From Mycomputer Notes

Revision as of 22:16, 27 April 2006 (edit) 198.168.103.254 (Talk) (→=Password encryption) ← Previous diff		Revision as of 22:31, 27 April 2006 (edit) (undo) 198.168.103.254 (Talk) (→Configuring a Router) Next diff →
Line 46:		Line 46:
	The enable secret commands is used to restrict access to the privileged EXEC mode		The enable secret commands is used to restrict access to the privileged EXEC mode
	The enable secret command should be used because the enable secret command is encrypted		The enable secret command should be used because the enable secret command is encrypted
		+
		+	==Configuring Serial & Ethernet Interfaces==
		+	To configure a serial interface either from the console or through a virtual terminal line follow these steps:
		+
		+	#Enter global configuration mode
		+	#Enter interface mode.
		+	#Specify the interface address and subnet mask.
		+	#Set clock rate if a DCE cable is connected. Skip this step if a DTE cable is connected.
		+	#Turn on the interface.

---

Revision as of 22:31, 27 April 2006

All CLI configuration changes to a Cisco router are made from global configuration mode, which is sometimes called global config. Global config is the primary configuration mode.

Contents 1 Configuring a Router 1.1 Configuring router passwords 1.1.1 Console Password 1.1.2 Virtual Terminal Password 1.1.3 Enable Password 1.1.4 Password encryption 1.2 Configuring Serial & Ethernet Interfaces

Configuring a Router

A router should be given a unique name as one of the first configuration tasks In order to accomplished this go to the global configuration mode with the following command:

Router(config)#hostname Tokyo Tokyo(config)#

Configuring router passwords

As a best practive restrict access to routers with a password. Passwords should always be configured for virtual terminal (vty) lines and the console line. Passwords are also used to control access to privileged EXEC mode so that only authorized users may make changes to the configuration file.

Console Password

Router(Config)# line console 0
Router(Config)# password cisco
Router(Config)# login

Virtual Terminal Password

Router(Config)# line vty 0 4 (when configuring telenet sessions)
Router(Config)# password cisco
Router(Config)# login

Enable Password

Router(Config)# enable password SanFranciso
Router(Config)# service password-encryption (to encrypt non  encrypted passwords)

The enable password used to restrict access to the privileged EXEC mode IF the enable secret has not been set.

Sometimes it is undesirable for passwords to be shown in clear text in the output from the show running-config or show startup-config commands and a a best practice we should used the "service password-encryption" command

Password encryption

Router(Config)# enable secret <password> (encrypted password)

The enable secret commands is used to restrict access to the privileged EXEC mode The enable secret command should be used because the enable secret command is encrypted

Configuring Serial & Ethernet Interfaces

To configure a serial interface either from the console or through a virtual terminal line follow these steps:

1. Enter global configuration mode
2. Enter interface mode.
3. Specify the interface address and subnet mask.
4. Set clock rate if a DCE cable is connected. Skip this step if a DTE cable is connected.
5. Turn on the interface.