Showing results for 
Search instead for 
Did you mean: 

Welcome to the Cisco Small Business Community

Have a question? Click on a topic board below to get started in the community.


SRP527W SSH user/password?

Hi all, im having trouble setting up site to site vpn from my 527w to my 877 series and thought it would be much easier to see whats going on the 527 if i could see command line

so ive ssh'd to the 527s ip address but none of the usernames/password combos work that let me in the web gui, what are the logins? does anybody know?



To access the WEB GUI of this device there are 2 different logins

that you can use. You can use cisco, cisco as the username and password or

admin,admin as the username and password. I would reccommend logging in as admin,admin. You

will see more available options under admin.


hi yeah, i found those accounts and have logged in with those, but when i ssh to the ip address of the router i get login prompt but neither credentials work, and i cant find any ssh access info in the web gui logged in as an admin

is ssh enabled but no account can use it?

Hi, were u able to get resolution/answer for this, I'm experiencing the same thing.

Hi All,

The SSH interface is protected by a device  specific password that may only be accessed by Cisco engineering staff.   There is no command line interface hidden behind this password, so would  be of limited use to most users.

That said, you might find the following useful in setting up a VPN between the SRP and IOS device:

Consider the following network:

This is the IOS configuration:

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

lifetime 28800

crypto isakmp key SECRET-KEY address



crypto ipsec transform-set SETNAME esp-3des esp-sha-hmac


crypto map CISCO 1 ipsec-isakmp

set peer

set transform-set SETNAME

set pfs group2

match address 110


interface FastEthernet4

ip address

crypto map CISCO


interface Vlan1

ip address


access-list 110 permit


The SRP IKE Policy is as follows:

...and the SRP500 IPSec policy is:

If both IP addresses are directly reachable, NAT-T is not  required:

VPN connection status and control is available from the SRP status page:

Thanks for that Andrew, will keep that for reference.

Though the reason I wanted SSH access was to test Port Mirroring bases from this post:

monitor session 1 source interface FaX/X

monitor session 1 destination interface FaX/X

I can't find seem to find to do this via the WEB GUI.

Ah - Those are commands for an IOS router.  The SRP500 is a Linux based device and does not have this functionality.


Oh ok, I didnt see port mirroring as feature in the datasheet, though when I saw that post, I thought its possible.


Thanks for those details!

So, that means no RSA certificates for authentication on these devices then...?

-- Lee

Hi Lee,

That's correct.  No certificates for IPSec, just shared secret.