I am loosing configuration when I power off my Cisco 857 router

[itsupport]

I bought new Cisco 857 router from the shop. Router must have been used before as I couln't go in with default username/password cisco/cisco.

Well I followed instruciton and reset password to username and password. Now I finally connected to the Cisco CP express over my IE browser.

I found out that somebody was using a router from the shop so this is why I coun't log to it in the first place. Anyway problem is that when I changed configuration and applied settings it remembers it until I power it off. When I power it on again it remembers all settings from that shop.

It reverts everything back: IP address, previous level 15 account and password - everything like after password reset.

I tried it again and it again lost settings. So I found following instruction:

http://www.cisco.com/en/US/products/hw/routers/ps233/products_tech_note09186a00800a65a5.shtml

I followed it and changed again all settings on the router. My settings are again lost after power off/on. I noticed that when I do first bit it does show

0x2102 not 0x2142 like they think that is password reset mode.

Here is my output from Hyper Terminal:


=============================
Cisco#enable
Cisco#show start
Using 3359 out of 131072 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$hpKF$Rc1tl6r45J8iHG7EN5jSk.
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3185909327
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3185909327
 revocation-check none
 rsakeypair TP-self-signed-3185909327
!
!
crypto pki certificate chain TP-self-signed-3185909327
 certificate self-signed 01 nvram:IOS-Self-Sig#5.cer
dot11 syslog
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool ccp-pool
   import all
   network 10.10.10.0 255.255.255.248
   default-router 10.10.10.1
   lease 0 2
!
!
ip cef
no ip domain lookup
ip domain name molinary.com
!
!
!
username admin privilege 15 secret 5 $1$jD3j$r6ROikgGsIlcMTGjkxFQ6.
username username privilege 15 password 0 password
!
!
archive
 log config
  hidekeys
!
!
!
!
!
interface ATM0
 no ip address
 shutdown
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 description $ES_WAN$
 ip nat outside
 ip virtual-reassembly
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$
 ip address 10.10.10.1 255.255.255.248
 ip nat inside
 ip virtual-reassembly
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address dhcp
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap pap callin
 ppp chap hostname netgear01@gibconnect.com
 ppp chap password 0 netgear01
 ppp pap sent-username netgear01@gibconnect.com password 0 netgear01
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface ATM0.1 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for  one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
-----------------------------------------------------------------------
^C
banner login ^CAuthorized access only!
 Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
 login local
 no modem enable
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler max-task-time 5000
end
Cisco#
Cisco#
Cisco#
Cisco#
Cisco#
Cisco#
Cisco#
Cisco#
Cisco#show version
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, R
ELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 22-Jan-10 14:46 by prod_rel_team
ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
Cisco uptime is 20 minutes
System returned to ROM by power-on
System image file is "flash:c850-advsecurityk9-mz.124-15.T12.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco 857 (MPC8272) processor (revision 0x400) with 59392K/6144K bytes of memory
.
Processor board ID FCZ140792J5
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
128K bytes of non-volatile configuration memory.
20480K bytes of processor board System flash (Intel Strataflash)
Configuration register is 0x2102
Cisco#
Cisco#
Cisco#
Cisco#end
Translating "end"
% Unknown command or computer name, or unable to find computer address
Cisco#reload
Proceed with reload? [confirm]
*Mar  1 01:19:27.786: %SYS-5-RELOAD: Reload requested  by username on console. R
eload Reason: Reload Command.
System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.
C850 series (Board ID: 2-149) platform with 65536 Kbytes of main memory
Booting flash:/c850-advsecurityk9-mz.124-15.T12.bin
Self decompressing the image : ############################################## [O
K]
              Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, R
ELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 22-Jan-10 14:46 by prod_rel_team
Image text-base: 0x8002007C, data-base: 0x814E7240
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco 857 (MPC8272) processor (revision 0x400) with 59392K/6144K bytes of memory
.
Processor board ID FCZ140792J5
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
128K bytes of non-volatile configuration memory.
20480K bytes of processor board System flash (Intel Strataflash)
no ip dhcp use vrf connected
               ^
% Invalid input detected at '^' marker.
SETUP: new interface NVI0 placed in "shutdown" state
Press RETURN to get started!
*Mar  1 00:00:03.952: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State change
d to: Initialized
*Mar  1 00:00:03.960: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State change
d to: Enabled
*Mar  1 00:00:07.244: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to
up
*Mar  1 00:00:08.413: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et0, changed state to up
*Mar  1 00:00:08.821: %SYS-5-CONFIG_I: Configured from memory by console
*Mar  1 01:19:27.072: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar  1 01:19:27.352: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, R
ELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 22-Jan-10 14:46 by prod_rel_team
*Mar  1 01:19:27.352: %SNMP-5-COLDSTART: SNMP agent on host Cisco is undergoing
a cold start
*Mar  1 01:19:27.436: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Mar  1 01:19:27.436: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Mar  1 01:19:27.540: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, chan
ged state to down
*Mar  1 01:19:28.072: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Ac
cess1, changed state to up
*Mar  1 01:19:28.484: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, cha
nged state to up
*Mar  1 01:19:28.484: %LINK-5-CHANGED: Interface ATM0, changed state to administ
ratively down
*Mar  1 01:19:28.848: %LINK-5-CHANGED: Interface NVI0, changed state to administ
ratively down
*Mar  1 01:19:28.932: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to
up
*Mar  1 01:19:28.936: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to
up
*Mar  1 01:19:28.940: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to
up
*Mar  1 01:19:29.484: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, chan
ged state to down
*Mar  1 01:19:29.932: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et3, changed state to down
*Mar  1 01:19:29.936: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et2, changed state to down
*Mar  1 01:19:29.940: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et1, changed state to down
*Mar  1 01:19:29.948: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et0, changed state to upAuthorized access only!
===========================================


Please help me as I am stuck and can't go any further.... 

[David White]

After you perform the password recovery on the router, you can either erase the startup config and reboot by issuing:

   write erase

   reload

And then answer NO when prompted to 'save the configuration'.

Alternatively, after password recovery you can modify the configuration to be what you want, and then issue:

   write memory

to save the configuration.  You can then verify that your changes have been saved to the startup config by issuing:

   show startup-config

If your changes appear in the startup-config, then they will be loaded when the router re-boots.

Hope it helps,

David.

[Phillip Remaker]

An equivalent command to

write memory

is

copy running-config startup-config

which should make it clear what is happening.  The running configuration is not committed to nonvolatile memory (NVRAM) until you say so.  If you reboot without a saving the configuration, the original configuration will remain.

That said, I'd be VERY concerned that you are getting a device with a configuration already in it.  That would likely indicate you are not buying from an authorized Cisco reseller.  You might see if you can determine the identity of the previous owner and see if they know that their device was sold with their private information on it. 

[itsupport]

Hi David White,

"

Alternatively, after password recovery you can modify the configuration to be what you want, and then issue:

   write memory

to save the configuration.  You can then verify that your changes have been saved to the startup config by issuing:

   show startup-config"

The only good thing is that when I switch off a router it erase configuration except my new password which I created after password reset. Everything else is getting vanished (ADSL settings, DHCP, routing ) everything. Even new admin accounts I created.

Well have a question to your above comments. I am new in Cisco so please put as much detail as you can for me to understand. When you say modify configuration do you mean to go to Cisco CP Express graphical interface and then connect router to hyper terminal and execute above commands?

Why router doesn't remember this anyway. There must be some option to change in configuration to make thing permanent when I hit apply changes in Cisco CO Express otherwise it is pointless to heve it.

Phillip

"

write memory

is

copy running-config startup-config"

Can't this be done via Cisco CP Express or set up router to copy this every time I change this in graphical interface rather going to command line to achnoledge it?

I understand your concern about this router and somebodie's configuration details as you want things to be un-used when you buy them - true. ADSL details belongs to the shop which sold me the router so that is why I don't make a big problem about this. We take most of hardware from this shop and have discount and many good deals with them so I think they have been just testing it and forgot to erease their config. It might be that someone has returned router to the shop and they have repaired it and tested it.

I hope this is a normal behaviour of this router as I have option to replace it in case this is a fault.

Could you please write me step by step guide how can I make changed options stay permanently on router?

thank you

Dragan

[David White · Accepted solution]

Hi Dragan,

After running through the Cisco CP Express wizard, it should save the modified configuration to Flash on the router.  However, in your case, it sounds like this is not happening.  Therefore:

1. Configure the device through Cisco CP Express --> Do NOT turn it off after this
2. Connect to the router with Hyperterminal.  Get into config mode by typing:
   enable
   when prompted for a password put it in.  The prompt should now be   router#
   
   now type:
   
   write memory
   
   Do you see any errors?  If not, type:
   show startup-config
   
   Verify the output matches the config you attempted.  If so, then you are good to go.  If not, let us know any errors you received.
   
   
   

[itsupport]

Hello everyone,

I hope you had a nice weekend because I did .

Thank you all for helping me out with my issue. I have to say that I did exactly what David White said:

enable

write memory

show startup-config

startup showed all fine so I turned router off/on and all config is there.

Now....regarding David's comments.

"

I did see that Cisco CP Express had an enhancement bug to allow customers to manually save the config:

CSCta20277 - CCP Express does not save changes to startup config

Which is resolved in version 2.1.3.  A button now exists on the main screen to save the config."

When I bought router there was Cisco CP Exress 1.3 installed so I upgraded it to 2.5 before I started to configure a router. Which means that program was newer then 2.1.3 so why it doesn't remember setting after pressing "Apply changes" ?

Is there any hotfix to install etc ? I will try later to configure this router more in detail and I wish to simplify this as much as I can. Any idea?

[David White · Accepted solution]

Hi Dragan,

Typically, "Apply" menas "send commands to device", and not necessarily to "save them to the startup config".

Do you see the Save Icon on the menu bar?  If so, can you press it and verify the changes you make are thus saved to the startup config?

Thanks,

David.

[Rob Huffman]

Hi Dragan,

Just to add a little note to the great tips from David and Phillip here

(+5 each guys )

Can you look for this;

Write to Startup Configuration Page

From the Write to Startup Configuration page, click the Confirm button to copy

the device running configuration to the startup configuration

.

How to Get to This Page

Choose Configure > Utilities > Write to Startup Configuration.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_configuration_professional/v2_2/olh/ccp/ccp.pdf

Cheers!

Rob

"May your heart always be joyful
May your song always be sung" - Bob Dylan

[Phillip Remaker]

Yes, of course.  As a CLI-head I always forget to think about providing GUI-friendly instructions.

[David White · Accepted solution]

I think Dragan inidcated he was using Cisco CP Express, not Cisco Configuration Professional (CCP).

I did see that Cisco CP Express had an enhancement bug to allow customers to manually save the config:

CSCta20277 - CCP Express does not save changes to startup config

Which is resolved in version 2.1.3.  A button now exists on the main screen to save the config.

Sincerely,

David.

[Rob Huffman]

Hey David,

It would help if I could read

Nice work here, this should really clear things up for Dragan.

Cheers!

Rob

"May your heart always be joyful
May your song always be sung" - Bob Dylan

[itsupport]

Small very small "save" button appears on the top of the Cisco CP Express which worked and saved setting to starup config. Thank you for quick answers. This topic can be now closed.

I will have few other questions about sofware etc but will open another discussion under different name.