Cisco 831 1

[silverhairbp]

Bought a used Cisco 831. The panel lights indicate normal operation, but DHCP isn't working and I can't connect to CRWS at 10.10.10.1. Can't connect to internet.

Switch port lights indicate when a PC or other switch is plugged in. PC sees electrical signals from router. WAN port lights indicate connectivity and activity from cable modem.

Is there some way to reset router back to factory specs and configure it for home use with a gigabit switch. a wireless access point and 6 to 8 or so computers?

 

[Minue]

Hello
Being the router doesn't have it's default config from cisco,CRWS will not start.
You will need to configure the router from console.When you get into the terminal,do a "erase start" and reload the router.After that you will need to configure the DHCP server,NAT,and a default gateway.If you have any problem configuring the router let me know and I will post you an example config.
Sure it's possible to create the design you have in mind.
Regards

 

[silverhairbp]

I followed the Cisco documentation for connecting a terminal to the router and have connected successfully. All I can get is a prompt from the router ( SIMI831> ). But I'm not familiar with CLI and can't get anything to execute except "show version" (I picked that up somewhere in the past). When I type in "enable" I get a request for password. Everything else seems to trigger an error or a server look-up.

I've looked for documentation as to how to reset everything, but can't seem to get around this. Can't seem to find a method to re-establish identities and passwords.

Is there something else I can do to execute "erase startup" or "erase startup config"?

I've done searches but have come up empty. Sorry that my lack of familiarity with Cisco is so obvious.

Thanks in advance for any help.

 

[burtsbees]

Password recovery---turn the router off, then back on---within 30 seconds, send a break(either ctrl-break, or shift-break), and you should come up with
rommon1>
then you type
rommon1>confreg 2142
rommon2>reset
The router reboots with the default config. When it comes up, answer no to the first question, yes to the second. Then you will be at
router>
then type
router>en
router#copy start run
router#conf t
router(config)#line con 0
router(config-line)#password whatever
router(config-line)#login
router(config-line)#exit
router(config)#enable password whatever
router(config)#enable secret cisco
router(config)#config-register 2102
router(config)#exit
router#copy run start
enter twiice
router#reload

Your password for the console will be "whatever", and when you type
router>en
then password will be "cisco"

Burt

 

[silverhairbp]

Thank you very much. It seems that the earlier config has been blown away. New user and password set. I'm beginning to understand a little about the commands in your procedure.

I think I'm ready to set up the router and get it running for our home use. Is there some reference material available to help me configure the router as a DHCP client to the WAN and a DHCP server to the LAN? I don't need much (definitely need NAT), but would like the ability to access the router through CRWS.

I'd like to take you up on the deal for the config you mentioned earlier, I might be able to muddle through it to get the router set up.

Thanks.

 

[burtsbees]

Please post the names of the WAN and LAN interfaces (like LAN=fa0/0, WAN=di0/0, etc---this information can be derived from "sh ver" at the "#" prompt), what private network address block you want for dhcp. I will write a dhcp config for your LAN, NAT config, and a WAN config also, as well as showing you how to set passwords on the vty lines for telnet access and username and password for administrative http/https access.

Burt

 

[silverhairbp]

sh ver doesn't seem to display the interface name info. But the following was as I was snooping around:

WAN name seems to be Ethernet0 (Ethernet1 is also shown, but it is set as "down" by default. Ethernet0 is set "up" by default)

LAN names seem to be FastEthernet1 through FastEthernet4


Private address block of 192.168.1.100 through 192.168.1.150.

Thanks!

 

[burtsbees]

router>en
router#conf t
router(config)#ip dhcp pool silver
router(dhcp-config)#network 192.168.1.0 255.255.255.0
router(dhcp-config)#default-router 192.168.1.1
router(dhcp-config)#dns-server x.x.x.x
router(dhcp-config)#exit
router(config)#int e0
router(config-if)#ip add 192.168.1.1 255.255.255.0
router(config-if)#no shut
router(config-if)#ip nat inside
router(config-if)#exit
router(config)#int e1
router(config-if)#ip add dhcp
router(config-if)#ip nat outside
router(config-if)#no ip redirects
router(config-if)#no shut
router(config-if)#exit
router(config)#access-list 1 permit 192.168.1.0 0.0.0.255
router(config)#ip nat inside source list 1 int e1 overload
router(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.99
router(config)#ip dhcp excluded-address 192.168.1.151 192.168.1.254
router(config)#line vty 0 4
router(config-line)#password whatever
router(config-line)#login
router(config-line)#exit
router(config)#ip http server
router(config)#ip http secure-server
router(config)#ip http authentication local
router(config)#username silverhair priv 15 secret yoursecretpassword
router(config)#service password-encryption
router(config)#access-list 101 deny tcp any 192.168.1.0 0.0.0.255
router(config)#access-list 101 permit ip any any
router(config)#no service tcp-small-servers
router(config)#no service udp-small-servers
router(config)#no ip source-route
router(config)#ip cef
router(config)#no ip dhcp use vrf connected
router(config)#no ip bootp server
Whatever your dns server is on the WAN from your provider, you can enter that like this...
router(config)#ip name-server y.y.y.y
Of course, substitute the "y"'s with an actual IP address...
Also, for a banner at login...
router(config)#banner motd ^Go Away, or I shall set you on fire.^
and you can give your router a hostname...
router(config)#hostname Silverhair
Silverhair(config)#line con 0
Silverhair(config-line)#logg sync
This command makes sure that while things are happening in the backround that require the router to output progress messages on the screen, like the state of an interface going up, while you are typing, the router will go back to the line that you were typing...for example, if you are typing "no shut" on an interface, and go to the next command, while you are typing the next command the router will output "Interface blablabla state changed to "up", and you will see
router(config-if)#exit
router(config)#linInterface e1, state changed to "up"econ 0
with "logging synchronous", or "logg sync" for short, you will see
router(config)#lin
Interface e0, state changed to "up"
router(config)#line con 0
See what I mean? So the "logg sync" will be one of the first commands you'll want to put in. I just forgot it until now.
When all is said and done...
Silverhair(config)#end
Silverhair#copy run start
After this, you can telnet to the IP address on the e0 interface (192.168.1.1), or enter it into a browser for a GUI based utility. Or, if you download SDM from Cisco.com (free), then you can log into the router using SDM, or Secure Device Manager, which is an advanced secure GUI based configuration utility. Let me know if you need a VPN config, so that you can VPN into your network remotely. Have fun.

Burt

 

[burtsbees]

By the way, Minue is the one who offered a sample config, but I am also glad to help. Minue is a good guy.

Burt

 

[silverhairbp]

Just a couple of quick questions....

In the sixth command

router(dhcp-config)#dns-server x.x.x.x

Is the x.x.x.x supposed to contain the address of the dns server form the provider? (doesn't like x.x.x.x)


I'm getting an error from the command:

router(config)#no ip dhcp use vrf connected

Doesn't like "vrf"

Thanks.

 

[burtsbees]

Yes to the first question---the dns server of what you want the clients to get when they get an IP address from the router.
Also, some of those commands may not work, depending on the version of your IOS. Post a
router#sh ver
and I can go to the feature navigator and post the link---you will see what commands your IOS supports. IOS=Internetworking Operating System---proprietary term used by Cisco.
Also, here's a CiscoPedia---a reference for Cisco IOS commands, and what they mean. It is on my FTP server...

ftp://69.149.227.189/Cisco%20Stuff/Ciscopedia-v1-Desktop.exe

Burt

 

[silverhairbp]

Cisco IOS Software, C831 Software (C831-K9O3SY6-M), Version 12.3(11)T7, RELEASE
SOFTWARE (fc3)
Technical Support:

http://www.cisco.com/techsupport

Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Sat 30-Jul-05 12:10 by dchih

ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)

silverhair uptime is 20 minutes
System returned to ROM by reload
System image file is "flash:c831-k9o3sy6-mz.123-11.T7.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco C831 (MPC857DSL) processor (revision 0x300) with 44237K/4915K bytes of mem
ory.
Processor board ID AMB07250CLM (2748418223), with hardware revision 0000
CPU rev number 7
2 Ethernet interfaces
4 FastEthernet interfaces
128K bytes of NVRAM.
24576K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)

Configuration register is 0x2142


I followed your "script" to the letter. After entering all the commands to set up the router, I did #copy run start. No change to the router operation. So I did a reload. The router reverted back to asking whether I wanted to enter the basic configuration. Came up with router>. I copied start run and it appeared that the configuration I had entered returned, but still change, no access, no dhcp. I did a copy run start to make sure the config was saved.

I then did a cold start and the system came up requesting whether I wanted to enter basic configuration. After "no" it reverted back to router>. Tried a few more things including a cold start. Same results. It didn't seem to pick up the config from start. Copied the config from start to run and then did the sh ver.

I'm trying searches but not coming up with anything useful. I feel like its something simple

Thanks a lot for your help. I recognize the effort and greatly appreciate it.

 

[silverhairbp]

I might have fat-fingered something. I'm going to retry Saturday.

 

[silverhairbp]

Got it!! Thanks!

Need to register with Cisco so that I can get SDM.

Thanks so much for bailing me out! I was getting a little frustrated, but far from defeated.

 

[Minue]

Hello
Burt !Thanks for the compliment.We're all good guys,that's why we are here!Good job done on the config.Didn't get to follow up the post was on the graveyard shift this week.
Silverhairbp!Glad to see the router is up and running.Feel free to hammer away with other question,new question help to keep us sharp!
Regards

 

[silverhairbp]

Well I guess I'll go out and get a Cisco wireless access point. That ought to provide some action for a while.

Any suggestions for a robust A/P for home use? I want to replace another home networking toy.

Thanks!

 

[burtsbees]

Here's a link to Cisco's Feature Navigator---just enter the image name, which is
c831-k9o3sy6-mz.123-11.T7.bin
into the box that says "image". Here's the link...

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

Click on "search by image".

Burt