Need help configuring cisco 861 router

itsmetaso · ‎09-25-2011

I made a serial connection with an xp box and used hyperterminal to connect. I am prompted that the default username and password is cisco and that I would need to change it. I think i am following the syntax example but i keep getting an error. some char symbol appears under the letter 's' for my first word 'username'. on the left side i am seeing yourname# but when i google examples i always see router# instead. no sure if this is the reason.

i bought this 861 router to replace an 831 router. if someone can guide me in the simpliest way of copying the settings that would be great. considering I am able to change the default cisco/cisco name and password

cadet alain · ‎09-26-2011

Hi,

yourname# is simply the router hostname so it has got nothing to do with the syntax problem.

You must first enter into configuration mode with config t command then you can change the username/password.

yourname(config)# username test secret secrettest

To copy the config you can put the 831 config on a tftp server like tftpd32 for Windows with the command:

yourname#copy running tftp://x.x.x.x where x.x.x.x is ip address of tftp server

then on your new router: yourname# copy tftp:// x.x.x.x running

Regards.

Alain.

Don't forget to rate helpful posts.

itsmetaso · ‎09-26-2011

Thanks your method for changing the username and password worked.

johnlloyd_13 · ‎09-26-2011

hi taso,

if you have a copy of your 831's config, you just do a copy and paste. although this would be tedious but it will simply get the job done. just ensure your 861 is under the global config mode like the one below:

yourname(config)#

please find useful link below for for the said router model:

http://www.cisco.com/en/US/docs/routers/access/800/860-880-890/software/configuration/guide/routconf.html

itsmetaso · ‎09-26-2011

I captured the 831 config file. when I paste it to my new 861 router does it have to be connected to the switch and cable modem? right now I did a paste to host and it's not moving and the line reads Logging to host xxx.xx.x.x port 514 started - CLI initiated. Also as the text was pasting is it normal to see and errors like invalid input detected or is that b\c I need it connected to the modem and switch?

Thanks again

cadet alain · ‎09-26-2011

Hi,

There are some things that won't be regognized as valid commands when pasting the config.

just be sure the interfaces number do match and to no shut the interface afterwards.

Regards.

Alain.

Don't forget to rate helpful posts.

itsmetaso · ‎09-26-2011

I am not able to login to the router after I paste the config. Luckily when I unplugged/plugged it back in it remembers the credentials I put in. I only have an enable password on the cisco 831.

cadet alain · ‎09-26-2011

Hi,

before pasting your config, save it in notepad and modify settings to get console logging and enable password.

Regards.

Alain.

Don't forget to rate helpful posts.

itsmetaso · ‎09-29-2011

Using the config from the 831 router didnt work for my 861. I couldnt get the internet to work. I did a show interfaces command for the 831 and got:

interface ethernet0 -> this is connected to my switch

interface ethernet1 -> this is connected to my isp

interface fast ethernet 1 thru 4 all have a no ip address shutdown duplex auto speed auto

on the 861 there are fastethernet0 through fastthernet3 which say are down

fastethnet4 says administratively down

and there is a vlan1 which says is down

do I have to mod the 831 config to change the interface names?

cadet alain · ‎09-30-2011

Hi,

post config of 831 with and topology with 861 and config and we'll do the changes and post the result.

Regards.

Alain.

Don't forget to rate helpful posts.

itsmetaso · ‎10-01-2011

The current cisco 831 router is connected to a Catalyst 3560G switch. The 3560G switch is connected to a cicso pix 515E Firewall.

Cisco 831 config:

show running-config

Building configuration...

Current configuration : 3810 bytes

!

version 12.3

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname nmm831

!

logging monitor errors

enable secret 5 $1$HHbq$ih4igjdS5bM.uxFLyq7nF0

enable password dm!q_nmm

!

username admin privilege 15 secret 5 $1$HOJJ$VLKvFLpHBMIMakq1R916d/

clock timezone PCTime -5

clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00

no aaa new-model

ip subnet-zero

no ip domain lookup

!

ip cef

ip audit notify log

ip audit po max-events 100

no ftp-server write-enable

!

interface Ethernet0

description Internal Lan$ETH-LAN$$FW_INSIDE$

ip address 172.30.254.240 255.255.0.0

ip access-group 104 in

ip access-group sdm_ethernet0_out out

ip nat inside

!

interface Ethernet1

description TimeWarner Cable$FW_OUTSIDE$

ip address 69.192.206.30 255.255.255.252

ip access-group 105 in

ip access-group sdm_ethernet1_out out

ip verify unicast reverse-path

ip nat outside

duplex auto

!

interface FastEthernet1

no ip address

duplex auto

speed auto

!

interface FastEthernet2

no ip address

duplex auto

speed auto

!

interface FastEthernet3

no ip address

shutdown

duplex auto

speed auto

!

interface FastEthernet4

no ip address

shutdown

duplex auto

speed auto

!

ip nat inside source list 100 interface Ethernet1 overload

ip classless

ip route 0.0.0.0 0.0.0.0 69.192.206.29 permanent

ip route 10.4.2.0 255.255.255.0 172.30.254.3

ip route 172.29.0.0 255.255.0.0 172.30.254.254 permanent

ip route 172.31.0.0 255.255.0.0 172.30.254.252 permanent

ip http server

ip http authentication local

ip http secure-server

!

ip access-list extended sdm_ethernet0_out

remark SDM_ACL Category=1

permit ip any any

ip access-list extended sdm_ethernet1_out

remark SDM_ACL Category=1

permit ip any any

logging facility local1

logging 172.30.1.3

access-list 100 remark auto generated by SDM firewall configuration

access-list 100 remark SDM_ACL Category=1

access-list 100 deny ip 86.56.206.0 0.0.0.7 any

access-list 100 deny ip host 255.255.255.255 any

access-list 100 deny ip 127.0.0.0 0.255.255.255 any

access-list 100 permit ip any any

access-list 101 remark auto generated by SDM firewall configuration

access-list 101 remark SDM_ACL Category=1

access-list 101 deny ip 172.29.254.0 0.0.0.255 any

access-list 101 permit icmp any host 86.56.206.2 echo-reply

access-list 101 permit icmp any host 86.56.206.2 time-exceeded

access-list 101 permit icmp any host 86.56.206.2 unreachable

access-list 101 deny ip 10.0.0.0 0.255.255.255 any

access-list 101 deny ip 172.16.0.0 0.15.255.255 any

access-list 101 deny ip 192.168.0.0 0.0.255.255 any

access-list 101 deny ip 127.0.0.0 0.255.255.255 any

access-list 101 deny ip host 255.255.255.255 any

access-list 101 deny ip host 0.0.0.0 any

access-list 101 deny ip any any log

access-list 102 remark auto generated by SDM firewall configuration

access-list 102 remark SDM_ACL Category=1

access-list 102 permit ip any any

access-list 103 remark auto generated by SDM firewall configuration

access-list 103 remark SDM_ACL Category=1

access-list 103 deny ip any any log

access-list 104 remark auto generated by SDM firewall configuration

access-list 104 remark SDM_ACL Category=1

access-list 104 deny ip 69.192.206.28 0.0.0.3 any

access-list 104 deny ip host 255.255.255.255 any

access-list 104 deny ip 127.0.0.0 0.255.255.255 any

access-list 104 permit ip any any

access-list 105 remark auto generated by SDM firewall configuration

access-list 105 remark SDM_ACL Category=1

access-list 105 permit icmp any any

access-list 105 permit ip any any

access-list 105 deny ip any any log

!

line con 0

no modem enable

line aux 0

line vty 0 4

privilege level 15

password dm!q_nmm

login local

transport input telnet ssh

!

scheduler max-task-time 5000

!

end

nmm831#

Cisco 861 config: new router

show running-config

Building configuration...

Current configuration : 4856 bytes

!

version 15.0

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname yourname

!

boot-start-marker

boot-end-marker

!

logging buffered 51200 warnings

!

no aaa new-model

memory-size iomem 10

!

crypto pki trustpoint TP-self-signed-525585330

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-525585330

revocation-check none

rsakeypair TP-self-signed-525585330

!

crypto pki certificate chain TP-self-signed-524585330

certificate self-signed 01

3082424D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 35323535 38353333 30301E17 0D393330 33303130 30303034

385A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F

532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3532 35353835

33333030 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100

9DD3F71D 66FBCBCA 77E853E1 641EB2BE 4A6D97A7 8169081D 8423A7F7 FA3CEF93

256CE7FC DA15A0DD 8042E40D D90D1DD4 AC666956 533D7B83 5F32D9FD 585F1278

1718C435 78FE255F CCEE3005 B4522AAA B1AC8317 15BC1BDF 99ECF344 96D69FFD

EF7CBAC4 94CFD8E9 35A166F4 3B223A84 EDD7642E 0191DCFD 775B8D31 84F7612F

02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D

11041B30 19821779 6F75726E 616D652E 796F7572 646F6D61 696E2E63 6F6D301F

0603551D 23041830 16801471 9DE4ECA0 60650E3F EDA2A0E1 70881C03 964D0830

1D060355 1D0E0416 0414719D E4ECA060 650E3FED A2A0E170 881C0396 4D08300D

06092A86 4886F70D 01010405 0003811 009C201B 7983E76D 8588BAD1 66001A4C

5C812BE5 A0AEB528 69D3C08E 5FF4F853 1E904249 12448104 BAD5C781 EE53CAFA

D39067EE B42396C6 D14DD870 51875AAA AF178A41 48AF3F82 73C679C9 021E4E80

8598B6BC 15CD38C3 5F7FF264 62914569 1556EF24 38327B8D FC47AB1B CD9F159B

32036019 2CFD8A1D 1DE1EBF2 EA6A82B8 ED

quit

ip source-route

!

ip dhcp excluded-address 10.10.10.1

!

ip dhcp pool ccp-pool

import all

network 10.10.10.0 255.255.255.248

default-router 10.10.10.1

lease 0 2

!

ip cef

no ip domain lookup

ip domain name yourdomain.com

!

license udi pid CISCO861-K9 sn FTX14150

!

username admin privilege 15 secret 5 $1$T0..$OCKgMPkiofZFy.h43X0k1

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface FastEthernet4

no ip address

shutdown

duplex auto

speed auto

!

interface Vlan1

description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$

ip address 10.10.10.1 255.255.255.248

ip tcp adjust-mss 1452

!

ip forward-protocol nd

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

access-list 23 permit 10.10.10.0 0.0.0.7

no cdp run

!

control-plane

!

banner exec ^C

% Password expiration warning.

-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device

and it provides the default username "cisco" for one-time use. If you have

already used the username "cisco" to login to the router and your IOS image

supports the "one-time" user option, then this username has already expired.

You will not be able to login to the router with this username after you exit

this session.

It is strongly suggested that you create a new username with a privilege level

of 15 using the following command.

username privilege 15 secret 0

Replace and with the username and password you

want to use.

-----------------------------------------------------------------------

^C

banner login ^C

-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device.

This feature requires the one-time use of the username "cisco" with the

password "cisco". These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE

PUBLICLY-KNOWN CREDENTIALS

Here are the Cisco IOS commands.

username privilege 15 secret 0

no username cisco

Replace and with the username and password you want

to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL

NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the

QUICK START GUIDE for your router or go to

http://www.cisco.com/go/ciscocp

-----------------------------------------------------------------------

^C

!

line con 0

login local

no modem enable

line aux 0

line vty 0 4

access-class 23 in

privilege level 15

login local

transport input telnet ssh

!

scheduler max-task-time 5000

end

yourname#

itsmetaso · ‎10-08-2011

Can anyone help me with this?

jimmysands73_2 · ‎10-08-2011

Your top config has interface settings for ethernet0, but the bottom config uses fastethernet0, your bottom config also has no default route, plus a few other inconsistencies.