Cisco 2611 loosing configuration after router restart

Hello,
I have a router at a customer that looses its configuration after a restart.
I of course made a write mem, and it looks like this has been before.
Is there anything to check (hard/soft) befoire changing the router?
thanks in advance
Pierre Barrat

Check to see the configuration register value. You can do that by issuing the command 'show version'. At the bottom of the output of the command you will see the config-register value. Under normal circumstances this value should be 0x2102. If you see something like 0x2142 it means that the router is going to ignore the start-up configuration.
If the config-register value is indeed incorrect then you need to change it to 0x2102 by:
Router# copy start run
Router# config t
Router(config)# config-register 0x2102
Router(config)# exit
Router# wr mem
Router# reload
After the reload it should come up with the right config; that is if the problem was indeed with the configuration register.

Similar Messages

Wreg54g lost connection after router restart

Hi everibody! i need your help if anybody can help me...Recently somebody helped me and installed my Wreg54g.after some time, i had to restart my router so i can connect my phone(it had to be directly to the router..so i had to restart it). after this operation, my range expander lost connection.one light blue, one red..so i pressed that button auto configuration, both lights turned blue, but still i don't have full signal on my comp.what did i do wrong, how can i fix it?
Solved!
Go to Solution.

I believe the settings on the range extender had been messed up so much that you press the AUTO Configuration button when you tried to reconnect though that is understandable. What I suggest is you make sure that the wireless internet is working okay through the router then on the WRE54G, configure the wireless settings again manually (without running the set up CD) the same with the router's. Check on the articles below to guide you in setting up the extender manually. By the way, reset first the extender before doing the reconfiguration.
Setting up the range expander without the installation CD
http://homekb.cisco.com/Cisco2/ukp.aspx?vw=1&docid=4d0870bf247a47e5b49b945a7a1ff515_Setting_up_the_R...
Additional References:
http://homekb.cisco.com/Cisco2/ukp.aspx?vw=1&docid=a3f6ea1b147844c090f7227d504ddbc1_.xml&pid=80&resp...
http://homekb.cisco.com/Cisco2/ukp.aspx?vw=1&docid=3723920ab5ec46f0a6d6a4f831e55b06_1488.xml&pid=80&...

Airport Express - yellow blinking after router restart

Hi - I have a question.
I have a DSL modem incl. WLAN router. This router/modem a) established the internet connection, and b) provides a WLAN. Also I have an Airport Express using the WLAN of the router (so AE does not establish an own/separate WLAN). Everything works fine, until the router either restarts, or has to reconnect to the internet for whatever reason. Then the AE starts blinking yellow, and I have do disconnect the AE from power. After restarting the AE, it goes immediately to green and everything is fine again ... until the next time that the router gets disconnected from the internet.
I have already tried both DHCP and static in AE config menu, and the router also assigns always the same IP address to the AE.
Any idea?
Thanks for your help!!
Chris

I just use it for streaming music from iTunes/iPhone to my amplifier.
For configuration I so far only use the available iPhone app ... and to be honest in this tool I cannot see a configuration "switch" for router or bridge. It is connected to the internet via the DSL router (e.g. firmware updates can be made), but it does not provide an own/separate WLAN. To obtain the IP address, I have used both DHCP & static mode (as I have advised the router to always assign the same IP address to the AE).
Not sure if that answers your question. If not, any hint where I can find the things you are asking for?

Server crashes after router restarts, different routers, same result!

Hello team,
I've had this problem before, and it's getting really annoying.
Every time I restart my router, my server will crash. It's almost always the case. I don't know why. It's not my router, I have tried 3 different routers. I thought maybe my RAM was faulty, that's not the case either.
Any thoughts?
p.s.
my server always assigns its own DNS address to my clients, so when the server crashes, the clients are left without internet. How can I stop this from happening?
setup: Server 2012 Essentials R2, 2 GB RAM, AMD X2 3800+ CPU.
edit: this is the dump file it generates. I just restarted my router again, and exact same scenario:
http://1drv.ms/1xooykW

Hi MetaLRasaM,
For Bug Check 0xC2, it indicates that the current thread is making a bad pool request. For more details, please
refer to following article and check if can help you.
Bug Check 0xC2: BAD_POOL_CALLER
Would you please check if any drivers need to be updated or any Windows Update need to be installed? Please
run sfc /scannow command to scan all protected system files. Any find? If perform a
clean boot, will the same crash issue still exists?
For Event ID 41, please refer to following KB and check if can help you.
Windows Kernel event ID 41 error "The system has rebooted
without cleanly shutting down first" in Windows 8.1, Windows 8, Windows Server 2012 R2, Windows Server 2012, Windows 7, or Windows Server 2008 R2
As you know, troubleshoot this kind of kernel crash issue, we need to analyze the crash dump file to narrow down the root cause of the issue. Please refer to following articles
and check if help you to analyze dump files.
Crash dump analysis using the Windows debuggers (WinDbg)
How to read the small memory dump file that is created by Windows if a crash occurs
By the way, it is not effective for us to debug the crash dump file here in the forum. If this issues is a state of emergency for you. Please contact Microsoft Customer Service
and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
To obtain the phone numbers for specific technology request, please refer to the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
If any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu

C40 codec loosing configuration after reboot

Hi,
I have a number of Cisco C40 endpoints (TC7.1.4) registered to CUCM (10.5.1).
There are some settings on the codec itself that i want to change:
QoS Diffserv
NTP Server Address
Default call rate
Screen Layout
Everytime i make these changes and the endpoint gets rebooted, they restore to the default settings once its re-provisioned with CUCM, is this the normal behavior? I understand that CUCM enforces certain settings upon provisioning but i don't see the option to change what i need on the actual device within CUCM. Also understand that i should enforce a call rate within regions but this doesn't seem to be working either.
Thanks, Simon

Take a look at the following guide, you'll need to configure the endpoints via CUCM.
Administering Endpoints Running TC72 on UCM 10.5.1
I didn't see NTP in that guide, but found an older guide where it said to do the following:
Setting a NTP Reference for the endpoints
In UCM Administration > System > NTP Reference
Configure a Phone NTP Reference for the endpoints.
*The NTP Reference must be in Unicast Mode.
*Assign to Date/Time Group, which in turn is assigned to Device Pool.
No reference to QoS though in that guide as well, but might be of interest to you just in case.

Loosing messages after application restart..?

I am relatively new to JMS and face a problem which I don't quite understand. I have an application that works with threads, and receives messages asynchroneously through message listeners.
When I run the thing the first time, everything goes fine. All the messages are received as one should expect. However, when i then run the app a second time, only half or less of the messages are received, the others seem to get "lost".
When I remove and add the queues with the j2eeadmin tool, everything works again - in the first run.
Could anybody tell me, where my mistake might be? I.e., how can I ensure that after every start the application works consistently?
I tried to close all the connections I use, but that didn't really help..
Thanks alot for your help,
Katrin.

I'm sorry to say that we did not. The problem seemed to occur at random; sometimes I could reproduce it locally and other times I could not. I opened a support case and the engineer was unable to reproduce the problem at will, so we had no choice but to close the case and leave it unresolved. There is no doubt in my mind that a problem exists somewhere, but I don't know how to prove it without being able to consistently reproduce the symptoms.
          Our focus has since shifted away from durable subscribers so we are no longer actively monitoring this issue, but every now and then I do take a look at our logs and it seems as though the problem has mysteriously resolved itself over time. I'm not sure if this has anything to do with it, but we have found that a number of problems that used to manifest themselves randomly have disappeared since we started using in-place redeployments rather than production style redeployments.
          Sorry I don't have any answers for you! If you are ever able to get to the bottom of this problem, please post your findings because I would definitely be interested in hearing them. Good luck!
          Regards,
          Sabrina

Loosing Plug in configuration after restart

I am loosing always my plug in configurations after a restart of my PC.
How can I solve this?
Jürgen

Are you saying that each time you restart Elements the files are shown missing again? This is strange, you can try Catalog Recover by selecting File->Catalog->Recover option and see if that helps.
-Smriti

I am loosing configuration when I power off my Cisco 857 router

I bought new Cisco 857 router from the shop. Router must have been used before as I couln't go in with default username/password cisco/cisco.
Well I followed instruciton and reset password to username and password. Now I finally connected to the Cisco CP express over my IE browser.
I found out that somebody was using a router from the shop so this is why I coun't log to it in the first place. Anyway problem is that when I changed configuration and applied settings it remembers it until I power it off. When I power it on again it remembers all settings from that shop.
It reverts everything back: IP address, previous level 15 account and password - everything like after password reset.
I tried it again and it again lost settings. So I found following instruction:
http://www.cisco.com/en/US/products/hw/routers/ps233/products_tech_note09186a00800a65a5.shtml
I followed it and changed again all settings on the router. My settings are again lost after power off/on. I noticed that when I do first bit it does show
0x2102 not 0x2142 like they think that is password reset mode.
Here is my output from Hyper Terminal:
=============================
Cisco#enableCisco#show startUsing 3359 out of 131072 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Cisco!boot-start-markerboot-end-marker!logging buffered 51200 warningsenable secret 5 $1$hpKF$Rc1tl6r45J8iHG7EN5jSk.!no aaa new-model!crypto pki trustpoint TP-self-signed-3185909327 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3185909327 revocation-check none rsakeypair TP-self-signed-3185909327!!crypto pki certificate chain TP-self-signed-3185909327 certificate self-signed 01 nvram:IOS-Self-Sig#5.cerdot11 syslogno ip dhcp use vrf connectedip dhcp excluded-address 10.10.10.1!ip dhcp pool ccp-pool   import all   network 10.10.10.0 255.255.255.248   default-router 10.10.10.1   lease 0 2!!ip cefno ip domain lookupip domain name molinary.com!!!username admin privilege 15 secret 5 $1$jD3j$r6ROikgGsIlcMTGjkxFQ6.username username privilege 15 password 0 password!!archive log config hidekeys!!!!!interface ATM0 no ip address shutdown no atm ilmi-keepalive dsl operating-mode auto!interface ATM0.1 point-to-point description $ES_WAN$ ip nat outside ip virtual-reassembly pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 !!interface FastEthernet0!interface FastEthernet1!interface FastEthernet2!interface FastEthernet3!interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$ ip address 10.10.10.1 255.255.255.248 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452!interface Dialer0 ip address dhcp encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap pap callin ppp chap hostname [email protected] ppp chap password 0 netgear01 ppp pap sent-username [email protected] password 0 netgear01!ip forward-protocol nd!ip http serverip http access-class 23ip http authentication localip http secure-serverip http timeout-policy idle 60 life 86400 requests 10000ip nat inside source list 1 interface ATM0.1 overload!access-list 1 remark INSIDE_IF=Vlan1access-list 1 remark CCP_ACL Category=2access-list 1 permit 10.10.10.0 0.0.0.7dialer-list 1 protocol ip permitno cdp run!control-plane!banner exec ^C% Password expiration warning.-----------------------------------------------------------------------Cisco Configuration Professional (Cisco CP) is installed on this deviceand it provides the default username "cisco" for one-time use. If you havealready used the username "cisco" to login to the router and your IOS imagesupports the "one-time" user option, then this username has already expired.You will not be able to login to the router with this username after you exitthis session.It is strongly suggested that you create a new username with a privilege levelof 15 using the following command.username <myuser> privilege 15 secret 0 <mypassword>Replace <myuser> and <mypassword> with the username and password youwant to use.-----------------------------------------------------------------------^Cbanner login ^CAuthorized access only! Disconnect IMMEDIATELY if you are not an authorized user!^C!line con 0 login local no modem enableline aux 0line vty 0 4 privilege level 15 login local transport input telnet ssh!scheduler max-task-time 5000endCisco#Cisco#Cisco#Cisco#Cisco#Cisco#Cisco#Cisco#Cisco#show versionCisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2010 by Cisco Systems, Inc.Compiled Fri 22-Jan-10 14:46 by prod_rel_teamROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARECisco uptime is 20 minutesSystem returned to ROM by power-onSystem image file is "flash:c850-advsecurityk9-mz.124-15.T12.bin"This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email [email protected] 857 (MPC8272) processor (revision 0x400) with 59392K/6144K bytes of memory.Processor board ID FCZ140792J5MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x104 FastEthernet interfaces1 ATM interface128K bytes of non-volatile configuration memory.20480K bytes of processor board System flash (Intel Strataflash)Configuration register is 0x2102Cisco#Cisco#Cisco#Cisco#endTranslating "end"% Unknown command or computer name, or unable to find computer addressCisco#reloadProceed with reload? [confirm]*Mar 1 01:19:27.786: %SYS-5-RELOAD: Reload requested by username on console. Reload Reason: Reload Command.System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARETechnical Support: http://www.cisco.com/techsupportCopyright (c) 2006 by cisco Systems, Inc.C850 series (Board ID: 2-149) platform with 65536 Kbytes of main memoryBooting flash:/c850-advsecurityk9-mz.124-15.T12.binSelf decompressing the image : ############################################## [OK]              Restricted Rights LegendUse, duplication, or disclosure by the Government issubject to restrictions as set forth in subparagraph(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52.227-19 and subparagraph(c) (1) (ii) of the Rights in Technical Data and ComputerSoftware clause at DFARS sec. 252.227-7013.           cisco Systems, Inc.           170 West Tasman Drive           San Jose, California 95134-1706Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2010 by Cisco Systems, Inc.Compiled Fri 22-Jan-10 14:46 by prod_rel_teamImage text-base: 0x8002007C, data-base: 0x814E7240This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email [email protected] 857 (MPC8272) processor (revision 0x400) with 59392K/6144K bytes of memory.Processor board ID FCZ140792J5MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x104 FastEthernet interfaces1 ATM interface128K bytes of non-volatile configuration memory.20480K bytes of processor board System flash (Intel Strataflash)no ip dhcp use vrf connected               ^% Invalid input detected at '^' marker.SETUP: new interface NVI0 placed in "shutdown" statePress RETURN to get started!*Mar 1 00:00:03.952: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized*Mar 1 00:00:03.960: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled*Mar 1 00:00:07.244: %LINK-3-UPDOWN: Interface FastEthernet0, changed state toup*Mar 1 00:00:08.413: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up*Mar 1 00:00:08.821: %SYS-5-CONFIG_I: Configured from memory by console*Mar 1 01:19:27.072: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up*Mar 1 01:19:27.352: %SYS-5-RESTART: System restarted --Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2010 by Cisco Systems, Inc.Compiled Fri 22-Jan-10 14:46 by prod_rel_team*Mar 1 01:19:27.352: %SNMP-5-COLDSTART: SNMP agent on host Cisco is undergoinga cold start*Mar 1 01:19:27.436: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF*Mar 1 01:19:27.436: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF*Mar 1 01:19:27.540: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to down*Mar 1 01:19:28.072: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up*Mar 1 01:19:28.484: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up*Mar 1 01:19:28.484: %LINK-5-CHANGED: Interface ATM0, changed state to administratively down*Mar 1 01:19:28.848: %LINK-5-CHANGED: Interface NVI0, changed state to administratively down*Mar 1 01:19:28.932: %LINK-3-UPDOWN: Interface FastEthernet3, changed state toup*Mar 1 01:19:28.936: %LINK-3-UPDOWN: Interface FastEthernet2, changed state toup*Mar 1 01:19:28.940: %LINK-3-UPDOWN: Interface FastEthernet1, changed state toup*Mar 1 01:19:29.484: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to down*Mar 1 01:19:29.932: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down*Mar 1 01:19:29.936: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down*Mar 1 01:19:29.940: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to down*Mar 1 01:19:29.948: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to upAuthorized access only!===========================================
Please help me as I am stuck and can't go any further....

Hi David White,
Alternatively, after password recovery you can modify the configuration to be what you want, and then issue:
   write memory
to save the configuration. You can then verify that your changes have been saved to the startup config by issuing:
   show startup-config"
The only good thing is that when I switch off a router it erase configuration except my new password which I created after password reset. Everything else is getting vanished (ADSL settings, DHCP, routing ) everything. Even new admin accounts I created.
Well have a question to your above comments. I am new in Cisco so please put as much detail as you can for me to understand. When you say modify configuration do you mean to go to Cisco CP Express graphical interface and then connect router to hyper terminal and execute above commands?
Why router doesn't remember this anyway. There must be some option to change in configuration to make thing permanent when I hit apply changes in Cisco CO Express otherwise it is pointless to heve it.
Phillip
write memory
is
copy running-config startup-config"
Can't this be done via Cisco CP Express or set up router to copy this every time I change this in graphical interface rather going to command line to achnoledge it?
I understand your concern about this router and somebodie's configuration details as you want things to be un-used when you buy them - true. ADSL details belongs to the shop which sold me the router so that is why I don't make a big problem about this. We take most of hardware from this shop and have discount and many good deals with them so I think they have been just testing it and forgot to erease their config. It might be that someone has returned router to the shop and they have repaired it and tested it.
I hope this is a normal behaviour of this router as I have option to replace it in case this is a fault.
Could you please write me step by step guide how can I make changed options stay permanently on router?
thank you
Dragan

Cisco 871w router restarts after wireless is on-line for a few min's

after I do a no shut on interface dot11radio0....I can access the internet for a few min's on the wireless (all seems good then the wireless is gone). NO LED's on the wireless.
Im stumped?????????~!@#$%
Building configuration...
Current configuration : 6208 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname h-rtr1
boot-start-marker
boot-end-marker
logging message-counter syslog
logging buffered 51200 warnings
no aaa new-model
crypto pki trustpoint TP-self-signed-4293597064
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4293597064
revocation-check none
rsakeypair TP-self-signed-4293597064
crypto pki certificate chain TP-self-signed-4293597064
certificate self-signed 01
30820256 308201BF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34323933 35393730 3634301E 170D3032 30333031 30303230
34325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 32393335
39373036 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CA60 A338B36F 36E6BAE3 3D04573B 213F8A48 BA1122EF 20B2E709 98282CFE
1C09EFF0 F5711335 ACD7CEE4 45B944B4 98184585 EFDE2720 08CC1241 8FBDF30F
CC24A771 A891F7B3 FCE6F7F3 D501EEB9 0BC610DA 9E1BC097 21F333F4 D5017EFA
48AD5689 32B83AF5 71E1C7DF 93F8422E 498FDE45 47802224 CF5EFA46 0076C01C
92270203 010001A3 7E307C30 0F060355 1D130101 FF040530 030101FF 30290603
551D1104 22302082 1E682D72 7472312E 74697074 6F6E686F 6D652E73 75726577
6573742E 6E657430 1F060355 1D230418 30168014 58CA99E6 6AB406A0 3ECBA2EF
6782A127 4F82E118 301D0603 551D0E04 16041458 CA99E66A B406A03E CBA2EF67
82A1274F 82E11830 0D06092A 864886F7 0D010104 05000381 81004B06 4AFA8147
56B2BFCC E027950A C8A0A265 D05A0370 831D1065 9A08088D 766ED837 B920ADE7
A9653CCD 1B70B9F3 B49EC3B6 CEF35D89 743C01C3 BADDF33D C21ECD6E A1B2EF4E
E1152131 27E327F2 9222E8B1 70008183 3975AEB5 851DFB6D 47E03830 7763E905
EB49A5D8 1C943E41 8F3AC8C8 95FA1D3F A1E5C142 D96F91E6 0AEB
        quit
no dot11 syslog
dot11 vlan-name wland vlan 5
dot11 ssid wland
vlan 5
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 055A545C7519185E415C47
ip source-route
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.1.1
ip dhcp pool sdm-pool
   import all
   network 10.10.10.0 255.255.255.248
   default-router 10.10.10.1
   lease 0 2
ip dhcp pool wland
   import all
   network 192.168.0.0 255.255.0.0
   default-router 192.168.1.1
ip cef
no ip domain lookup
ip domain name xxxxxx.xxxxxxxxx.net
no ipv6 cef
multilink bundle-name authenticated
username xxxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxx
archive
log config
hidekeys
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
no ip dhcp client request tftp-server-address
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
interface Dot11Radio0
no ip address
shutdown
encryption vlan 5 mode ciphers tkip
encryption mode ciphers tkip
ssid wland
speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2412
station-role root
no cdp enable
interface Dot11Radio0.5
encapsulation dot1Q 5 native
ip address 192.168.1.1 255.255.0.0
ip nat inside
ip virtual-reassembly
no cdp enable
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
interface Vlan5
description wireless-lan
no ip address
ip nat inside
ip virtual-reassembly
no autostate
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list validnat-comm interface FastEthernet4 overload
ip access-list extended validnat-comm
permit ip 10.10.10.0 0.0.0.7 any
permit tcp 10.10.10.0 0.0.0.7 any
permit udp 10.10.10.0 0.0.0.7 any
permit icmp 10.10.10.0 0.0.0.7 any
permit ip 192.168.0.0 0.0.255.255 any
permit tcp 192.168.0.0 0.0.255.255 any
permit udp 192.168.0.0 0.0.255.255 any
permit icmp 192.168.0.0 0.0.255.255 any
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 192.168.0.0 0.0.255.255
no cdp run
control-plane
banner exec ^C
% Password expiration warning.
Cisco Router and Security Device Manager (SDM) is installed on this device and
it provides the default username "cisco" for one-time use. If you have already
used the username "cisco" to login to the router and your IOS image supports the
"one-time" user option, then this username has already expired. You will not be
able to login to the router with this username after you exit this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you want to
use.
^C
banner login ^C
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege level of 15.
Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to use.
For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
^C
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
scheduler max-task-time 5000
end

Its working now!..the only dif is vlan 1 has an ip add an is nat enabled with fast0 the only port in vlan 1...however its my understanding vlan 1 should be disabled and all unused ports moved to a different vlan and shutdown per cisco security here the new config
no dot11 syslog
dot11 ssid wireless
authentication open
authentication key-management wpa
wpa-psk ascii 0 xxxxxxxxxxxxxxxxxxxx
no ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.88.88.1
ip dhcp excluded-address 10.98.98.1
ip dhcp pool sdm-pool
   import all
   network 10.10.10.0 255.255.255.248
   default-router 10.10.10.1
   lease 0 2
ip dhcp pool wired-pool
   import all
   network 10.88.88.0 255.255.255.248
   default-router 10.88.88.1
ip dhcp pool wireless-pool
   import all
   network 10.98.98.0 255.255.255.248
   default-router 10.98.98.1
no ip cef
no ip domain lookup
ip domain name fenceline.surewest.net
no ipv6 cef
multilink bundle-name authenticated
username xxxxxxxxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxxxxxx
archive
log config
  hidekeys
interface FastEthernet0
interface FastEthernet1
switchport access vlan 88
spanning-tree portfast
interface FastEthernet2
switchport access vlan 88
spanning-tree portfast
interface FastEthernet3
switchport access vlan 88
spanning-tree portfast
interface FastEthernet4
no ip dhcp client request tftp-server-address
ip address dhcp
ip access-group nospoofed-ip in
ip access-group noNetBios-names out
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
interface Dot11Radio0
ip address 10.98.98.1 255.255.255.248
ip nat inside
ip virtual-reassembly
encryption mode ciphers tkip
ssid wireless
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
interface Vlan88
description wired-lan
ip address 10.88.88.1 255.255.255.248
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 23 interface FastEthernet4 overload
ip access-list extended noNetBios-names
deny   tcp any any eq 137
deny   udp any any eq netbios-ns
permit tcp any any
permit udp any any
ip access-list extended nospoofed-ip
deny   ip 10.88.88.0 0.0.0.7 any log
deny   ip 10.98.98.0 0.0.0.7 any log
deny   ip 127.0.0.0 0.255.255.255 any log
deny   ip 224.0.0.0 15.255.255.255 any log
deny   ip host 255.255.255.255 any log
deny   ip 10.10.10.0 0.0.0.7 any log
deny   ip 192.168.0.0 0.0.255.255 any log
deny   ip 10.0.0.0 0.255.255.255 any log
deny   ip 169.254.0.0 0.0.255.255 any log
deny   ip 172.16.0.0 0.0.15.255 any log
permit ip any any
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 10.88.88.0 0.0.0.7
access-list 23 permit 10.98.98.0 0.0.0.7
no cdp run
control-plane
banner exec ^C
% Password expiration warning.

Unable to connect after modem and router restart

Hi Everybody
Some times i don't get any internet connection from my cable modem (Motorola 5100 surfboard). In such cases, Time Warner cable recommends restarting the modem. I am connected to the internet in the following sequence:
Cable Modem --> Router --> PC
The way it should work:
Switch off the router
Switch off the cable modem
Restart the cable modem (all the lights should be on)
Restart the router
Connected to the Internet!
However, things don't work this way. If I connect the PC to the cable modem directly after the modem restart, I am able to get online
If I try to connect with the router in the middle, I get no connection. Usually, I have to follow this sequence (instead of the one above):
Switch off the cable modem
Re-set the Linksys router (loose all my settings)
Switch off the router
Restart the cable modem (all the lights should be on)
Restart the router
Connected to the Internet!
Re-configure the router manually to get back my previous settings
Need your help to figure out why a simple re-start of the modem and router (in that sequence) doesn't work and I have to re-set the router to get on-line
One more thing - I backed up my router configuration (Administration --> Config Management --> Backup) and after getting online, restored it. Thought It would work, but no luck. Couldn't connect via the router. Had to follow the above sequence (again) to get online and then manually had to re-configure all router settings
Rourter - WRT54G. Version 2
Firmware version - v4.21.1
Any help is greatly appreciated. Thanks

Step should be :
1) Shutdown the computer.
2) Unplug the Broadband modem’s power cable and wait for 30 seconds.
3) Unplug the router’s power cable and wait for 30 seconds.
4) Plug in the Broadband modem’s power cable and wait for its lights to appear stable.
5) Plug in the router's power cable once the modem’s lights appear stable.
6) Power on the computer on and test the Internet connection.

RADIUS and Cisco 2611 router

Greetings. First, let me start by saying I am an idiot, I know I am an idiot, and I apologize for wasting everyone's time. I have actually RTFM, many RTFMs, in fact, and I still have not found a resolution.
Second, I am trying to set up a RADIUS server in my test network. I have installed ClearBox RADIUS on a Windows 2000 system. I have the following configuration on my Cisco 2611 router:
Using 2297 out of 29688 bytes
! Last configuration change at 17:20:27 PDT Tue May 20 2008
! NVRAM config last updated at 17:20:29 PDT Tue May 20 2008
version 12.1
no service single-slot-reload-enable
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
hostname Tester
logging buffered 10000 debugging
aaa new-model
aaa group server radius RadiusServers
server 172.26.0.2 auth-port 1812 acct-port 1813
aaa authentication login default group RadiusServers local
aaa authentication login localauth local
aaa authentication ppp default if-needed group radius local
aaa authorization exec default group radius local
aaa authorization network default group radius local
aaa accounting delay-start
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
aaa processes 6
enable secret xxx
username test password xxx
clock timezone PST -8
clock summer-time PDT recurring
ip subnet-zero
no ip domain-lookup
no ip bootp server
interface Loopback0
ip address 192.168.0.1 255.255.255.0
interface Ethernet0/0
description To Main Network
ip address X.X.X.X 255.255.255.128
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
full-duplex
no cdp enable
interface Ethernet0/1
description To Internal Network
ip address 172.26.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
load-interval 30
full-duplex
no cdp enable
ip nat pool test X.X.X.X X.X.X.X netmask 255.255.255.128
ip nat inside source list 3 pool test overload
ip nat inside destination list 3 pool test
ip classless
ip route 0.0.0.0 0.0.0.0 X.X.X.X
no ip http server
ip radius source-interface Ethernet0/1
access-list 3 permit 172.26.0.0 0.0.0.255
no cdp run
snmp-server community public RO 15
radius-server host 172.26.0.2 auth-port 1812 acct-port 1813 key secret
radius-server retransmit 3
radius-server key secret
line con 0
password xxx
logging synchronous
line aux 0
line vty 0 4
access-class 10 in
password 7 1234567890
logging synchronous
ntp clock-period 17208108
ntp server 192.43.244.18
end
My RADIUS server is up and responding to requests, but my router does not appear to be forwarding authentication requests to it. In fact, when I log into the router using HyperTerm, it times out, and I end up authenticating locally.
I really don't care whether my Cisco equipment authenticates against the RADIUS server, but I do need to get it set up to authenticate my users so I can track their time online. What have I missed in my router configuration? Why isn't it forwarding user authentication requests to the RADIUS server.
Thank you for any assistance you may be able to provide.

I have found that if I am in the middle of composing a response, and I open the thread in another browser window (to refer to it), when I go to submit my response, it doesn't get posted. Perhaps you are running into the same thing.
The command I shared:
aaa authentication enable default group radius local
... was erroneous. The keyword should have been "enable", as you have discovered.
Therefore use:
aaa authentication enable default group radius enable
When I view a Wireshark trace I see the following:
AVP: l=18 t=User-Password(2): Decrypted: "user-PWD\000\000\000\000\000\000\000\000"
Like you, I see the user password appended with the group of \000 grouping's.
Note the word "Decrypted" which confirms that the password entered in Wireshark is a match with that entered on the AAA client (for what that's worth).
I'm not sure if I suggested that this would confirm that the server and client were using the same shared secret. If I did, I miss-spoke. I think we would have to gauge the server's response to the attributes we see passed by the client.
The Wireshark decryption is much more dramatic with TACACS+ because the whole payload is encrypted.
My issue with your PPPoE is that I saw no "interface" on the router that is configured to perform such authentication. I do seem to recall a global authentication command with the PPP keyword perhaps. I have not attempted to do this, and am not sure whether the interfaces in your router will support this method. Perhaps someone else will weigh in with an opinion.
However, there are other mainstream authentication methods that I think you should investigate as well.
You could implement 802.1x on a switch so that a host has to authenticate before it can gain Layer 3 access to the LAN. Depending on the platform, you can download VLAN assignments and ACLs.
I believe the router also supports 802.1x, but that may determine whether a host can get "through" the router. I have not had cause to investigate 802.1x on the router. I may do so in the future to authorize access to IPsec tunnels.
The router is also likely to support Authentication Proxy. This feature intercepts a user's attempt to browse resources on the other side of the router. User specific ACLs can be downloaded to the router (from RADIUS) to control what resources a user can access.
I think you should:
1. Resolve the issue(s) with AAA logins on the router. It'll establish a baseline of functionality, and give you some short term joy.
2. Investigate whether PPPoE support exists on your router's interfaces.
3. Read up on 802.x and Authentication Proxy (docs on Cisco web site).
4. Decide which methods appeals to you.
5. Dive in.
I'd lose the self-deprecation. I don't think it will serve you well. If you're treated badly, move to a newsgroup where the participants display a higher level of emotional maturity. I don't think you will have an issue on the Cisco forums. Others would probably step in.
I'm going to be absent for several days, so if you don't receive any response, it will be for said reason.
Good luck.

Server looses Debug mode after a restart

Hello,
At the NWDS there is an option to enable the Server debug mode. When I do that the server restarts and debug mode is on. The problem is that if I restart the server again it looses the debug mode and than I have to enable it again from the NWDS (Which, again, requires a restart). The same symptom is happen if I do the enable through the Config tool at the Debug tab.
Any idea why this happen?
Roy

Hey Shubhadip,
I think you misunderstood my problem: I did save it, otherwise how the debig mode will be on. The problem is that after ANOTHER restart (after the restart to enable the debug mode) it loses the debug mode again.
Roy

Configuring Cisco 881 ISR (Integrated Services Router)

Hi
Can anyone advise whether this router internal IP is fixed at 10.10.10.0 network?
I am asking is bcoz.
1. When configuring the router using CCP 2.4 or 2.5, I am able to access the configuration via 10.10.10.x network.
However, when I changed the router IP to 192.168.1.x network, CCP is unable to detect the router.
2. By the way, CCP 2.5 has bugs right?
Is this fixed, or can anyone advice me how to workaround it?
Thanks a million.
alvyn

Hi Alain
I am only using CCP.
Scenario 1:
By Default, the 881 IP is 10.10.10.1.
When I configured my PC IP to 10.10.10.5, I am able to ping to 10.10.10.1, but when in CCP I am unable to discover anything.
It is only when I changed my PC IP to 10.10.10.2 then in CCP the router is discovered.
Scenario 2:
After sucessfully discovered the router, I changed the router IP to 192.168.1.1/24. Thereafter I changed my PC IP to 192.168.1.10 Subnet 255.255.255.0.
I am able to ping to the router @ 192.168.1.1. However I am unable to discover it in CCP.
Alvyn

Configure VPN access on a Cisco WRV210 wireless-G vpn router -range booster

Please help....
I need to configure a vpn on a Cisco WRV210 Wireless-G VPN Router - RangeBooster, i have five users that are going to connect to a file server. windows and Mac laptops will be connecting. The file server access is all set i just need a step by step document to configure the vpn screens on the router.thanks

Hi Robert
You can refer the below link in finding out the exact config to start with.
do make sure that your Cisco 831 box with the current IOS code installed in it supports the required feature to run the same..
http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html#anchor16
regds

E3000 FTP access question/using Cisco connect after router setup

I have two questions about my E3000 router.
1. If I have already set up my router using the default web address, if I use the Cisco connect software, do I gain any benefit or am I opening up a can of worms? I would like to change my server name and default admin user name stuff, but I don't want to screw with any settings I have. I will be updating my firmware in a day or so, so should I use the software then, or just go about it the way I have already?
2. I have enables FTP access for my USB drive, but I am unsure how to access it from a remote computer. I know using ftp://xxx.xxx.x.x gets me to my Index while connected to my network, but how do I access this off my network? I want to give our parents and family access to pictures, but I''m not sure of the exact address to use. I have looked in the set-up manual, and searched Google and this site, and have found nothing.
Thank you in advance for your help!
Dan

If you have configured your Router using the Cisco Connect software, then you it secure your wireless network with an password. If you have any firewall and antivurs software on your router then it will protect your computers against worms.
To use the FTP feature of your router you need to enable ftp login on your router, which you will find under the storage tab of your router.

Cisco 2611 loosing configuration after router restart

Similar Messages

Maybe you are looking for