Introduction
This document describes how to use the Cisco Security Device Manager (SDM) in order to set the basic configuration of the router. This includes the configuration of the IP address, default routing, static and dynamic routing , static and dynamic NATing, hostname, banner, secret password, user accounts, and so forth. Cisco SDM allows you to configure your router in all kinds of network environments that includes small office home office (SOHO), branch office (BO), regional office, and central site or Enterprise headquarters using an easy-to-use web-based management interface.
Prerequisites
Requirements
This document assumes that the Cisco router is fully operational and configured to allow the Cisco SDM to make configuration changes.
Note: Refer to Allowing HTTPS Access for SDM in order to allow the router to be configured by the SDM.
Components Used
The information in this document is based on these software and hardware versions:
- Cisco 3640 Router with Cisco IOS® Software Release 12.4(8)
- Cisco Security Device Manager (SDM) Version 2.3.1
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
Conventions
Refer to the Cisco Technical Tips Conventions for more information on document conventions.
Configure
In this section, you are presented with the information to configure the basic settings for router in a network.
Note: Use the Command Lookup Tool ( registered customers only) to obtain more information on the commands used in this section.
Network Diagram
This document uses this network setup:
Note: The IP addressing schemes used in this configuration are not legally routable on the Internet. They are RFC 1918 addresses which have been used in a lab environment.
Interface Configuration
Complete these steps in order to configure the interfaces of a Cisco router.
- Click Home in order to go to the SDM Home page.The SDM Home page provides information such as hardware and software of the router, feature availability, and a configuration summary. The green circles show the features supported in this router and the red circles show the features not supported.
- Choose Configure > Interfaces and Connections > Create Connection in order to configure the WAN connection for the interface.As an example, for serial interface 2/0, choose the Serial option and click Create New Connection.Note: For other types of interfaces like Ethernet, choose the respective interface type and proceed by clicking the Create New Connection button.
- Click Next in order to proceed once this interface appears.
- Select Serial interface 2/0 (desired) from the Available Interfaces option and click Next.
- Choose the encapsulation type for the serial interface and click Next.
- Specify the static IP address with the corresponding subnet mask for the interface and click Next.
- Configure the default routing with optional parameters such as the next hop IP address (192.168.1.2 as per network diagram) supplied by the ISP and click Next.
- Choose Configure > Interfaces and Connections > Edit Interfaces/Connections in order to add/edit/delete the various interfaces.
NAT Configuration
Dynamic NAT Configuration
Complete these steps in order to configure the dynamic NAT in a Cisco router.
- Choose Configure > NAT > Basic NAT and click Launch the selected task in order to configure basic NATing.
- Click Next.
- Choose the interface that connects to the Internet or your ISP and select the IP address range to which Internet access is to be shared.
- This window appears and shows the configuration summary configured by the user. Click Finish.
- The Edit NAT Configuration window shows the configured dynamic NAT configuration with the translated IP address overloaded (PATing). If you want to configure the dynamic NATing with address pool, click Address Pool.
- Click Add.
- Here informations such as the pool name and IP address range with netmask are provided. There can be times when most of the addresses in the pool have been assigned, and the IP address pool is nearly depleted. When this occurs, PAT can be used with a single IP address to satisfy additional requests for IP addresses. Check Port Address Translation (PAT) if you want the router to use PAT when the address pool is close to depletion.
- Click Add.
- Click Edit.
- Choose Address Pool in the Type field, provide the name to the Address Pool as pool1 and click OK.
- This window shows the configuration for dynamic NATing with the address pool. Click Designate NAT Interfaces.
- Use this window to designate the inside and outside interfaces that you want to use in NAT translations. NAT uses the inside and outside designations when it interprets translation rules, because translations are performed from inside to outside, or from outside to inside.Once designated, these interfaces are used in all NAT translation rules. The designated interfaces appear above the Translation Rules list in the main NAT window.
Static NAT Configuration
Complete these steps in order to configure static NAT in a Cisco router.
- Choose Configure > NAT > Edit NAT Configuration and click Add in order to configure static NATing.
- Choose the Direction either from inside to outside or from outside to inside, specify the inside IP address to be translated under Translate from Interface. For the Translate to Interface area select the Type.
- Choose IP Address if you want the Translate from Address to be translated to an IP address defined in the IP Address field.
- Choose Interface if you want the Translate from Address to use the address of an interface on the router. The Translate from Address is translated to the IP address assigned to the interface that you specify in the Interface field.Check Redirect Port if you want to include port information for the inside device in the translation. This enables you to use the same public IP address for multiple devices, as long as the port specified for each device is different. You must create an entry for each port mapping for this Translated to address. Click TCP if this is a TCP port number and click UDP if it is a UDP port number. In the Original Port field, enter the port number on the inside device. In the Translated Port field, enter the port number that the router is to use for this translation. Refer to the Allowing the Internet to Access Internal Devices section of Configuring Network Address Translation: Getting Started.
Routing Configuration
Static Routing Configuration
Complete these steps in order to configure static routing in a Cisco router.
- Choose Configure > Routing > Static Routing and click Add in order to configure static routing.
- Enter the Destination Network address with mask and select either outgoing interface or next hop IP address.
Dynamic Routing Configuration
Complete these steps in order to configure the dynamic routing in a Cisco router.
- Choose Configure > Routing > Dynamic Routing.
- Select the RIP and click Edit.
- Check Enable RIP, select the RIP version, and click Add.
- Specify the Network address to be advertised.
- Click OK.
- Click Deliver in order to transfer the commands to the router.
Miscellaneous Configuration
Complete these steps in order to configure the other basic settings in a Cisco router.
- Choose Configure > Additional Tasks > Router Properties and click Edit if you want to change the Hostname, Domain Name, Banner and Enable Secret Password properties for a router.
- Choose Configure > Additional Tasks > Router Access > User Accounts/View in order to add/edit/delete the User Accounts to the router.
- Choose File > Save Running Config to PC... in order to save the configuration to the NVRAM of the router as well as the PC and to reset the current configuration to default (factory) settings.
- Go to the task bar and choose Edit > Preferences in order to enable these User Preferences options:
- Preview commands before delivering to router.
- Save signature file to Flash.
- Confirm before exiting from SDM.
- Continue monitoring interface status when switching mode/task.
- Choose View from the task bar if you want to:
CLI Configuration
Router Configuration |
---|
Router#show run |
Verify
Choose Configure > Interface & Connections > Edit Interface Connections > Test Connection in order to test the end-to-end connectivity. You can specify the remote end IP address if you click the User-specified radio button.
Troubleshoot
The Output Interpreter Tool ( registered customers only) (OIT) supports certain show commands. Use the OIT to view an analysis of show command output.
Note: Refer to Important Information on Debug Commands before you issue debug commands.
You can use these options in order to troubleshoot:
- Choose Tools > Update SDM from the task bar in order to ping, Telnet, and upgrade the SDM to the latest version. You can do this from Cisco.com, from the local PC, or from the CD.
- Choose Help > About this Router in order to view information on the hardware configuration of the router.
- The Help option provides information about the various available options in the SDM for the configuration of routers.