring Cisco IOS Firewall 9-3 Configuring Cisco IOS IPS 9-4 URL Filtering 9-4 Configuring VPN 9-4 Remote Access VPN 9-5 Site-to-Site VPN 9-6 Configuration Examples 9-7 Config[...]

Contents 5 Cisco 819 Series Integrated Services Routers Software C onfiguration Guide OL-23590-02 MAC Address Notification 10-5 How to Configure Ethernet Switches 10-6 Configuring VLANs 10-6 VLANs on the FE Ports 10-6 VLANs on th e GE Port 10-7 Configuring Layer 2 Interfaces 10-7 Configuring 802.1x Authenticatio n 10-8 Configuring Spanning Tree Pro[...]

Contents 6 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 CHAPTER 13 Configuring a V PN Using Easy VPN and an IP Sec Tunnel 13-1 Cisco Easy VPN 13-2 Configuration Tasks 13-3 Configure the IKE P olicy 13-3 Configure Group Policy Information 13-5 Apply Mode Configuration to the Crypto Map 13-6 Enable Policy Look[...]

Contents 7 Cisco 819 Series Integrated Services Routers Software C onfiguration Guide OL-23590-02 TACACS+ B- 4 Ethernet B-4 Dial Backup B-5 Backup Interface B-5 Floating Sta tic Routes B-5 Dialer Wa tch B-5 NAT B-6 Easy IP (Phase 1) B-6 Easy IP (Phase 2) B-7 QoS B-7 IP Precedence B-8 PPP Fragmentation an d Interleaving B-8 CBWFQ B-8 RSVP B-8 Low La[...]

Contents 8 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02[...]

CH A P T E R 1-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 1 Product Overview This chapter provides an o vervie w of the features av ailable for the Cisco 819 Integrated Services Routers (ISRs) and contai ns the follo wing sections: • General Description , page 1-1 • SKU Information, page 1-3 • New [...]

1-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 1 Product Overview General Descri ption Figure 1-1 sho ws the Cisco 819HG ISR. Figur e 1 -1 Cisco 819HG Int egrat ed Services Router Figure 1-2 sho ws the Cisco 819HGW ISR. Figur e 1 -2 Cisco 819HGW Int egrat ed Services Router 283010 285479[...]

1-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 1 Product Overvie w SKU Information SKU Information For the complete list of SKUs av ailable in Cis co 819 ISRs, see SKU Information . New Features This section lists the soft ware, platform, and security features su pported by the Cisco 8 19 ISRs. •[...]

1-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 1 Product Overview New Feat ures WLAN Features • Dual Radio • CleanAir T ech nology • Dynamic Frequenc y Selection 4G LTE Features • IPv4 bearer • MIPv4, NEMOv4, RFC 3025 • IPv4 subnet behi nd L TE UE interface • Evolv ed High-Rate P acke[...]

CH A P T E R 2-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 2 Wireless Device Overview The Cisco 819 ISRs provide In ternet, VPN, data, an d backup capability to corporate tele workers and remote and small of f ices of fe wer than 20 users. These fix ed routers are capable of bri dging and multiprotocol ro[...]

2-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 2 Wireless Device Overview TFTP support with Ethernet WAN interface TFTP support with Ethernet WAN interface T ri vial File T ransfer Protocol (TFTP) is a f ile transf er protocol notable for its si mplicity . It is generally used for automated transfe[...]

2-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 2 Wir eless De vice Overv iew LEDs Use the follo wing sho w commands to ch eck the LED status for your router: • show platf orm led (for all LEDs) • show co ntroller cellular 0 (for 3G LEDs) The follo wing is a sample output from the show platf orm[...]

2-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 2 Wireless Device Overview LEDs LED STATUS: ========== LEDS : SYSTEM WWAN RSSI GPS STATUS: GREEN GREEN GREEN(2 BLINK) OFF LEDS : ACTIVITY SIM(slot0 / slot1) 3G STATUS: OFF GREEN / YELLOW GREEN LAN PORTS : FE0 FE1 FE2 FE3 LINK/ENABLE LED : OFF OFF OFF O[...]

CH A P T E R 3-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 3 Wireless Local Area Network A W ireless Local Area Network (WLAN) imp lements a flexible data commun ication system frequently augmenting rather than repl acing a wired LAN within a bui lding or campus. WLANs use radio fr equency to transmit and[...]

3-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 3 Wireless Local Area Network WLAN Features AP802 Dual Radio cont ains two dif ferent types of wireless radio that can support connect ions on both 2.4 GHz used b y 802.11b, 802 .11g, and 802.11n an d 5 GHz used by 802 .11a and 802.11n. W ith the dual-[...]

3-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 3 Wirele ss Local Area Network WLAN Features Ta b l e 3-1 WLAN LED De scr iptions WLAN LED Color Description Boot loader status sequence Blinking Green Board initialization i n progress. Initializi ng FLASH file system. Initializi ng Ethernet. Ethernet[...]

3-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 3 Wireless Local Area Network WLAN Features[...]

CH A P T E R 4-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 4 4G LTE Wireless WAN The Cisco 819HG-4G and Cisco 819G-4G L TE ISRs support 4G L TE and 3G cellular networks. For instru ctions on ho w to conf igure the 4G L TE features on your Cisco 819 ISR, see the Cisco 4G LTE Softwar e Installation Guide .[...]

4-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 4 4G LTE Wireless WAN[...]

CH A P T E R 5-1 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 5 Basic Router Configuration This chapter pro vides procedur es for config uring th e basic parameters of your Cisc o router , in cluding global parameter settings, routing protocols, interfaces, and c omma nd-line access. It also describes the def[...]

5-2 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Interface Ports Interface Ports Ta b l e 5-1 lists the interfaces that are supported fo r each router and their associat ed port labels on the equipment. Note There are two labels for the associated an tennas with the labe[...]

5-3 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Information N eeded for Configuration speed auto interface FastEthernet0 interface FastEthernet1 interface FastEthernet2 interface FastEthernet3 interface Serial0 no ip address shutdown no fair-queue clock rate 2000000 ! int[...]

5-4 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Information Needed for Configuration • If you are setting up IP routing: – Generate the addressing scheme for your IP network. • If you are setting up the serial interface: – Mode of operation (sync, async, b isync[...]

5-5 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring Command-Line Access Configuring Command-Line Access T o configure parameter s to control access to the router , perform the fol lowin g steps, be ginning in gl obal confi guration mode: SUMMARY STEPS 1. line [ au[...]

5-6 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring Command- Line Access DETAILED ST EPS Command Purpose Step 1 line [ aux | console | tty | vty ] line-number Example: Router(config)# line console 0 Router(config-line)# Enters line conf igurati on mode and speci[...]

5-7 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring Command-Line Access Example The follo wing conf iguration sho ws the command-line access commands. Y ou do not need to input the commands marked “def ault. ” These commands appear automatical ly in the confi [...]

5-8 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring Global Pa rameters Configuring Global Parameters T o configure selected global parameters for your router , perform these steps: SUMMARY STEPS 1. conf igure terminal 2. hostname name 3. enable secret password 4[...]

5-9 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces Configuring WAN Interfaces Config ure the W AN interface for your router usi ng one of the follo wing as appropriate: • Config uring a Gigabit Ethernet W AN Interface, page 5-9 • Config uring t[...]

5-10 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces DETAILED ST EPS Configuring the Cellular Wireless WAN Interface The Cisco 819 ISRs provide a Thir d-Generation (3G) wireless interf ace for use over Global System for Mobile Communications (GSM)[...]

5-11 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces Prerequisites for Configuring the 3G Wireless Interface The follo wing are prerequisites to co nfiguring the 3G wireless interface: • Y ou must ha ve wireless service from a carrier , an d you m[...]

5-12 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces Data Account Provisioning Note T o pro vision your modem, you must hav e an acti v e wireless account with a service provider . A SIM card must be installed in a GSM 3G wi reless card. T o provi[...]

5-13 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces Configuring a GSM Modem Data Profile T o configure or create a ne w modem data profile, enter the follo wing command in privil eged EXEC mode. SUMMARY STEPS 1. cellular 0 gsm prof ile cr eate <[...]

5-14 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces Ta b l e 5-2 lists the modem data prof ile parameters. CDMA Modem Activation and Provisioni ng Acti v ation procedures may di ffer , depending upon you r carrier . Consult your carrier and perfo[...]

5-15 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces Account activation - Step 1 of 5 Account activation - Step 2 of 5 Account activation - Step 3 of 5 Account activation - Step 4 of 5 Account activation - Step 5 of 5 Secure Commit Result: Succeed D[...]

5-16 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces Configuring a Cellular Interface T o configure the cell ular interface, en ter the follo wing commands, be ginning in pri vileged EXEC mode. SUMMARY STEPS 1. conf igure terminal 2. interface cel[...]

5-17 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces Note When the cellular interface requires a static IP address, the address may be configured as ip address negotiated . Through IP Control Prot ocol (IPCP), the network ensures that the correct st[...]

5-18 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces DETAILED ST EPS Command or Action Purpose Step 1 configure terminal Example: Router# configure terminal Enters global conf iguration mode. Step 2 interface cellular 0 Example: Router (config)# i[...]

5-19 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces Step 10 line 3 Example: Router (config-line)# line 3 Specifies the line conf igurati on mode. It is always 3. Step 11 script dialer < regexp > Example: Router (config-line)# script-dialer gs[...]

5-20 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces Examples for Configuring Ce llular Wireless Interfaces This section pro vides the follo wing conf iguratio n examples: • Basic Cellular Interf ace Configu ration, page 5-20 • T unnel o ver C[...]

5-21 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces line 3 exec-timeout 0 0 script dialer cdma login modem InOut Tunnel over Cellular Interface Configuration The follo wing example sho ws how to conf igure the st atic IP address when a tunnel inter[...]

5-22 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces line 3 script dialer hspa+ modem InOut no exec transport input all Configuring Dual SIM for Cellular Networks The Dual SIM feature implements auto-switch and failo ver between tw o cellular netw[...]

5-23 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring WAN Interfaces The follo wing e xample sho ws you ho w to conf igure the SIM card in slot 0 to use profi le 10: router(config-controller)# gsm sim profile 10 slot 0 Perform the follo wing commands to manu ally s[...]

5-24 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring WAN Interfaces Use the show platf orm command to display t he current bootup mode for t he router . The following sections sho w sample outputs when the b utton is not push ed and when the b utton is pushed. O[...]

5-25 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring a Loopback Interface Push Button in WLAN AP When the push b utton on the f ront panel is pre ssed, WLAN AP wil l perform both image and configuration reco very . T o perform image recov ery , WLAN will go into t[...]

5-26 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring a Lo opback Inter face DETAILED ST EPS Example The loopback interf ace in this sample conf iguratio n is used to support Netw ork Address T ranslation (N A T) on the vi rtual-template interface. Th is configur[...]

5-27 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring Static Routes Output queue 0/0, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 br[...]

5-28 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring Dynamic Routes Example In the follo wing conf iguration e xample, the static rou te sends out all IP packets wit h a destination IP address of 192.168.1.0 and a subnet mask of 255.25 5.255.0 on the Fast Ethern[...]

5-29 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring Dynamic Routes Configuring Routing Information Protocol T o configure the RIP ro uting protocol on the router , perform these steps, be ginning in global confi guration mode: SUMMARY STEPS 1. router rip 2. versi[...]

5-30 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring Dynamic Routes Example The follo wing conf iguration e xample sho ws RIP v ersion 2 enabled in IP netw ork 10.0.0.0 and 192.168.1.0. T o se e this conf iguration, use the show running-conf ig command from pri [...]

5-31 Cisco 819 Series Integrated Services Router Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Configuration Configuring Dynamic Routes DETAILED ST EPS For general inform ation on EIGRP concept, see the “Enhanced IGRP” section on page B-3 . Example The follo wing conf iguration e xample sho ws the EIGRP rout ing protocol enabl[...]

5-32 Cisco 819 Series Integrated Services R outer Software Configuration Guide OL-23590-02 Chapter 5 Basic Router Con figuration Configuring Dynamic Routes[...]

CH A P T E R 6-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 6 Configuring Backup Data Lines and Remote Management This chapter describes conf iguring backup data lines and remote management in the fo llo wing sections: • Config uring Backup Interfaces, p age 6-1 • Config uring Cellular Dial-on- Demand [...]

6-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Backup Interfaces T o configure your router with a backup interface, pe rform these steps, be ginning in global configuration mode: SUMMARY STEPS 1. interfac e type number 2. backup in[...]

6-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuri ng Cellular Dial- on-Demand Rout ing Backup Configuring Cellular Dial-on-Demand Routing Backup T o monitor the primary c o nnection and initiate the backup connecti on ov er the cellular [...]

6-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Cellular Dial -on-Demand Rou ting Backup DETAILED ST EPS Command or Action Purpose Step 1 configure terminal Example: Router# configure terminal Enters global conf iguration mode. Step[...]

6-5 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuri ng Cellular Dial- on-Demand Rout ing Backup Configuring DDR Backup Using Floating Static Route T o configure a floating static def ault route on the secondary interface, use the follo win[...]

6-6 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Cellular Dial -on-Demand Rou ting Backup ! ! no aaa new-model ! ! ! ! crypto isakmp policy 1 encr 3des authentication pre-share crypto isakmp key gsm address 128.107.241.234 ! ! crypto[...]

6-7 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuri ng Cellular Dial- on-Demand Rout ing Backup ! interface Cellular0 ip address negotiated ip nat outside ip virtual-reassembly encapsulation ppp no ip mroute-cache dialer in-band dialer idl[...]

6-8 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Dial Backup and Remote Ma nagement Through the Co nsole Port ! route-map track-primary-if permit 10 match ip address 102 set interface Dialer2 ! route-map nat2cell permit 10 match ip a[...]

6-9 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuring Dial Backup and Remote Management Through the Console Port Figure 6-1 sho ws the network configuration used for remote management access and for providing backup to the primary W AN lin[...]

6-10 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Dial Backup and Remote Ma nagement Through the Co nsole Port T o configure dial backup and remote management for these rou ters, perform these steps, be ginning in global conf igurati[...]

6-11 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuring Dial Backup and Remote Management Through the Console Port DETAILED ST EPS Command Purpose Step 1 ip name-server server-address Example: Router(config)#ip name-server 192.168.28.12 Rou[...]

6-12 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Dial Backup and Remote Ma nagement Through the Co nsole Port Step 8 dialer watch-group group-number Example: Router(config-if)# dialer watch-group 1 Router(config-if)# Specifies the g[...]

6-13 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuring Dial Backup and Remote Management Through the Console Port Example The follo wing conf iguration example specif ies an IP address for the interface through PPP and IPCP address nego ti[...]

6-14 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Dial Backup and Remote Ma nagement Through the Co nsole Port ! Dial backup and remote management physical interface. interface Async1 no ip address encapsulation ppp dialer in-band di[...]

6-15 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configuring Back up Data Lines and Remote Management Configuring Dial Backup and Remote Management Through the Console Port ip route 0.0.0.0 0.0.0.0 63.203.35.137 80 ip route 0.0.0.0 0.0.0.0 63.203.35.138 80 ip route 0.0.0.0 0.0.0.0 63.203.35.139 80[...]

6-16 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 6 Configur ing Backup Data Lines and Remote Ma nagement Configuring Dial Backup and Remote Ma nagement Through the Co nsole Port[...]

CH A P T E R 7-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 7 Environmental and Power Management The Cisco 819 integ rated services routers are equipped with sensors in th e router body for mon itoring the en vironment temperature and logging the temperature every 30 seconds.There are four sensors located [...]

7-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 7 Enviro nmental and Power Management Cisco EnergyWise Suppo rt Sensor 1 36 Normal 60/0 Sensor 2 34 Normal 60/0 Sensor 3 40 Normal 60/0 Sensor 4 38 Normal 60/0 System Ambient Sensor 35 Normal 60/0 3G Modem Sensor 33 Normal 85/0 Environmental informatio[...]

CH A P T E R 8-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 8 Configuring the Serial Interface This chapter describes conf iguring serial inte rface management i n the follo wing sections: • Legac y Protocol T ransport, page 8-2 • Config uring Serial Interf aces, page 8-2 • Information About Conf igu[...]

8-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface Legacy Protocol Transpo rt Legacy Protocol Transport Serial and synchro nous/asynchronous ports are ideal ly suited to transport le gacy traf fic across a TCP/IP network, f acilitating networ k con ver gence. Lega c [...]

8-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface Information About Con figuring Serial Interfaces Information About Configuring Serial Interfaces T o configure serial in terfaces, you must un derstand the follo wing concept: • Cisco HDLC Encapsulation, page 8-3 ?[...]

8-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface Information About Con figuring Serial Inter faces PPP uses keepali ves to monitor the l ink state, as described in the “K eepalive T imer” section on page 8-4 . PPP supports the follo wing authenticat ion protoco[...]

8-5 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface Information About Con figuring Serial Interfaces Note The kee palive command applies to serial i n terfaces using HDLC or PPP enca psulation. It does not apply to serial interfaces usi ng Frame Relay encapsulation. F[...]

8-6 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces Frame Relay interfaces support two types of encapsulated fram es: • Cisco (default) • IETF Use the encap command in PVC conf iguration mode to config ure Cisco or IETF encapsula[...]

8-7 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface How to Configure Serial Interface s • Config uring Half-Duple x and Bisync for Sync h ronous Serial Port Ad apters on Cisc o 819 ISRs, page 8-8 (O ptional) • Config uring Compression of HDLC Data, page 8-9 (Optio[...]

8-8 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces Note Y ou cannot use the ph ysical-layer async co mmand for frame-relay encapsulation. Encapsulation methods are set accord ing to the type of protocol or app lication you conf igur[...]

8-9 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface How to Configure Serial Interface s Configuring Compression of HDLC Data Y ou can conf igure point-to-p oint software compressio n on serial interfaces that use HDLC encapsulation. Compression reduce s the size of a [...]

8-10 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces DETAILED ST EPS Enabling the Internal Clock When a DTE does not return a transmit clock, us e the following i nterface conf iguration command on the router to enable the in ternall[...]

8-11 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface How to Configure Serial Interface s DETAILED ST EPS Setting Transmit Delay It is possible to send back-to-back data packets o ver serial interfaces fa ster than some hosts can recei ve them. Y ou can specify a mini [...]

8-12 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces SUMMARY STEPS 1. ignore-dcd DETAILED ST EPS Caution Unless you kno w for certain that you really need this f eature, be very careful using this command. It wi ll hide the real stat[...]

8-13 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface How to Configure Serial Interface s SUMMARY STEPS 1. dte-in vert-txc DETAILED ST EPS Command or Action Purpose Step 1 dte-invert-txc Example: Router(config-if)# dte-invert-txc Specifi es timing conf iguration to in [...]

8-14 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces Configuring Low-Speed Serial Interfaces This section descri bes how to configure lo w-speed seri al interfaces and contains the follo wing sections: • Understanding Half-Duple x [...]

8-15 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface How to Configure Serial Interface s Once there are no more frames to tran smit, the state machine transitions to the wa it transmit f inish state. The machine wait s for the transmit FIFO in the serial controller t [...]

8-16 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces Figur e 5 Half-Duplex DCE T r ansmit State Machine After the transmit delay state, the ne xt state depends on whether th e inte rface is in constant-carrier mode (the default) or c[...]

8-17 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface How to Configure Serial Interface s 4. The DCE transitions to the w ait DCD drop delay st ate. This state causes a time delay between the transmission of the last f rame and the deassertion of DCD in th e controlled[...]

8-18 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface How to Configure Serial Interfaces Tuning Half-Duplex T imers T o optimize the performance of half-duplex timers, use the following command in interf ace confi guration mode. The timer tuning comman ds permit you to[...]

8-19 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Configuring the Ser ial Interface Configuration Examp les When placed in asynchronous mode, lo w-speed seri al interfaces support all commands av ailable for standard asynchronous interf aces. The default is synchronous mo de. Note When you use this[...]

8-20 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 8 Config uring the Serial Interface Configuration Examples Low-Speed Serial Interface: Examples The section includes th e follow ing config uration exampl es for lo w-speed serial interf aces: • Synchronous or Asynchrono us Mode: Examples, page 8-20[...]

CH A P T E R 9-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 9 Configuring Security Features This chapter prov ides an over view of authen tication, authorization, and accou nting (AAA), which is the primary Cisco frame work f or implementing selected s ecurity features that can be conf igured on the Cisco [...]

9-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring AutoSecure For info rmation about confi guring AAA services and supported securit y protocols, see Securing User Services Configuration Guide Li br ary , Cisco IOS Release 12.4T . Configuring AutoSecure The [...]

9-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring Cisco IOS Firew all T o create, refine, and manage access list s, see Security Conf igur ation Guide: Access Contr ol Lists, Cisco IOS Release 12.4T . Access Groups An access group is a sequence of access lis[...]

9-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring Cisco IOS IPS Configuring Cisco IOS IPS Cisco IOS Intrusion Pre vent ion System (IPS) technology is a v ailable on Cisco 819 ISRs and en hances perimeter f irew all protection b y taking appropriat e action [...]

9-5 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN Remote Access VPN The configuration of a remote access VPN uses Cisco Easy VPN and an IP Secu rity (IPSec) t unnel to configure and secure the connection between th e remote client and the corporate netwo[...]

9-6 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN After the IPSec server has been conf igured, a VPN co nnection can be created with minimal co nfigurat ion on an IPSec client, such as a supported Cisco 819 ISR. When the IPSec client i nitiates the VPN [...]

9-7 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN Configuration Examples Each example conf igures a VPN over an IPS ec tunnel, usi ng the procedure given in the “Conf igure a VPN over an IPSec T unnel” section on pa ge 9-7 . Then, the specif ic proce[...]

9-8 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN DETAILED ST EPS Command or Action Purpose Step 1 crypto isakmp policy priority Example: Router(config)# crypto isakmp policy 1 Router(config-isakmp)# Creates an IKE policy th at is used during IKE negoti[...]

9-9 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN Configure Group Policy Information T o configure the g roup polic y , perform these steps, begi nning in global conf iguration mode: SUMMARY STEPS 1. crypto isakmp client conf iguration group { group-name[...]

9-10 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN Apply Mode Configuration to the Crypto Map T o apply mode configu ration to the crypto map, p erform these step s, beginning in global conf iguration mode: SUMMARY STEPS 1. crypto map map-name isakmp au[...]

9-11 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN Enable Policy Lookup T o enable policy lookup t hrough AAA, perform these step s, beginn ing in global conf iguration mode: SUMMARY STEPS 1. aaa new-model 2. aaa authentication logi n { default | list-na[...]

9-12 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN Configure IPSec Transforms and Protocols A transform set represents a certain combination of security protocol s and algorithms. Durin g IKE negotiati on, the peers agree to use a particular t ransform [...]

9-13 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN SUMMARY STEPS 1. crypto dynamic-map dynamic-m ap-name dynamic-seq-num 2. set transform-set transform-set-name [ transform-set-name2 ...transform-set-name6 ] 3. re verse-route 4. exit 5. crypto map map-na[...]

9-14 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN Apply the Crypto Map to the Physical Interface The crypto maps must be applied to each interface through which I PSec traf f ic flows. Applying the crypto map to the ph ysical interface instructs t he r[...]

9-15 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN Create a Cisco Easy VPN Remote Configuration The router acting as the Cisco Easy VPN client must create a Cisco Easy VPN remote conf iguration and assign it to the outgoing interface. T o create the remo[...]

9-16 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN Configuration Example The follo wing conf iguration e xample sho ws a portion of the con figuration file for t he VPN and IPSec tunnel described i n this chapter: ! aaa new-model ! aaa authentication lo[...]

9-17 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN ! crypto isakmp policy 1 encryption 3des authentication pre-share group 2 lifetime 480 ! crypto isakmp client configuration group rtr-remote key secret-password dns 10.50.10.1 10.60.10.1 domain company.c[...]

9-18 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN DETAILED ST EPS Command or Action Purpose Step 1 interface type number Example: Router(config)# interface tunnel 1 Router(config-if)# Creates a tunnel interface and enters interface conf iguration mode.[...]

9-19 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configuring Security Features Configuring VPN Configuration Example The follo wing conf iguration e xample sho ws a portion of the con figuration file for a VPN usi ng a GRE tunnel scenario described in the preceding sections: ! aaa new-model ! aaa [...]

9-20 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 9 Configu ring Security Features Configuring VPN crypto map dynmap isakmp authorization list rtr-remote crypto map dynmap client configuration address respond ! ! Defines the key association and authentication for IPsec tunnel. crypto isakmp policy 1 [...]

CH A P T E R 10-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 10 Configuring the Ethernet Switches This chapter gi ves an ov ervie w of conf iguration task s for the 4-port F ast Ethernet (FE) switch and for the Gigabit Ethernet (GE) switch that services the embedded wi reless access point on the Cisco 819 [...]

10-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Confi guring the Ethernet Switches Information Abou t Ethernet Switches Information About Ethernet Switches T o co n fig u re Et h er n et switches, y ou should understan d the following concept: • VLANs and VLAN T runk Prot ocol, page 10-2 • L[...]

10-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Configuring the Ethernet Switches Overview of SNMP MIBs CDP runs on all LAN and W AN media that support Subnetw ork Access Protocol (SN AP). Each CDP-configured device sends periodic messages to a mu lticast address. Each device advertises at least[...]

10-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Confi guring the Ethernet Switches Overview of SNMP MIBs sense is more accurately called a MIB module and is usually def ined in a single document . In the other sense, a MIB is a collection of such branches. Such a collection might comprise, for e[...]

10-5 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Configuring the Ethernet Switches Overview of SNMP MIBs Use the follo wing syntax to query th e SNMP BRIDGE-MIB details: snmpwalk -v2c <ip address of the ISR, …> public .1.3.6.1.2.1.17 snmpwalk -v2c <ip address of the ISR, …> public[...]

10-6 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Confi guring the Ethernet Switches How to Configure Ethernet Switches How to Configure Ethernet Switches See the follo wing sections for conf iguration tasks for Ethernet sw itches. • Conf iguring VLANs, pa ge 10-6 • Configuring Layer 2 Interfa[...]

10-7 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Configuring the Ethernet Switches How to Configure Ethe rnet Switches For additional information, see Layer 2 LAN P orts . VLANs on the GE Port Because the GE port is an internal int erface that se rv ices only the router ’ s embedded access poin[...]

10-8 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Confi guring the Ethernet Switches How to Configure Ethernet Switches This section contains inf ormation on the follo wing topics: • Config uring a range of interfaces • Defining a range m acro • Config uring Layer 2 optional interf ace featu[...]

10-9 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Configuring the Ethernet Switches How to Configure Ethe rnet Switches Configuring MAC Table Manipulation For info rmation on ho w to conf igure MA C table manipulati on, see Conf iguring MA C T able Manipulation . Port Security The topic of enablin[...]

10-10 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Confi guring the Ethernet Switches How to Configure Ethernet Switches Configuring the Switched Port Analyzer For informatio n on ho w to conf igure a switched port analyzer (SP AN) session, see Conf iguring the Switched P ort Analyzer (SP AN) . Th[...]

10-11 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Configuring the Ethernet Switches How to Configure Ethe rnet Switches This section contains inf ormation on the follo wing topics: • Enabling per-port storm-control • Disabling per -port storm- control Configuring Fallback Bridging For info rm[...]

10-12 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 10 Confi guring the Ethernet Switches How to Configure Ethernet Switches Managing the Switch For informatio n on management of the switch, see Mana ging the EtherSwitc h HWIC . This section contains inf ormation on the follo wing topics: • Adding T[...]

CH A P T E R 11-1 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 11 Configuring PPP over Ethernet with NAT This chapter pro vides an ov ervie w of Point-to-Point Protocol o ver Ethernet ( PPPoE) clients and Network Address T ranslatio n (N A T) that can be conf igured on the Cisco 819 Inte grated Services Rout[...]

11-2 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over Ethernet with NAT PPPoE PPPoE The PPPoE Client feature on the router pro vides PPPoE client support on Ethernet interf aces. A dialer interface must be used f or cloning virtual access. Multiple PPPoE client sessions can be con[...]

11-3 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over E thernet with NAT Configuration Tasks DETAILED ST EPS Configure the Fast Ethernet WAN Interfaces In this scenario, the PPPoE client (your Cisco router ) communicates ov er a 10/100 Mbps-Ethernet interface on both t he inside a[...]

11-4 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over Ethernet with NAT Configuration Ta sks SUMMARY STEPS 1. interface type number 2. pppoe-client dial-pool-number numbe r 3. no shutdown 4. exit Configure the Dialer Interface The dialer interface indicates ho w to handle traff i [...]

11-5 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over E thernet with NAT Configuration Tasks SUMMARY STEPS 1. interface dialer dialer-r otary-gr oup-number 2. ip addr ess negotiated 3. ip mtu bytes 4. encapsulation encapsulat ion-type 5. ppp authentication { pr otocol1 [ pr otocol[...]

11-6 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over Ethernet with NAT Configuration Ta sks Configure Network Address Translation Network Address T ranslation (N A T ) tr anslates packets from addresses that match a standard access list, using glob al addresses allocated by the d[...]

11-7 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over E thernet with NAT Configuration Tasks SUMMARY STEPS 1. ip nat pool name start-ip en d-ip { netmask netmask | prefix-l ength pr efix-length } 2. ip nat inside sour ce { list access-list-number } { interface type number | pool n[...]

11-8 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over Ethernet with NAT Configuration Ta sks DETAILED ST EPS Command Purpose Step 1 ip nat pool name start-ip end-ip { netmask netmask | prefix-length prefix-length } Example: Router(config)# ip nat pool pool1 192.168.1.0 192.168.2.0[...]

11-9 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over E thernet with NAT Configuration Example Note If you want to use N A T with a virtual-template in terface, you must conf igure a loopback interface. See the “Basic Router Conf iguration” section on page 5-1 for information [...]

11-10 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over Ethernet with NAT Configuration Example Note Commands marked by “ (default) ” are generated automatically when you run the sho w running-config command. vpdn enable vpdn-group 1 request-dialin protocol pppoe ! interface vl[...]

11-11 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over E thernet with NAT Configuration Example Verifying Your Configuration Use the show ip nat statistics command in pri v ile ged EXEC mo de to veri fy the PPPoE with N A T confi guration. Y ou should see v erif ication output sim[...]

11-12 Cisco 819 Series Integrated Services Routers Software Configuration Guide OL-23590-02 Chapter 11 Configuring PPP over Ethernet with NAT Configuration Example[...]

CH A P T E R 12-1 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 12 Configuring a LAN with DHCP and VLANs The Cisco 819 Integ rated Services Routers (ISRs) su pport clients on both physical LANs and virtual LANs (VLANs). The routers can use the Dynami c Host Confi guration Protocol (DHCP) t o enable automatic assig[...]

12-2 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 12 Configu ring a LAN with DHCP and VLA Ns VLANs When you conf igure a DHCP serv er , you must conf igure the serv er properties, p olicies, and DH CP options. Note Whenev er you ch ange server prop erties, you must relo ad the server wit h the configur ati[...]

12-3 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 12 Configuring a LAN with D HCP and VLANs Configuration Tasks DETAILED ST EPS Command Purpose Step 1 ip domain name name Example: Router(config)# ip domain name smallbiz.com Router(config)# Identif ies the default domain that the router uses to complete un[...]

12-4 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 12 Configu ring a LAN with DHCP and VLA Ns Configuration Ta sks Configuration Example The follo wing conf iguration e xample sho ws a portion of the con figuration file for t he DCHP confi guration described in this chapter : ip dhcp excluded-address 192.16[...]

12-5 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 12 Configuring a LAN with D HCP and VLANs Configuration Tasks Leased addresses : 0 Pending event : none 1 subnet is currently in the pool : Current index IP address range Leased addresses 10.10.0.1 10.10.0.1 - 10.10.0.254 0 Router# show ip dhcp server stat[...]

12-6 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 12 Configu ring a LAN with DHCP and VLA Ns Configuration Ta sks DETAILED ST EPS Assign a Switch Port to a VLAN Perform these steps to assign a sw itch port to a VLAN, begi nning in global conf iguration mode: SUMMARY STEPS 1. interfac e switc h port id 2. s[...]

12-7 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 12 Configuring a LAN with D HCP and VLANs Configuration Tasks DETAILED ST EPS Verify Your VLAN Configuration Use the follo wing commands to vie w your VLAN configurati on. • show —Entered from VLAN datab ase mode. Displays summary conf iguration infor [...]

12-8 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 12 Configu ring a LAN with DHCP and VLA Ns Configuration Ta sks Router# vlan database Router(vlan)# show VLAN ISL Id: 1 Name: default Media Type: Ethernet VLAN 802.10 Id: 100001 State: Operational MTU: 1500 Translational Bridged VLAN: 1002 Translational Bri[...]

12-9 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 12 Configuring a LAN with D HCP and VLANs Configuration Tasks Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 Bridge Type: SRB Bridge Number: 1 STP Type: IBM Router# show vlan-switch VLAN Name Status Ports ---- --------------[...]

12-10 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 12 Configu ring a LAN with DHCP and VLA Ns Configuration Ta sks[...]

CH A P T E R 13-1 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 13 Configuring a VPN Using Easy VPN and an IPSec Tunnel This chapter pr ovides an ov ervie w of the cre ation of V irtual Pri vate Netw orks (VPNs) th at can be confi gured on the Cisco 819 Int egrated Services Routers (ISRs). Cisco routers and other [...]

13-2 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Cisco Easy VPN Figur e 13-1 Remote A ccess VPN Using IPSec T unnel Cisco Easy VPN The Cisco Easy VPN client feature elimin ates much of the tedious conf iguration work by impl ementing the Cisco Un it[...]

13-3 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 13 Configuring a VPN Usin g Easy VPN and an IPSec Tunn el Configuration Tasks Note The Cisco Easy VPN client feature sup ports conf iguration of only o ne destination peer . If your application requires th e creation of mult iple VPN tunnels, you must manu[...]

13-4 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Ta sks 6. lifetime seconds 7. exit DETAILED ST EPS Command or Action Purpose Step 1 crypto isakmp policy priority Example: Router(config)# crypto isakmp policy 1 Router(config-isakmp)# C[...]

13-5 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 13 Configuring a VPN Usin g Easy VPN and an IPSec Tunn el Configuration Tasks Configure Group Policy Information Perform these steps to conf igure the grou p policy , beginning in glob al conf iguration mode: SUMMARY STEPS 1. crypto isakmp client conf igur[...]

13-6 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Ta sks Apply Mode Configuration to the Crypto Map Perform these steps to apply mode co nfiguratio n to the crypto map, be ginning in gl obal conf iguration mode: SUMMARY STEPS 1. crypto [...]

13-7 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 13 Configuring a VPN Usin g Easy VPN and an IPSec Tunn el Configuration Tasks Enable Policy Lookup Perform these steps to enable polic y lookup thro ugh AAA, begi nning in global conf iguration mode: SUMMARY STEPS 1. aaa new-model 2. aaa authentication log[...]

13-8 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Ta sks Configure IPSec Transforms and Protocols A transform set represents a certain combination of security protocol s and algorithms. Durin g IKE negotiati on, the peers agree to use a[...]

13-9 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 13 Configuring a VPN Usin g Easy VPN and an IPSec Tunn el Configuration Tasks SUMMARY STEPS 1. crypto dynamic-map dynamic-m ap-name dynamic-seq-num 2. set transform-set tr ansform-set -name [ transform-set-name2 ...transform-set-name6 ] 3. re verse-route 4[...]

13-10 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Ta sks Apply the Crypto Map to the Physical Interface The crypto maps must be applied to each interface through which IP Security (IPSec) traf fic flo w s. Applying the crypt o map to t[...]

13-11 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 13 Configuring a VPN Usin g Easy VPN and an IPSec Tunn el Configuration Tasks 4. mode { client | network-extension | netw ork extension plus } 5. exit 6. interface type number 7. crypto ipsec client ezvpn name [ outside | inside ] 8. exit DETAILED ST EPS [...]

13-12 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Example Verifying Your Easy VPN Configuration The follo wing e xample verif ies your easy vpn connection: Router# show crypto ipsec client ezvpn Tunnel name :ezvpnclient Inside interfac[...]

13-13 Cisco 819 Integrated Services Rout ers Software Configu ration Guide OL-23590-02 Chapter 13 Configuring a VPN Usin g Easy VPN and an IPSec Tunn el Configuration Example ! crypto ipsec transform-set vpn1 esp-3des esp-sha-hmac ! crypto ipsec security-association lifetime seconds 86400 ! crypto dynamic-map dynmap 1 set transform-set vpn1 reverse[...]

13-14 Cisco 819 Integrated Services Routers Software Con figuration Guide OL-23590-02 Chapter 13 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Example[...]

A-1 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 APPENDIX A Cisco IOS Software Basic Skills Understanding ho w to use Cisco IOS sof tware can sa ve yo u time when you are conf iguring your rout er . This appendix contain s the follo wing sections which pro vide basic informati on: • Config uring the Router from[...]

A-2 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisco IOS Software Basic Skills Understanding Command Modes Y ou can use the terminal emulation software to change settings for the router that is connected to the PC. Config ure the softwa re to the follo wing standard VT -100 emu lation settings so tha[...]

A-3 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisc o IOS Software Basic Skills Understanding Command Modes Ta b l e A -2 Command Modes Sum mary Mode Access Method Prompt Mode Exit and Entrance About This Mode User EXEC Begin a session with your router . Router> T o e xit a router session, enter t[...]

A-4 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisco IOS Software Basic Skills Getting Help Getting Help Y ou can u se the quest ion mark (?) and ar ro w keys to help you enter com mands. For a list of a vailable commands for a prti cular command mo de, enter a question mark: Router> ? access-enab[...]

A-5 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisc o IOS Software Basic Skills Enable Secret Passw ords and Enable Passwords Enable Secret Passwords and Enable Passwords By default, the router ships with out password protection. Because ma ny pri v ile ged EXEC commands are used to set operating par[...]

A-6 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisco IOS Software Basic Skills Using Commands Using Commands This section pro vides some tips about entering Cisco IOS commands at the command-line interface (CLI). Abbreviating Commands Y ou only have to enter enough ch aracte rs for the router to reco[...]

A-7 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisc o IOS Software Basic Skills Saving Config uration Chang es Saving Configuration Changes Y ou must enter the copy running-conf ig startup-config command to sav e your conf iguration changes to NVRAM so th at they are not lost if there is a system rel[...]

A-8 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix A Cisco IOS Software Basic Skills Where to Go Next[...]

B-1 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 APPENDIX B Concepts This appendix contains conceptual information that may be useful to In ternet service providers or network ad ministrators when the y config ure Cisco routers. The follo wing topics are includ ed in[...]

B-2 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts Routing Protocol Options IP is a connectionless protocol, w h ich means that IP does not exchan ge control i nformation (called a handshak e ) to establish an end-to-end connection b efore transmitt[...]

B-3 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts PPP Authentication Protocols Enhanced IGRP Enhanced IGRP is an adv anced Cisco-proprietary di stance-vect or and link-state routing protocol, wh ich means it uses a metric more sophisticated than di[...]

B-4 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts TACACS+ CHAP CHAP uses a three-way handshak e to verif y passwords. T o understand how CHAP w orks, imagine a network topo logy in which a rem ote of fice Cisco rout er is connected to a corp orate [...]

B-5 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts Dial Backup Dial Backup Dial backup prov ides protection against W AN do wntime b y allo wing a user to conf igure a backup modem line connection. The f ollow ing can be used to bring up the dial ba[...]

B-6 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts NAT NAT Network Ad dress T ranslation (N A T) provid es a mech anism for a pri vately addressed network to access regist ered networks, such as the Intern et, without requiring a re gistered subnet [...]

B-7 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts Easy IP (Phase 2) Easy IP (Phase 2) The Easy IP (Phase 2) feature combines Dy namic Host Configuration Protocol (DHCP) server and relay . DHCP is a client-serve r protocol that enables de vices on a[...]

B-8 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts QoS IP Precedence Y ou can partit ion traf fic i n up to six classes of service using IP Precedence (two others classes are reserved for internal network use). The queuing tech nologies througho ut [...]

B-9 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts Access Lists insuf ficien t bandwidth, delay v ariations, or inf ormation loss. RSVP works in co njunction with curren t queuing mechanisms. It is up to the interf ace qu euing mechanism (such as CB[...]

B-10 Cisco 860 Series, Cisco 880 Series, and Cisco 890 Series In tegrated Services Routers So ftware Configuration Guide OL-18906-02 Appendix B Concepts Access Lists[...]

C-1 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 APPENDIX C ROM Monitor The R OM monitor f irmware runs when the router is po we red up or reset. The f irmware helps to init ialize the processor hardware an d boot the operating sy stem sof tware. Y ou can use the R OM monitor to perform certain conf iguration t a[...]

C-2 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor ROM Monitor Commands T imesaver Break (system interrupt) is alway s enabled for 60 second s af ter the router r eboots, regardless of whet her it is set to on or of f in the conf iguratio n register . During this 60-second wi ndo w , you can [...]

C-3 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Command Descri ptions Commands are case sensitiv e. Y ou can halt any comma nd b y pressing the Break key on a terminal. If you are using a PC, most terminal emu lation programs halt a com mand when you press the Ctrl and the Break ke ys at t[...]

C-4 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Disaster Recovery with TFTP D ownload TFTP Download Command Variables This section describes the syst em v ariables that can be set in R OM monitor mode and that are used during the TFTP download process. The re are both required va riables a[...]

C-5 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Disaster Recovery with TFTP Download Optional Variables These vari ables can be set with these commands before using the tftpdnld command : Using the TFTP Download Command T o download a file through TFTP , perform these steps in R OM monitor[...]

C-6 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Disaster Recovery with TFTP D ownload Y ou will see an out put similar to the follo wing: IP_ADDRESS: 10.3.6.7 IP_SUBNET_MASK: 255.255.0.0 DEFAULT_GATEWAY: 10.3.0.1 TFTP_SERVER: 192.168.254.254 TFTP_FILE: c880-advsecurityk9-mz Do you wish to [...]

C-7 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Disaster Recovery with TFTP Download Receiving c800-universalk9-mz.SPA.152-3.16.M0.1 from 209.165.200.225 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!![...]

C-8 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Disaster Recovery with TFTP D ownload export@cisco.com. Installed image archive Cisco C819HGW+7-A-A-K9 (revision 4.0) with 883788K/33715K bytes of memory. Processor board ID FAC15455YYZ 4 FastEthernet interfaces 2 Gigabit Ethernet interfaces [...]

C-9 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Disaster Recovery with TFTP Download Jul 13 23:00:57.303: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 100.100.100.100 port 520 started - CLI initiated Jul 13 23:00:58.059: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up Jul 13 [...]

C-10 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Configuration Register System Bootstrap, Version 15.2(2r)T, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 2012 by cisco Systems, Inc. WLAN AP Boot loader (bundled): AP802 Boot Loader (AP802-BOOT-M) [...]

C-11 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Configuration Register Changing the Configuration Register Manually T o change the virtual conf iguration re gister from the R OM monitor manually , enter the confr eg command follo wed by the ne w value of the r egister in hexadecimal forma[...]

C-12 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Console Download Console Download Y ou can use cons ole down load, which is a R O M monito r function, to do wnload either a softw are image or a conf iguration f ile ov er the router console p ort. After download, th e fil e is either sav e[...]

C-13 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Debug Commands Error Reporting Because the R OM monitor console download uses the co nsole to perform the data transfer , when an error occurs during a data transfer, error messages are only displayed on the console once the data transfer is[...]

C-14 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix C ROM Monitor Exiting the ROM Monitor FP: 0x80005f9c, PC: 0x80008118 FP: 0x80005fac, PC: 0x80008064 FP: 0x80005fc4, PC: 0xfff03d70 FP: 0x80005ffc, PC: 0x00000000 FP: 0x00000000, PC: 0x00000000 • meminfo —Displays size in bytes, starti ng address, a va[...]

D-1 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 APPENDIX D Common Port Assignments Ta b l e D-1 lists currently assigned T ransmission Control Protocol ( TCP) port numbers. T o the extent possible, the User Datagram Protocol (UDP) uses the same numbers. Ta b l e D-1 Curr e ntly Assigned TCP and UDP Por t Numbers[...]

D-2 Cisco 819 Integrated Services Rout ers Software Con figuration Guide OL-18906-02 Appendix D Common Po rt Assignments 77 — Any pri v ate RJE service 79 FINGER Finger 95 SUPDUP SUPDUP Protocol 101 HOST N AME Network interface card (NIC) hostname server 102 ISO-TSAP ISO-Transport Service Access Point ( TSAP) 103 X400 X400 104 X400-SND X400-SND 1[...]