- 追加された行はこの色です。
- 削除された行はこの色です。
目次~
#contents
*概要 [#da661d89]
Cisco 892の初期設定手順。~
アドレス付与、リモート接続、SNMP有効化あたりまでをカバーする予定。~
*接続手順 [#w30b94f6]
初期接続にはコンソールケーブルが必須となる。~
シリアル接続のパラメータはteratermの初期値で対応が可能。~
~
初期起動時には以下の様な出力が行われる。~
System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2009 by cisco Systems, Inc.
C890 platform with 524288 Kbytes of main memory
<中略>
--- System Configuration Dialog ---
Would you like to enter the initial configuration dialog? [yes/no]:
対話型インターフェイスにて初期設定を行う場合は[yes]、行わない場合は[no]を入力する。~
[no]を選択した場合には以下の様な出力が行われる。~
Press RETURN to get started!
*Mar 1 00:00:05.539: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c890 Next reboot level =
advipservices and License = advipservices
*Mar 6 05:39:40.043: %IFMGR-7-NO_IFINDEX_FILE: Unable to open nvram:/ifIndex-table No such file or directory
*Mar 6 05:39:40.127: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized
*Mar 6 05:39:40.203: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled
*Mar 6 05:39:54.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0, changed state to down
*Mar 6 05:39:54.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to down
*Mar 6 05:39:54.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:2, changed state to down
*Mar 6 05:39:54.811: %LINK-3-UPDOWN: Interface FastEthernet8, changed state to up
*Mar 6 05:39:54.811: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 6 05:39:55.739: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Mar 6 05:39:55.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet8, changed state to down
*Mar 6 05:39:55.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Mar 6 05:39:56.811: %LINK-3-UPDOWN: Interface FastEthernet8, changed state to down
*Mar 6 05:39:56.811: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Mar 6 05:42:24.819: %LINK-5-CHANGED: Interface BRI0, changed state to administratively down
*Mar 6 05:42:26.767: %LINK-5-CHANGED: Interface FastEthernet8, changed state to administratively down
*Mar 6 05:42:26.767: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Mar 6 05:42:34.207: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 15.1(3)T1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sun 27-Mar-11 12:57 by prod_rel_team
*Mar 6 05:42:34.207: %SNMP-5-COLDSTART: SNMP agent on host Router is undergoing a cold start
*Mar 6 05:42:34.231: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Mar 6 05:42:34.231: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Mar 6 05:42:36.891: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
*Mar 6 05:42:36.903: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to down
*Mar 6 05:42:36.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down
*Mar 6 05:42:36.927: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down
*Mar 6 05:42:36.943: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to down
*Mar 6 05:42:36.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet5, changed state to down
*Mar 6 05:42:36.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet6, changed state to down
*Mar 6 05:42:36.963: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet7, changed state to down
Router>
*操作手順 [#c2336ebd]
**インターフェイスの状態確認[#zad9369f]
インターフェイスの状態を表示させる。~
#show ip interface brief
Interface IP-Address OK? Method Status Protocol
BRI0 unassigned YES unset administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
FastEthernet0 unassigned YES unset down down
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
FastEthernet5 unassigned YES unset down down
FastEthernet6 unassigned YES unset down down
FastEthernet7 unassigned YES unset down down
FastEthernet8 unassigned YES unset administratively down down
GigabitEthernet0 unassigned YES unset administratively down down
Vlan1 unassigned YES unset down down
**ホスト名の設定 [#w775370e]
以下の手順にてホスト名を設定する。
> en
# conf t
(config)# hostname [HOSTNAME]
(config)# exit
# writemem
**インターフェイスへのアドレス付与 [#o43c4877]
**インターフェイス(WAN)へのアドレス付与 [#o43c4877]
WAN(GigabitEthernet0)に192.168.1.252/24を付与する手順。~
> en
# conf t
(config)#interface gigabitEthernet 0
(config-if)#ip address 192.168.1.252 255.255.255.0
(config-if)#no shutdown
(config)# exit
# write mem
インターフェイスの状態を確認する。~
#show ip interface brief
Interface IP-Address OK? Method Status Protocol
BRI0 unassigned YES unset administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
FastEthernet0 unassigned YES unset down down
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
FastEthernet5 unassigned YES unset down down
FastEthernet6 unassigned YES unset down down
FastEthernet7 unassigned YES unset down down
FastEthernet8 unassigned YES unset administratively down down
GigabitEthernet0 192.168.1.252 YES manual up up
Vlan1 unassigned YES unset down down
**インターフェイス(LAN)へのアドレス付与 [#y23d0603]
FastEthernet0〜7に対して、172.16.0.252/16を付与する手順。
-Vlan1にアドレスを付与
> en
# conf t
(config)#interface Vlan1
(config-if)#ip address 172.16.0.252 255.255.0.0
(config-if)#no shutdown
-FastEthernetのポートをVlan1に参加
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet1
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet2
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet3
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet4
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet5
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet6
(config-if)#switchport access Vlan 1
(config-if)#interface FastEthernet7
(config-if)#switchport access Vlan 1
(config)# exit
# write mem
-設定結果
#show ip interface brief
Interface IP-Address OK? Method Status Protocol
BRI0 unassigned YES unset administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
FastEthernet0 unassigned YES unset up up
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
FastEthernet5 unassigned YES unset down down
FastEthernet6 unassigned YES unset down down
FastEthernet7 unassigned YES unset down down
FastEthernet8 unassigned YES unset administratively down down
GigabitEthernet0 192.168.1.252 YES NVRAM up up
Vlan1 172.16.0.252 YES manual up up
** ゲートウェイ設定 [#s9643f4c]
ルーティングにゲートウェイを指定する。~
> en
# conf t
(config)#ip route 0.0.0.0 0.0.0.0 [Gateway]
(config)# exit
# write mem
** DNS設定 [#a10b54c7]
DNSサーバの指定。~
> en
# conf t
(config)# ip name-server [DNS1] [DNS2]
(config)# ip domain lookup source-interface [Interface]
(config-line)#password cisco
(config)# exit
# write mem
** telnetの有効化 [#m5223f72]
telnet接続を有効化とログインパスワードの設定。（例では「cisoc」に設定）~
> en
# conf t
(config)#line vty 0 4
(config-line)#transport input telnet
(config-line)#password cisco
(config)# exit
# write mem
** enableモードパスワードの設定 [#u2efaf4b]
enableモードに切り替える際のパスワードを設定する。（例では「cisoc」に設定）~
> en
# conf t
(config)#enable password cisco
(config)# exit
# write mem
** 時刻同期設定 [#yd061d56]
外部のNTPサーバ（ntp.nict.jp）を設定。~
> en
# conf t
(config)# ntp server ntp.nict.jp
(config)# exit
# write mem
-接続状況を確認
> en
# show ntp associations
address ref clock st when poll reach delay offset disp
*~133.243.238.244 .NICT. 1 37 64 1 3.518 82.703 187.59
* sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
** SNMP有効化 [#acb31c5e]
-SNMP Serverの有効化
> en
# conf t
(config)# snmp-server community [community name] [ro|rw]
(config)# exit
# write mem
-SNMPTrapの送信先指定
> en
# conf t
(config)# snmp-server host [IP] version 2c [community name]
(config)# snmp-server enable traps
(config)# exit
# write mem
** Syslog転送設定 [#t96412a9]
Syslogサーバへのログ送信設定。~
> en
# conf t
(config)# logging [Syslog Server IP]
(config)# logging source-interface [Interface]
(config)# exit
# write mem
** LLDP有効化 [#t967064d]
LLDPを有効化する手順。~~
> en
# conf t
(config)# lldp run
(config)# exit
# write mem
有効化後、1分程度待ってから隣接機器情報を参照する。~
#show lldp neighbors
Capability codes:
(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other
Device ID Local Intf Hold-time Capability Port ID
CORE-SW01 Gi0 120 B g13
Total entries displayed: 1
*ファームウェア更新手順 [#rbf4b85b]
**イメージの入手 [#tdbc0ed4]
ファームウェアのイメージを入手する。
Cisco 892用のファームウェアは以下の様なファイル名となっている。~
~
|c890-universalk9-mz.151-3.T1.bin|
|c890-universalk9-mz.124-22.YB4.bin|
|c890-universalk9-mz.150-1.M.bin|
|c890-universalk9-mz.150-1.M4.bin|
|c890-universalk9-mz.150-1.M5.bin|
|c890-universalk9-mz.150-1.M6.bin|
|c890-universalk9-mz.151-3.T.bin|
|c890-universalk9-mz.151-3.T1.bin|
|c890-universalk9-mz.151-4.M.bin|
|c890-universalk9-mz.151-4.M1.bin|
|c890-universalk9-mz.152-1.T.bin|
|c890-universalk9-mz.154-3.M3.bin|
|c890-universalk9-mz.154-3.M4.bin|
|c890-universalk9-mz.154-3.M6a.bin|
|c890-universalk9-mz.154-3.M7.bin|
|c890-universalk9-mz.154-3.M8.bin|
|c890-universalk9-mz.155-1.T.bin|
|c890-universalk9-mz.155-2.T1.bin|
|c890-universalk9-mz.155-3.M1.bin|
|c890-universalk9-mz.156-1.T.bin|
|c890-universalk9-mz.156-3.M.bin|
|c890-universalk9_npe-mz.151-3.T2.bin|
|c890-universalk9_npe-mz.151-4.M1.bin|
|c890-universalk9_npe-mz.152-1.T.bin|
**イメージの転送 [#tdbc0ed4]
tftpサーバを使用してファームウェアを転送する。~
Windows用のtftpサーバとしては、以下の様な製品がある、~
~
-TFP Server
https://www.solarwinds.com/ja/free-tools/free-tftp-server
サービスを起動し、ルートディレクトリにファームウェアを配置する。~
~
Cisco 892からは以下のコマンドにてtftpサーバから取得する。~
-ファイルのダウンロード
> en
#copy tftp: flash:
Address or name of remote host []? 192.168.1.133 ← tftpサーバのアドレス
Source filename []? c890-universalk9-mz.156-3.M.bin ← ダウンロードするファイルを指定
Destination filename [c890-universalk9-mz.156-3.M.bin]? ← メモリに保管する際の名称を指定
Accessing tftp://192.168.1.133/c890-universalk9-mz.156-3.M.bin...
~
%Warning: File not a valid executable for this system
Abort Copy? [confirm]
Loading c800-universalk9-mz.SPA.158-3.M3.bin from 192.168.1.133 (via GigabitEthernet0):
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 97182536 bytes]
-ファイルを確認
#show flash:
-#- --length-- -----date/time------ path
1 30094096 May 13 2016 04:43:40 +00:00 c890-universalk9-mz.151-3.T1.bin
2 58397940 Mar 6 2020 08:19:08 +00:00 c890-universalk9-mz.156-1.T.bin
164495360 bytes available (88502272 bytes used)
**起動するイメージの指定 [#kf47129e]
起動するイメージを指定する。~
> en
# conf t
(config)# no boot system flash c890-universalk9-mz.151-3.T1.bin
(config)# boot system flash c890-universalk9-mz.156-1.T.bin
(config)# exit
# write mem
# reload
再起動後、バージョンを確認する。~
#show version
Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 15.6(1)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Fri 20-Nov-15 17:49 by prod_rel_team
ROM: System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)
<中略>
License UDI:
-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 CISCO892-K9 FGLxxxxxxx
License Information for 'c890'
License Level: advipservices Type: Permanent
Next reboot license Level: advipservices
Configuration register is 0x2102
