Configuration Procedures

Hello!
CBOS v2.0.1
 
User Access Verification
Password:

After you log on to CBOS and before proceeding any further with your configuration process, check the version of the CBOS to verify that the version number and date reflect the most recent firmware update:

cbos# show version
 

Step 1 Type enable at the exec mode command line:
cbos> enable

Step 2 Enter a password when CBOS prompts you:
cbos> enable
Password:

You are now in enable mode. The system prompt appears:

cbos#

Cisco also provides two methods of configuring and managing the bridged Cisco 677, through in-band bridging management or through a separate management VC. The two methods cannot be used simultaneously. If a separate management VC is used, the Cisco 677 can only be managed remotely through wan0-1 and not from the local network.

With RFC 1483 management enabled, you can manage the router using telnet. The following commands are accessible through the managed bridge:

• ping

• telnet

• tftp

The following procedure shows how to set up the Cisco 677 for in-band bridging management.

Step 2 To save your changes, enter:
write

Step 3 To reboot the device, enter:
reboot

set bridging management enabled <Enter>

set int eth0 ip ip address

The IP address of the Ethernet port should be an IP address on the same network as that of the "far-end" station.

Step 5 To enable the Cisco 677 to direct management traffic to the far-end station, enter:

set route default wan0-0 <Enter>

set route default ip ip address

The default IP address should be the IP address of the far-end station that is used to telnet to the router.

Step 6 To save your changes enter:
write

Step 7 To enable your changes, reboot the router:
reboot

To manage the bridged Cisco 677 using a separate management VC, follow these steps:

Step 3 To save your changes, enter:
write

Step 4 To reboot the device, enter:
reboot

After rebooting, the Cisco 677 will have two PVCs enabled. Wan0-0 is used strictly for bridged traffic, while wan0-1 is used strictly for management traffic. Wan0-1 will be using RFC 1483 routing.

Step 5 Set an IP address on the Ethernet port that is on the same network as the far-end station out the wan0-1 interface:
set int eth0 ip ip address

Step 6 Set the default route of the Cisco 677 to wan0-1:
set route default wan0-1

For more information on using the set bridging command, see the Cisco Broadband Operating System User Guide.

The rules that govern the bridge command are:

If you choose bridging as your connection mode, see also the following sections:

Step 1 Enable the DHCP client:
set dhcp client enabled

Step 2 To check whether this feature is enabled, enter the following command:
show dhcp client

Step 3 Enable the DHCP server:
set dhcp server enabled

Step 4 To check whether this feature is enabled, enter the following command:
show dhcp server

Step 5 Enable NAT:
set nat enabled

Step 6 To check whether this feature is enabled, enter the following command:
show nat

Step 7 Write the changes to NVRAM:
write

Step 8 Reboot the Cisco 677:
reboot

When the Cisco 677 reboots, configurationless provisioning is enabled.

Step 1 Disable the DHCP client:
set dhcp client disabled

Step 2 Disable the DHCP server:
set dhcp server disabled

Step 3 Disable NAT:
set nat disabled

Step 4 Write the changes to NVRAM:
write

Step 5 Reboot the Cisco 677:
reboot

• set dhcp server pool

• set dhcp client port

• set nat entry add

• set nat entry delete

• set nat timeout

• set nat outside

For a complete description of each of these commands, see the Cisco Broadband Operating System User Guide.

You must be in the enabled mode to do this procedure:

Step 1 Log on to the CBOS (cbos#) using the serial connection.

Step 2 To set the IP address (and your netmask), follow this example of a sample command:
set interface eth0 address 192.168.34.9

The IP address becomes 192.168.34.9 and the netmask becomes 255.255.255.0 by default. If you wish to explicitly set the netmask, enter:
set interface eth0 mask 255.255.255.248

Step 3 To set the destination IP address for the WAN port, enter:
set interface wan0-0 dest 192.168.34.10

Step 4 To save your changes, enter:
write

Step 5 To allow the system to come up with these new settings, reboot the Cisco 677:
reboot

Step 6 Log back on to the CBOS to continue.

For more detailed information on the set interface command, see the Cisco Broadband Operating System User Guide.

The Cisco 677 automatically trains up to the ideal line speed. By default, the Cisco 677 is provisioned with rates of 8.032 Mbps downstream and .832 Mbps upstream. The maximum operative rate is determined by the Central Office ADSL equipment.

Because the Cisco 677 connects to the Cisco 6xxx series, the subscriber side VPI/VCI settings are not seen by the ATM network. All subscriber side VCs use VPI 1 by default.

Cisco 677 comes preconfigured with one VC already established. Each VC is expressed as WAN0-x, where x is a number between zero and three.

To set the maximum number of VCs, enter
cbos# set interface wan0 maxvcs n

Step 2 To begin using this connection with the new settings, enter:
set interface wan0-1 open

Step 3 Repeat steps 1 and 2 for every VPI assignment you want to make.

Step 4 To save the new WAN port configuration, enter:
write

Step 5 To exit the CBOS, enter:
quit

Step 2 To begin using this connection with the new settings, enter:
set interface wan0-0 open

Step 3 Repeat steps 1 and 2 for every VCI assignment you want to make.

Step 4 To save the new WAN port configuration, enter:
write

Step 5 To exit the CBOS, enter:
quit

For more information on configuring VPI/VCI address mapping, see the Cisco Broadband Operating System User Guide.

Step 5 To save your changes, enter:
write

Step 6 To exit the CBOS, enter:
quit

For more information on using the set route command, see the Cisco Broadband Operating System User Guide.

set rip enabled 

To disable RIP, enter:

set rip disabled 

For more information on using the set rip commands, see the Cisco Broadband Operating System User Guide.

To use filtering to block all packets going through the Ethernet interface, enter:
set filter 0 on deny eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

• DHCP client

• DHCP server

• NAT

• RADIUS client

• SYSLOG client

• Telnet server

• TFTP server

• Web server (HTTP server)

Step 1 Enable the DHCP client:
set dhcp client enabled

Step 2 To check whether this feature is enabled, enter the following command:
show dhcp client

Step 3 Write the changes to NVRAM:
write

Step 4 Reboot the Cisco 677:
reboot

Step 1 Enable the DHCP server:

Step 2 To check whether this feature is enabled, enter the following command:

show dhcp server
 

Step 3 Write the changes to NVRAM:

write
 

Step 4 Reboot the Cisco 677:

reboot

For more information on using DHCP servers, see the set dhcp server series of commands in Cisco Broadband Operating System User Guide.

Step 1 Enable NAT:

Step 2 To check whether this feature is enabled, enter:

show nat
 

Step 3 Write the changes to NVRAM:

write
 

Step 4 Reboot the Cisco 677:

reboot
 

For more information on using NAT, see the set nat series of commands in Cisco Broadband Operating System User Guide.

The Cisco 677 has been successfully tested for compatibility with the following RADIUS server providers:

• Livingston Enterprises RADIUS 2.01

• Sun Solaris 2.5

• Merit RADIUS (Sun binary)

• RADIUS NT (Microsoft)

set ppp wan0-0 radius enabled
set ppp wan0-0 login cisco
set ppp wan0-0 password is_great
 

Use the show radius command to display the Cisco 677's default configuration for RADIUS.

For more information on RADIUS commands, see the Cisco Broadband Operating System User Guide.

*.info	/var/log/messages

To enable only alarm messages and above, enter the following in /etc/syslog.conf:

*.alarm	/var/log/messages
 

Be sure your UNIX syslogd daemon accepts remote reception (network messages). Some processes may need to be killed and restarted with a -r option. Using the man syslog command to view the online UNIX manuals for information about the SYSLOG daemon.

set syslog remote IPaddress of remote server

For more information on SYSLOG commands, see the Cisco Broadband Operating System User Guide.

Step 1 Click Start.

Step 2 Select the Run... option.

Step 3 When the Run box appears, enter telnet in the space provided.

Step 4 Click OK. The Connect menu appears.

Step 6 Enter the IP address of the Cisco 677 in the Host Name box and click Connect. The system then initiates a session with the Cisco 677. Press the Enter key three or four times to establish a connection.

Step 7 Provide the exec user password information. After the system authenticates your password, you have access to the CBOS.

Notice to Windows Users

Notice to Linux Users

Step 1 Enter the following at your prompt:

telnet IP address of Cisco 677
 

After you have connected to the Cisco 677, the following information appears on your terminal:

User Access Verification
Password: <password>
 

set telnet timeout off
write
 

For more information on Telnet commands, see the Cisco Broadband Operating System User Guide.

Archives

• When using the put option of the tftp command, you must name the file nscfg.cfg.

• When using the get option of the tftp command, name the file any name that a standard text editor can view and edit.

Windows 95/98 does not have a TFTP client. If you want to utilize TFTP on a Windows 95/98 system, you must install a TFTP client from a third-party vendor on your system. One way to locate a TFTP client is to use an Internet search engine to locate a vendor who sells a TFTP client. Some TFTP clients are provided as share or freeware on the Internet. Cisco will provide a TFTP client upon request. TFTP client requests should be directed to Technical Assistance Center.

For more information on TFTP commands, see the Cisco Broadband Operating System User Guide.

Step 1 To set the session timeout rate to 300 seconds, enter:
set timeout session 300

Step 2 To set the idle timeout rate to 300 seconds, enter:
set timeout idle 300

Step 3 To verify these values, enter:
show timeout

Step 4 To save your changes, enter:
write

Step 5 To exit the CBOS, enter:
quit

• Good Password: 77ta99y (Do not use the sample password.)

• Bad Passwords: Names, personal identification numbers, birthdates, addresses, home telephone numbers.

Step 1 To change the enable user password, enter:
set password enable <new password>

Step 2 To change the exec user password, enter:
set password exec <new password>

Step 3 To save your changes, enter:
write

Step 4 To exit the CBOS, enter:
quit

write

Caution If you do not use the write command after changes, all the changes you made during your current session will be lost when you reboot the Cisco 677.

Step 1 To see a list of applications and interfaces that provide status, enter:
stats ?

Step 2 To display specific statistics, for example, for the wan0 interface, enter:
stats wan0

Step 3 To exit the CBOS, enter:
quit