Cisco 892 初期設定 - Knowlege Database

概要†

Cisco 892の初期設定手順。
アドレス付与、リモート接続、SNMP有効化あたりまでをカバーする予定。

接続手順†

初期接続にはコンソールケーブルが必須となる。
シリアル接続のパラメータはteratermの初期値で対応が可能。

初期起動時には以下の様な出力が行われる。

System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2009 by cisco Systems, Inc.

C890 platform with 524288 Kbytes of main memory

<中略>

         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]:

対話型インターフェイスにて初期設定を行う場合は[yes]、行わない場合は[no]を入力する。
[no]を選択した場合には以下の様な出力が行われる。

Press RETURN to get started!

*Mar  1 00:00:05.539: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c890 Next reboot level = 
advipservices and License = advipservices
*Mar  6 05:39:40.043: %IFMGR-7-NO_IFINDEX_FILE: Unable to open nvram:/ifIndex-table No such file or directory
*Mar  6 05:39:40.127: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Initialized 
*Mar  6 05:39:40.203: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Enabled 
*Mar  6 05:39:54.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0, changed state to down
*Mar  6 05:39:54.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to down
*Mar  6 05:39:54.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:2, changed state to down
*Mar  6 05:39:54.811: %LINK-3-UPDOWN: Interface FastEthernet8, changed state to up
*Mar  6 05:39:54.811: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar  6 05:39:55.739: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Mar  6 05:39:55.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet8, changed state to down
*Mar  6 05:39:55.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Mar  6 05:39:56.811: %LINK-3-UPDOWN: Interface FastEthernet8, changed state to down
*Mar  6 05:39:56.811: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Mar  6 05:42:24.819: %LINK-5-CHANGED: Interface BRI0, changed state to administratively down
*Mar  6 05:42:26.767: %LINK-5-CHANGED: Interface FastEthernet8, changed state to administratively down
*Mar  6 05:42:26.767: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Mar  6 05:42:34.207: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 15.1(3)T1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sun 27-Mar-11 12:57 by prod_rel_team
*Mar  6 05:42:34.207: %SNMP-5-COLDSTART: SNMP agent on host Router is undergoing a cold start
*Mar  6 05:42:34.231: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Mar  6 05:42:34.231: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Mar  6 05:42:36.891: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
*Mar  6 05:42:36.903: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to down
*Mar  6 05:42:36.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down
*Mar  6 05:42:36.927: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down
*Mar  6 05:42:36.943: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to down
*Mar  6 05:42:36.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet5, changed state to down
*Mar  6 05:42:36.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet6, changed state to down
*Mar  6 05:42:36.963: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet7, changed state to down
Router>

↑

操作手順†

↑

インターフェイスの状態確認†

インターフェイスの状態を表示させる。

#show ip interface brief

Interface                  IP-Address      OK? Method Status                Protocol
BRI0                       unassigned      YES unset  administratively down down    
BRI0:1                     unassigned      YES unset  administratively down down    
BRI0:2                     unassigned      YES unset  administratively down down    
FastEthernet0              unassigned      YES unset  down                  down    
FastEthernet1              unassigned      YES unset  down                  down    
FastEthernet2              unassigned      YES unset  down                  down    
FastEthernet3              unassigned      YES unset  down                  down    
FastEthernet4              unassigned      YES unset  down                  down    
FastEthernet5              unassigned      YES unset  down                  down    
FastEthernet6              unassigned      YES unset  down                  down    
FastEthernet7              unassigned      YES unset  down                  down    
FastEthernet8              unassigned      YES unset  administratively down down    
GigabitEthernet0           unassigned      YES unset  administratively down down    
Vlan1                      unassigned      YES unset  down                  down

↑

ホスト名の設定†

以下の手順にてホスト名を設定する。

> en
# conf t
(config)# hostname [HOSTNAME]
(config)# exit
# writemem

↑

インターフェイス(WAN)へのアドレス付与†

WAN(GigabitEthernet0)に192.168.1.252/24を付与する手順。

> en
# conf t
(config)#interface gigabitEthernet 0
(config-if)#ip address 192.168.1.252 255.255.255.0
(config-if)#no shutdown 
(config)# exit
# write mem

インターフェイスの状態を確認する。

#show ip interface brief

Interface                  IP-Address      OK? Method Status                Protocol
BRI0                       unassigned      YES unset  administratively down down    
BRI0:1                     unassigned      YES unset  administratively down down    
BRI0:2                     unassigned      YES unset  administratively down down    
FastEthernet0              unassigned      YES unset  down                  down    
FastEthernet1              unassigned      YES unset  down                  down    
FastEthernet2              unassigned      YES unset  down                  down    
FastEthernet3              unassigned      YES unset  down                  down    
FastEthernet4              unassigned      YES unset  down                  down    
FastEthernet5              unassigned      YES unset  down                  down    
FastEthernet6              unassigned      YES unset  down                  down    
FastEthernet7              unassigned      YES unset  down                  down    
FastEthernet8              unassigned      YES unset  administratively down down    
GigabitEthernet0           192.168.1.252   YES manual up                    up      
Vlan1                      unassigned      YES unset  down                  down

↑

インターフェイス(LAN)へのアドレス付与†

FastEthernet0～7に対して、172.16.0.252/16を付与する手順。

Vlan1にアドレスを付与

> en
# conf t
(config)#interface Vlan1
(config-if)#ip address 172.16.0.252 255.255.0.0
(config-if)#no shutdown

FastEthernetのポートをVlan1に参加

(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet1
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet2
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet3
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet4
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet5
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet6
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet7
(config-if)#switchport access Vlan 1
(config)# exit
# write mem

設定結果

#show ip interface brief

Interface                  IP-Address      OK? Method Status                Protocol
BRI0                       unassigned      YES unset  administratively down down
BRI0:1                     unassigned      YES unset  administratively down down
BRI0:2                     unassigned      YES unset  administratively down down
FastEthernet0              unassigned      YES unset  up                    up
FastEthernet1              unassigned      YES unset  down                  down 
FastEthernet2              unassigned      YES unset  down                  down
FastEthernet3              unassigned      YES unset  down                  down
FastEthernet4              unassigned      YES unset  down                  down
FastEthernet5              unassigned      YES unset  down                  down
FastEthernet6              unassigned      YES unset  down                  down
FastEthernet7              unassigned      YES unset  down                  down
FastEthernet8              unassigned      YES unset  administratively down down
GigabitEthernet0           192.168.1.252   YES NVRAM  up                    up
Vlan1                      172.16.0.252    YES manual up                    up

↑

ゲートウェイ設定†

ルーティングにゲートウェイを指定する。

> en
# conf t
(config)#ip route 0.0.0.0 0.0.0.0 [Gateway]
(config)# exit
# write mem

↑

DNS設定†

DNSサーバの指定。

> en
# conf t
(config)# ip name-server [DNS1] [DNS2]
(config)# ip domain lookup source-interface [Interface]
(config-line)#password cisco
(config)# exit
# write mem

↑

enableモードパスワードの設定†

enableモードに切り替える際のパスワードを設定する。（例では「cisoc」に設定）

> en
# conf t
(config)#enable password cisco
(config)# exit
# write mem

↑

telnetの有効化†

telnet接続を有効化とログインパスワードの設定。（例では「cisoc」に設定）

> en
# conf t
(config)#line vty 0 4
(config-line)#transport input telnet 
(config-line)#password cisco
(config)# exit
# write mem

↑

SSH有効化†

ドメイン名の設定
```
(config)#ip domain-name [OMAIN NAME]
```

暗号鍵の生成

(config)#crypto key generate rsa
The name for the keys will be: cisco982-01.asabiya.net
Choose the size of the key modulus in the range of 360 to 4096 for your
  General Purpose Keys. Choosing a key modulus greater than 512 may take
  a few minutes.

How many bits in the modulus [512]: 2048
% Generating 2048 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 7 seconds)

SSH有効化

(config)#ip ssh version 2
(config)#line vty 0 4
(config-line)#transport input ssh 
(config-line)#exit

ユーザ作成

(config)#username admin password [PASSWORD]

↑

時刻同期設定†

外部のNTPサーバ（ntp.nict.jp）を設定。

> en
# conf t
(config)# ntp server ntp.nict.jp
(config)# exit
# write mem

接続状況を確認
```
> en
# show ntp associations 
```

  address         ref clock       st   when   poll reach  delay  offset   disp
*~133.243.238.244 .NICT.           1     37     64     1  3.518  82.703 187.59
* sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

↑

SNMP有効化†

SNMP Serverの有効化

> en
# conf t
(config)# snmp-server community [community name] [ro|rw]
(config)# exit
# write mem

SNMPTrapの送信先指定

> en
# conf t
(config)# snmp-server host [IP] version 2c [community name]
(config)# snmp-server enable traps
(config)# exit
# write mem

↑

Syslog転送設定†

Syslogサーバへのログ送信設定。

> en
# conf t
(config)# logging [Syslog Server IP]
(config)# logging source-interface [Interface]
(config)# exit
# write mem

↑

LLDP有効化†

LLDPを有効化する手順。~

> en
# conf t
(config)# lldp run
(config)# exit
# write mem

有効化後、1分程度待ってから隣接機器情報を参照する。

#show lldp neighbors 
Capability codes:
   (R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
   (W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other

Device ID           Local Intf     Hold-time  Capability      Port ID
CORE-SW01           Gi0            120        B               g13

Total entries displayed: 1

↑

ファームウェア更新手順†

↑

イメージの入手†

ファームウェアのイメージを入手する。 Cisco 892用のファームウェアは以下の様なファイル名となっている。

c890-universalk9-mz.151-3.T1.bin

c890-universalk9-mz.124-22.YB4.bin

c890-universalk9-mz.150-1.M.bin

c890-universalk9-mz.150-1.M4.bin

c890-universalk9-mz.150-1.M5.bin

c890-universalk9-mz.150-1.M6.bin

c890-universalk9-mz.151-3.T.bin

c890-universalk9-mz.151-3.T1.bin

c890-universalk9-mz.151-4.M.bin

c890-universalk9-mz.151-4.M1.bin

c890-universalk9-mz.152-1.T.bin

c890-universalk9-mz.154-3.M3.bin

c890-universalk9-mz.154-3.M4.bin

c890-universalk9-mz.154-3.M6a.bin

c890-universalk9-mz.154-3.M7.bin

c890-universalk9-mz.154-3.M8.bin

c890-universalk9-mz.155-1.T.bin

c890-universalk9-mz.155-2.T1.bin

c890-universalk9-mz.155-3.M1.bin

c890-universalk9-mz.156-1.T.bin

c890-universalk9-mz.156-3.M.bin

c890-universalk9_npe-mz.151-3.T2.bin

c890-universalk9_npe-mz.151-4.M1.bin

c890-universalk9_npe-mz.152-1.T.bin

↑

イメージの転送†

tftpサーバを使用してファームウェアを転送する。
Windows用のtftpサーバとしては、以下の様な製品がある、

TFP Server

https://www.solarwinds.com/ja/free-tools/free-tftp-server

サービスを起動し、ルートディレクトリにファームウェアを配置する。

Cisco 892からは以下のコマンドにてtftpサーバから取得する。

ファイルのダウンロード

> en
#copy tftp: flash:

Address or name of remote host []? 192.168.1.133　　← tftpサーバのアドレス
Source filename []? c890-universalk9-mz.156-3.M.bin　←　ダウンロードするファイルを指定
Destination filename [c890-universalk9-mz.156-3.M.bin]? 　←　メモリに保管する際の名称を指定
Accessing tftp://192.168.1.133/c890-universalk9-mz.156-3.M.bin...

%Warning: File not a valid executable for this system
Abort Copy? [confirm] 
Loading c800-universalk9-mz.SPA.158-3.M3.bin from 192.168.1.133 (via GigabitEthernet0): 
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 97182536 bytes]

ファイルを確認

#show flash:

-#- --length-- -----date/time------ path
1     30094096 May 13 2016 04:43:40 +00:00 c890-universalk9-mz.151-3.T1.bin
2     58397940 Mar 6 2020 08:19:08 +00:00 c890-universalk9-mz.156-1.T.bin

164495360 bytes available (88502272 bytes used)

↑

起動するイメージの指定†

起動するイメージを指定する。

> en
# conf t
(config)# no boot system flash c890-universalk9-mz.151-3.T1.bin
(config)# boot system flash c890-universalk9-mz.156-1.T.bin
(config)# exit
# write mem
# reload

再起動後、バージョンを確認する。

#show version

Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 15.6(1)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Fri 20-Nov-15 17:49 by prod_rel_team

ROM: System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)

<中略>
License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*1        CISCO892-K9           FGLxxxxxxx     

License Information for 'c890'
   License Level: advipservices   Type: Permanent
   Next reboot license Level: advipservices

Configuration register is 0x2102