basic configuration 887

[dougy]

Firstly, I have many years experience with unix servers but absolutely no knowledge, training, qualifications or expertise with Cisco.

The present task involves configuring an 887, ideally using CCP.  That 'should' be relatively straightforward as I can connect and login to the 887 using a console cable even though I have little idea what to do then. Given my lack of knowledge regarding command line configuration of these things, I suggest CCP is indicated. Official documentation is hopelessly inadequate for non Cisco experts and only serves to confuse. CCP runs OK but cannot discover the 887, presumably because its looking for a non-existent IP address. A number of non-official websites mention issues like certain versions of Java, Flash, Windows firewall issues etc, but I've yet to see anything about these in official documentation.That said, the fact that I have CCP installed and running suggests that I've successfully circumvented the Java, Flash, Windows firewall etc etc issues. Since official documentation isn't as helpful as I'd like, I've resorted to non-official sources, however a major issue I've encountered with the numerous YouTube videos about CCP is that the presenter is either unintelligible or talks at around the speed of light and omits more critical points than is included.

I have made multiple attempts to configure an IP address on an 887 LAN port but that just returns an error message to the effect that the port is part of a Vlan. Unfortunately there doesn't appear to be any explanation regarding how to proceed and even a few supposedly Cisco experts advised me they are just as much in the dark as I am. It has been suggested that Cisco made significant changes in recent routers and has yet to properly document how to deal with the changes.

One would logically assume that if Cisco elected to offer CCP, then it would ensure that all information needed to use it would be supplied. Is there a simple, step by step, even pedantic explanation (that includes ALL essential steps) regarding what is required to get CCP communicating with the 887 ?? Doing Cisco courses isn't on the agenda as I simply do not have the time required to do something I'll probably never use again. I would engage a qualified expert to handle the immediate issue if it wasn't for the fact that those I've spoken to all claim ignorance of current Cisco systems.

[johnd2310]

Hi,

What version of CCP are you running? You can download the latest version of CCP at the following link:

https://software.cisco.com/download/release.html?mdfid=281795035&softwareid=282159854&release=3.3&relind=AVAILABLE&rellifecycle=&reltype=latest

You cannot discover the router because it probably does not have an ip address. If this is the case, then you will need to do some initial configuration via console CLI before you can use CCP. Use the following doc to do the initial configuration:

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_configuration_professional_express/v3_2/guides/quickstart/CiscoCPExpress_qsg.html

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_configuration_professional/guides/CiscoCPqsg.html#wp127654

You can also find additional documentation at the following link:

http://www.cisco.com/c/en/us/support/cloud-systems-management/configuration-professional/products-installation-guides-list.html

thanks

John

[dougy]

Thanks John. At least the console connection works like it should, the limitation being y lack of knowledge of Cisco. The CCP is 2.8 and I don't know if I can get a later version as I understood that required a Cisco contract rather than simply an online account. Can you enlighten me on this point ?

I see no reason to get a contract as I only have this unit and a new AT1242.

I concur with your comment re IP address, that is certainly the present situation. I did try several times to assign an IP address to one of the lan ports which include a single Ethernet0 (which I assume is the console port) and four FastEthernet 0 - 3. I guess the console port isn't available and attempts to allocate an IP address to the FastEthernet ports returns an error message about not being permitted on L2 ports and something else I don't recall about Vlan.

A few hours googling revealed numerous other posts regarding exactly the same problem, with parties claiming to be Cisco experts stating that they were completely in the dark. I phoned around companies in Sydney and Brisbane which purport to understand Cisco and received exactly the same response although it was suggested that this Vlan business is some new trick Cisco has invented but not told anyone about. Dunno .... its well outside my area.

I did read a number of official Cisco docs before I messed with the console connection but thats when I ran into the L2 / Vlan issue. Whether or not the links you sent contain different information is something I have yet to discover. Are you aware of this L2 / Vlan business ?  Clearly I'll need to rely on expert input as Cisco is new to me.

[dougy]

my head is spinning after reading that stuff.

First observation is that I don't know whether or not Configuration Express is installed in the 887 and if it is not, it can't be installed without first configuring an IP address which I can't do until I know how to circumvent the wrong character and L2 / Vlan issues. That means that even if Express is present, its not usable until the IP address business is fixed. According to official docs, if there is a CCPE, it is in either nvram or flash. Can you describe in words containing no more than two syllables how to check which if any location contains CCPE files on this 887 ? As far as I can tell, nobody at Cisco thought that question would be asked.

Second observation is that I can certainly connect via console cable but whether or not I can assign an IP address using information in the links you provided earlier has yet to be determined. Will leave that til my head is working again.

Third observation is that its apparently possible to install CCPE on a router that doesn't have it although I can't understand how to do that as yet. With any other piece of hardware I'd try plugging in a USB stick but does Cisco know what to do with USB sticks, and even if it does, where do I locate the commands to tell it what to do with what is on the USB stick ?  It does seem there is value in having CCPE, if only because there are less buttons to press and consequently less ways to get into trouble.

Fourth observation is that I need to go get some fresh air (thankfully there is no shortage in a World Heritage rainforest) and come back to this later. After a dozen odd phone calls all resulting in comments to the effect that this stuff is beyond every professed Cisco expert in the eastern states of Australia there is no option but to rely on online assistance. Why FFS does Cisco create monstrosities that even ostensibly qualified experts in Australia don't understand !!!!

[Georg Pauwen]

Hello,

honestly I wouldn't  worry much about CCP and just use the command line. Here is a sample config for the 887 from Internode:

version 15.0
no service pad
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
!
hostname
!
boot-start-marker
boot-end-marker
!
logging buffered 65535
logging console informational
enable secret
!
no aaa new-model
memory-size iomem 10
clock timezone ACST 9 30
clock summer-time ACST recurring first Sun Oct 2:00 first Sun Apr 2:00
!
no ip source-route
!
ip dhcp excluded-address 192.168.0.0 192.168.0.10
!
ip dhcp pool lan
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 192.231.203.132 192.231.203.3
lease infinite
!
ip cef
no ip bootp server
ip domain name internode.on.net
ip name-server 192.231.203.132
ip name-server 192.231.203.3
!
archive
log config
hidekeys
username admin secret
!
ip ssh time-out 90
ip ssh authentication-retries 2
!
interface ATM0
description --- Internode ADSL ---
no ip address
no shutdown
no atm ilmi-keepalive
pvc 8/35
tx-ring-limit 3
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description --- Ethernet LAN ---
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1420
!
interface Dialer0
description --- Internode ADSL ---
ip address negotiated
ip mtu 1460
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1420
dialer pool 1
dialer-group 1
ppp chap hostname @internode.on.net
ppp chap password
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
no ip nat service sip udp port 5060
ip nat inside source list NAT interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list extended MGMT-IN
permit ip 203.26.95.0 0.0.0.255 any
permit ip 192.168.0.0 0.0.0.255 any
ip access-list extended NAT
permit ip 192.168.0.0 0.0.0.255 any
!
no cdp run

!
control-plane
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class MGMT-IN in
login local
!
scheduler max-task-time 5000
sntp server 192.231.203.132
crypto key generate rsa mod 1024
end

[dougy]

Thanks for the comments however I don't know that its appropriate for me. Actually I did stumble across that Internode config but had no idea what to do with it.  It might sound weird to those with a reasonable  degree of Cisco literacy but I like to know what each line of a config file means. Unfortunately I'm a long way from that and given other commitments I can't imagine getting around to learning the finer points in the forseeable future. That is why I'm focussing on CCP / CCPE.  By the time this 887 goes into service, it needs to be configured with two different networks, one private and one public. Currently an old Netcomm NB6 is doing that but configuring those things is a walk in the park compared with Cisco. At present I don't have the ghost of a clue about editing and installing someone else's config file. Some of the editing appears obvious but I'm wary about being one of those fools rushing in where angels fear to tread. Figuring how to do deal with config files may not be a humungous task but on top of everything it is more than I need..

[Georg Pauwen]

Hello,

if you provide just the basic IP addressing required, I can create a text file that you just have to copy and paste. The text file will also show you what to do to get into the different sections of the config. Once you have done it, it is actually fairly simple.

So for now, all you need to provide is the internal IP address range you want to use.

[dougy]

Thanks.

The private IP network is 192.168.1.1 -  254

The public IP network is 203.3.126.129 - 142

The following might shed a bit of light on the weirdness

First error in Cisco documentation

There is no cpconfig-880.cfg file in flash, so I don't have the option to copy that to nvram

In Step 3

Second error in Cisco documentation

Router>config terminal (as per official documentation) returns % Invalid input detected at '^' marker

When I use the enable command before 'config terminal', I get Router#(config)#

In Step 6

Third error in Cisco documentation

Router (config-if)# ip address 10.10.10.1 255.255.255.248 returns

% IP addresses may not be configured on L2 links

Clearly without an IP address, there is no way known CCP will connect

Note there is nary a mention of messing with L2 / Vlan. Evidently there are some critical steps missing from official Cisco documentation. Question is how to fix something critically important that Cisco didn't mention.

[Georg Pauwen]

Hello,

I'll prepare the text file that you can copy and paste. TFTP might be a bridge too far at this point.

It will take me a bit since I need to test it first. Will get back...

[dougy]

Following advice from another forum, I tried the following

Router>enable

Router#conf t

Router(config)#int vlan 1

Router(config-if)#ip address 192.168.1.11 255.255.255.0

Router(config-if)#end

Router#copy run start

As far as I could tell, everything worked as it should although CCP still could not discover the 887

I have the console cable connected between the RJ45 console port and the PC, and an ethernet cable from FastEthernet0 to a switch on the same network as the PC running Hyperterminal and CCP  I cannot ping the 887 from the PC so I could only assume the 887 did not have the IP address supposedly assigned earlier.

sh ip interface brief revealed 192.168.1.11 has been assigned to both Ethernet0 (the console port) which was and still is up,  AND Vlan1 which was administratively down. FastEthernet 0 - 3 all showed IP unassigned / administratively down.

I used this system to assign a different IP address to Vlan1, but apart from sh ip interface brief revealing 192.168.1.12 on Vlan1, there was no change (both 192.168.1.11 and 192.168.1.12 were unreachable).

I discovered the following by googling

Router#conf t

Router(config)#int vlan1

Router(config-if)#no shut

Router(config-if)#end

Router#copy run start

Now I could see that the state of Vlan1 changed to down (not administratively down as previously

The following appears to have done the trick, at least the Vlan1 is showing up now but 192.168.1.12 is still unreachable and CCP still cannot discover the 887

interface Vlan1

ip address 192.168.1.1 255.255.255.0

no autostate

no shutdown

(config-if)#end

copy run start

Dunno whether or not the issues are partly password related. There appears to be a need for multiple usernames / passwords which increases confusion. Is there a way to disable all passwords at least until I get this device sorted out ?

If Vlan1 now shows 192.168.1.12 and the interface is up, why FFS can't I ping it ? There is an ethernet cable known to be OK connected directly between FastEthernet0 and the switch so I cannot understand why there is no connection.

I connected the ethernet cable between FastEthernet0 and the PC but still no ping / destination host unreachable and CCP doesn't want to know about the 887. Oops, just realized that a straightfhrough cable won't work and I don't think I have a crossover to hand :( :( :(

[Georg Pauwen]

Hello,

which IP address do you have assigned to the PC ?

Try to get at least the DHCP part of the config into the router, than set your PC to DHCP. This should assign an IP address to your PC. Connect the PC directly to one of the FastEthernet ports.

ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool lan
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8 8.8.8.4
lease infinite

[Georg Pauwen]

Hello,

FastEthernet0-3 are by default assigned to Vlan 1, you don't need to configure anything.

To assign username 'admin' and password 'cisco' which then also can be used for CCP, do this:

887(config)#username admin privilege 15 password cisco

If your DHCP doesn't work, just assign a static IP address from the same subnet as the Vlan to your PC.

Is the FastEthernet port showing as up/up ?

[dougy]

FastEthernet0-3 are by default assigned to Vlan 1, you don't need to configure anything.

To assign username 'admin' and password 'cisco' which then also can be used for CCP, do this:

887(config)#username admin privilege 15 password cisco

If your DHCP doesn't work, just assign a static IP address from the same subnet as the Vlan to your PC.

Is the FastEthernet port showing as up/up ?

OK, as I mentioned earlier, I have 192.168.1.12 assigned to Vlan1 and 192.168.1.7 assigned to the PC. The Vlan1 is showing as up but all FastEthernet ports are showing administratively down. Unless there is a trick here, its probably not good to connect the PC directly to the 887 unless using a crossover cable .I haven't got to the DHCP bit yet as I need to figure how to get that into the 887

[dougy]

PC is 192.168.1.7

I don't understand what you mean by 'Try to get at least the DHCP part of the config into the router'. As far as I can tell, the only way I have available to get anything into the router is to type it in. Thats OK providing I know exactly what commands to use to get into whatever file. Since official documentation is not as helpful as I'd like, its a matter of harrassing forum folk for answers that really should be in the documentation.

I can understand that stuff can be entered somewhere but 'where' is the question.Possibly I've missed something but I'm going back over all posts to check

Are those lines meant to be used as commands to be entered after 'enable' ie Router# ??

[dougy]

I gather that I stuffed up by not getting the FastEthernet ports up up. I assumed that getting Vlan1 up would fix the connectivity problem bit evidently not. It might take me a while to figure how to fix the FastEthernet config but I think I can do that.

As for the direct connection between FastEthernet0 and PC, am I correct in believing that needs to be a crossover cable ?