Network Firewalls: Ingress and Egress Filtering
Common Network Attack Strategies: Man in the Middle
Setting up Virtual Local Area Networks (VLANs)

Running Router Setup Wizard

When a router boots for the first time, it automatically enters setup. If your router does not, you have the option of running setup from Privileged EXEC mode. Here is the basic setup process; within just a few minutes, you can have your router up and running.

Router#setup
         --- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]: yes
At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system
Would you like to enter basic management setup? [yes/no]: yes
Configuring global parameters:
  Enter host name [Router]: Router2
  The enable secret is a password used to protect access to
  privileged EXEC and configuration modes. This password, after
  entered, becomes encrypted in the configuration.
  Enter enable secret: secretpass
  The enable password is used when you do not specify an
  enable secret password, with some older software versions, and
  some boot images.
  Enter enable password: enablepass
  The virtual terminal password is used to protect
  access to the router over a network interface.
  Enter virtual terminal password: termpass
  Configure SNMP Network Management? [no]:
Current interface summary
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            192.168.1.108   YES DHCP   up                    up
FastEthernet0/1            unassigned      YES unset  administratively down down
Enter interface name used to connect to the
management network from the above interface summary: FastEthernet0/0
Configuring interface FastEthernet0/0:
  Use the 100 Base-TX (RJ-45) connector? [yes]:
  Operate in full-duplex mode? [no]:yes
  Configure IP on this interface? [yes]:
    IP address for this interface [192.168.1.108]: 192.168.1.240
    Subnet mask for this interface [255.255.255.0] :
    Class C network is 192.168.1.0, 24 subnet bits; mask is /24
The following configuration command script was created:
hostname Router2
enable secret 5 $1$exG2$cxsOWeiMWa7a8SMo5dw51/
enable password enablepass
line vty 0 4
password termpass
no snmp-server
!
no ip routing
!
interface FastEthernet0/0
no shutdown
media-type 100Base-TX
full-duplex
ip address 192.168.1.240 255.255.255.0
no mop enabled
!
interface FastEthernet0/1
shutdown
no ip address
!
end
[0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.
Enter your selection [2]:
Building configuration...
[OK]
Use the enabled mode 'configure' command to modify this configuration.

Notice how little information you need to enter to get basic management access to your router over the network, including Telnet access to the router. After the Setup Wizard is complete, enter Configuration mode to update your configuration to disable Telnet in favor of SSH, configure your other network interfaces, and enable routing.

blog comments powered by Disqus
Multiple Radio Frequency WLAN Technologies
Observing Dynamic Host Configuration Protocol (DHCP) Traffic
Wireless Networking Infrastructure Mode
Network Basics: IPv6 Special Address Identification
VLAN Trunking Protocol (VTP) Configuration Revision Number Management
Advertisement

Inside Dummies.com