New Cisco 2911 install, have some questions...

[rasczak]

I just got a new cisco 2911 router handed to me. What are some of the first steps I should take? I've already got a putty session going into the router. Is there a step by step guide for first time setup I could follow?

 

[JackMDS]

http://www.cisco.com/en/US/docs/routers/access/2900/hardware/installation/guide/Configure.html



😎

 

[rasczak]

Awesome! Thanks Jack. If anyone else out there has some tips or tricks I would love to hear it.

 

[drebo]

Extremely vague and unfocused question. What are you trying to accomplish?

On any router, I:

1) Set hostname.
2) Set domain name.
3) Generate RSA cert
4) set up authentication (local user at the least)
5) set up vty and console to use whatever auth method I chose
6) set my timezone and timestamp settings
7) everything else.

 

[rasczak]

Thanks for the list, it is some of what I am looking for

Admittedly this is a very unfocused and vague question because my experience with these devices is limited at best to setting a static route or two, turning off rip etc.etc. This device will be serving as a gateway for three different subnets out to a bigger "internet" type of network.

as it stands the serial wan port (HWIC-1T) will be the gateway to the "internet" and the three GE ports will be the gateways for the three subnets. Aside from the interface configuration, which will probably be the easiest part, I need to do some heavy securing of the device. There is a reason for being vague if you catch my drift.

 

[Danimal1209]

For security, set up authentication (user accounts with a SECRET password instead of a normal password). You can set these up on the router itself.

Also, privilege levels if more than one user will be using the router.

Setting up logs are great too if you would like to keep track of commands issued etc.

For more info on this, research Cisco's AAA model.


Are you securing it from other peoples use? Or from attacks?