How to Build a Cisco Router Base Configuration: Cisco Router Training 101

hello and welcome to cisco router training 101 my name's Don Crawley I'm from sound training net where the Seattle washington-based provider of accelerated training for IT professionals today we're building a base configuration on a cisco router using the setup script this is based on interactive exercise 1.3 in Chapter 1 in my book The Accidental administrator cisco router step-by-step configuration guide it's available from amazon.com and through other channels although it's not required for the video but if you'd like to follow along you can pick up a copy the video is based on cisco iOS version 15.1 for m1 although this procedure using the setup script has been unchanged in many many years so even if you're using an older router like a 1600 or 1700 or even a 2500 series router you should be able to follow along might have to make some minor modifications but nothing that you won't be able to figure out here's the network diagram for the exercise and this is way more than you need but I went ahead and built it with the ethernet cables so in case you wanted to connect to the internet and test your configurations but really all you need is a management workstation the one I'm using runs Windows 7 connected via a console cable to a cisco 19:41 router or any cisco router the one I'm using is a 1941 but as long as you're using an iOS based router this is the diagram that you should use here the prerequisites in order to do this exercise you'll need the following unrestricted privilege mode access to a cisco router as long as you have that then you can do what we're about to do and your equipment software requirements you'll need a Cisco IOS based router now used a Cisco model 1941 you may be thinking well gosh Linksys that cisco can I use that and the answer's no has to be an iOS based router so I'm using like I said a 1941 you could use in 1841 you can use thirty six hundred seventy two hundred series of 2500 series as long as it's iOS based you'll need one computer acting as your management workstation and a console cable you've got a couple of choices that I'll go over in just a moment and terminal emulation software such as putty or you could use secure CRT hyper terminal teraterm mini-com doesn't matter just some terminal emulation software the one I'm using is putty now as I mentioned you have a couple of options for console cables if you're using a newer router like the one I'm using is a 1900 series then you can use the USB console cable which is a USB type a 2 5 pin mini type B cable like what you see pictured on screen if you're going to use that then you'll also need to download and install the drivers and it's in a file called Cisco underscore USB console dot zip search for that file name at cisco comm and you can download it requires a cisco username and password but at least as of this recording doesn't require a support contract if you're using Mac OSX or Linux no special drivers required you can just plug in and rock and roll once you get everything set up the drivers installed if you need to do that then you'll need to connect to the USB console port which you can see pictured here it is a mini USB port like I mentioned and you can plug in there now notice that you also have the traditional rj45 console port available on the back of the router you can use one or the other but not both now if you have an older router like even an 1800 or 2800 series or a really old one like a 2500 then you're going to need to use the traditional Cisco console cable which as you can see on the left on one end has an rj45 connector on the other hand on the other end is a db9 connector if your management workstation doesn't have a serial db9 connector on the back and let's be real most of them today many of them anyway don't especially if you have a laptop then you're going to need to get a USB to db9 adapter like what I'm showing you on the right and I'll tell you from my own experience I've not had good luck with them they do the job but I've worked with two different brands from two different vendors and both have caused my PC to blue screen I've talked to other people who haven't had that problem but I just I hope you have better luck with it than I do if you're using the traditional console cable then you'll need to plug into the console port and if you've worked with routers a lot this is going to seem really obvious to you but if you're new to them I just want to mention I've this happen often in classrooms where I'm teaching a Cisco router class people are brand-new to him and because it has an rj45 connector they'll just automatically plug it into an Ethernet port don't do that plug it into the console port the one that's marked in the blue label that says console don't use the aux port either you really just for our purposes you need to use the console port so just be be aware of that and be careful about that here's the disclaimer this videos provided solely as a courtesy to you our viewer no guarantees whatsoever please do not attempt these procedures on a production router without first testing them for security and suitability in a lab environment procedures shown in this video will destroy your routers existing configuration so ensure you have fully backed up your routers configuration and software images before commencing these procedures and performing these procedures may open your router to the public internet and subject your network to attack even if you do it correctly so make sure you have current backups and take precautions including data encryption and additional access controls to protect sensitive data that's really just generally good advice isn't it here's a summary of the steps number one you'll erase the existing configuration so there's nothing in nvram and non-volatile Ram you'll reboot the router and when you reboot it it should automatically run the setup script if it doesn't you can use the privilege mode command setup to start the setup script I've seen that happen with some older routers occasionally where they wouldn't automatically start the setup script but the newer ones seem to be pretty good about doing that so let's go ahead and start the the demo login to the router and we'll go into privilege mode with a command unable I'll abbreviate it with just en and type in my password now I'm in privilege mode you can see that because I've got a pound sign for my prompt and I'm going to use the command show startup config to look at the contents of my NVRAM I can abbreviate that would just show start there it is I'm not going to show you the whole thing but we'll just go ahead and touch Q to break out of it now let's erase it so we use the command erase startup config I could also use the command write a race if you like the older commands confirm it and now it's gone and let's verify that with the command show startup-config and as you can see it says startup config is not present so now let's go ahead and reload the router so type reload proceed with reload yes sometimes it'll ask it'll say the configuration has been modified and ask if you want to save it if yours does that don't save it because that would mean that it would load up the NVRAM again you don't want to do that so we'll go ahead and let it reload and now through the miracle of modern time lapse videography and some slick editing by our producer we're back with a reloaded router and you'll notice that it says would you like to enter the initial configuration dialog we're going to say yes in just a moment but I also want to point out the error that you see saying error opening TFTP what's happening right now is that the router is looking for a TFTP server since it doesn't have a configuration that send gosh maybe I can find one on a TFTP server and download it so that I can have a configuration in the book I actually have you disconnect the network cable so you don't get that error but I left it in place here so I could talk about that so we'll go ahead and type yes by the way when you get these errors you just go ahead and type the commands as though the air wasn't even there now a couple of things it says at any point you may enter a question mark for help it lies you can do that once you get the configuration done but not during the configuration process with the setup script use control-c to abort the configuration dialogue at any prompt if you decide you want to start over again then you can do that use control-c and then type setup to start the setup script again your default settings are in square brackets well not exactly notice what it says would you like to enter basic management setup and then in square brackets it says yes/no so what is the default well what it really ought to say is if there is a default it's in square brackets otherwise it'd give you your choices so we're going to go with one of the choices now notice that it says would you like to enter basic management setup and intuitively what do you want to say you want to say yes right well that's the wrong answer what you want to say is no because we want to go into extended setup because that will allow us to configure each of the interfaces on the system so I'm going to type know for going into extended management setup now it wants to show us the current interface summary sure why not we'll take a look at it there you can see everything is unset except for a gig 0/1 which has an IP address on it that's because it's connected to my test network here and and so it pick one up from the DHCP server we're going to blow that away and put one in manually in a moment so now we'll go to configuring the global parameters it's asking for a hostname it suggests the creative host name of router we're going to put in one that's not much more creative we'll just say test router and again we can just ignore those errors and just type around them now it wants the enable secret this is the encrypted privilege mode password so this is one that ought to be fairly robust for our purposes here we'll use P at SS five six seven eight now it once the enable password this is a password that you'll never use but the setup script requires it it's unencrypted in the configuration and it is usurped by the enable secret so you'll never use it but you do have to configure it so we'll just use password now once the virtual terminal password that is a telnet password or SSH so we'll use P at SS one two three four configure SNMP network management you may want to do that in the real world for our purposes here we're going to say no now it wants to know if we want to configure IP we'll say yes just hit enter because that's the default configuring again we'll say no configure CL NS that's connectionless network set up our network services and we're going to say no to that as well bridging also knows just hit enter now it wants to know if we want to configure the embedded service engine interface and we're going to say no to that that's like a really a separate partition on the router do you want to configure gig 0/0 interface we're going to say yes to that and configure IP yes IP address well if you'll recall the diagram at the beginning of the video we're going to put in 192.168.1 oh 1.1 that is a Class C address and the router smart enough to recognize that and suggest a 24-bit mask which would be the default used with a Class C address and we'll go ahead and accept that of 255.255.255.0 now it asks if we want to configure gigs 0/1 and we're going to say no to that you might want to do that in the real world but I want to show you how to configure an interface manually to pick up an IP address from a DHCP server so we're going to say no and then it asks if you want to go through Auto secure configuration for the video I'm going to say no what I would recommend is that you do that on your test router at some point so you can see what it does it really buttons it down pretty securely which is one of the reasons why I'm not going to do it here also it's kind of time consuming so we're going to say no to that but I do suggest you try it at some point in a test environment now it shows you the configuration that you built and you can choose to save it or not we're going to go ahead and save it so I'll just hit enter because that's the default in the square brackets of to save the configuration to NVRAM and exit building the configuration and saving it to NVRAM and it only takes a moment to do it so it'll be done with it in just a second and we can see what we've got now it's done and you can see it's giving us a whole lot of console messages looks like it's hung but it's not actually all we have to do is hit the enter key and now we're back at a prompt so let's go into privilege mode again so we'll type en short for enable P at SS five six seven eight that's the password that we just configured on it let's go ahead and look at the interfaces we'll do show IP interface brief I'm abbreviating that with int instead of typing out the word interface now you can see our gig 0/0 is configured with an IP address and it's up gigs 0/1 however is unassigned and it is administratively down now when an interface is administratively down that means that the shutdown command has been used on it to turn it off so let's go in and configure gigs 0/1 before we finish things up here so we'll type config T which is short for configure terminal or compte now let's go into interface configuration mode from global configuration mode so int 4 interface gig 0/1 we could type out the whole thing gigabit ethernet 0/1 but why on earth would you do that and now let's put an IP address on it using DHCP so we'll type IP a DD for address DHCP and let's bring the interface up because remember when we looked at it above it said administratively down so we have to use the command no shutdown we can abbreviate that with no shut to bring it up and in a moment you'll see it will actually first change it state to down like it just did then it'll bring it back up and in just a moment you should see it pick up the IP address from my office DHCP server and give it just a second and there it is same one the way before interestingly enough 192.168.1.2 39 with a 24-bit mask so now we're done let's do control Z and go back to privileged mode let's type the command show IP interface brief and there you can see it's got the address from the DHCP server so we have a fundamental configuration this is a base configuration on the router let's save it with a command W R which means write to memory you could also do copy running-config startup config or copy run start which is what a lot of people do but the the write family of commands are still supported and it's a little less typing and I'm all about less typing if I can so like I say now we have a base configuration on the router if you'd like more information you can visit our website at WWF at our bookstore I blog at sound training net / blog we'll talk about more videos in a moment you can also follow us on Google+ Facebook and Twitter like I said if you'd like more videos you can visit our video channel at WWE and net / videos we try to add one a week at least sometimes more sometimes less but that's always the goal and if you'd like to get the companion book it is the accidental administrator cisco router step-by-step configuration guide and it's available from our bookstore at wwm training net slash bookstore well I hope it's been helpful for sound training dotnet I'm Don Crowley thanks for watching we'll see you next time you

Channel: soundtraining.net

Views: 191,241

Keywords: Cisco router, Router (computing), it classes, it training, what is cisco, it training class, router cisco, configure a router, how do you configure a router, cisco ip, how do i set up a router

Id: 30BxMTn-Bv4

Length: 15min 32sec (932 seconds)

Published: Sat Sep 15 2012