In this video, I'd like to chat with you about some management
protocols and getting access devices.
And for this video, I ordered a couple of routers.
These are 2911s.
And up close, man, they make a lot of noise.
Anyway, I have them close so we can physically
see the for the videos.
In any event, we're going to talk
about getting access to them, to the console lines,
to the V2I lines, talk about the management protocols involved.
And then as we proceed, I'll use these devices to demonstrate
the file transfer capabilities that we have built in WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the file transfer capabilities that we have built in
to our existing iOS devices if we need to move files around.
All right.
So let's take a look at getting initial access to these devices
through the console port.
So initially, this is what I did.
I got these out of the box and I plugged them in.
And I connected to the console port, which is right over here.
And with my blue console cable.
And fortunately, they had done a write erase, erase to config.
And so I didn't have to do password recovery.
I just got right in and away I went.
So on the console port, I had a known good console connection. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So on the console port, I had a known good console connection.
In fact, let me show you real quick.
So here is putty.
And I have putty set up with a console.
Can upload that profile.
So it's using com 3 off my local computer,
9,600 bits per second, no parity, 8 databits, one
stop it.
And I had that all tested out with a known good system
before I plugged into this bad boy.
And that rules out, oh, is my console connection on my side,
on my PC side, is it working?
As far as troubleshooting, having a known good
is important to start with.
Also in other videos in this course, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Also in other videos in this course,
we've also taken a look at some troubleshooting
with console access and also through the VTYs.
I'm just going to do a quick review of a few of those.
So let me go ahead and click on Load
and we'll go ahead and click on Open.
Open that connection.
All right, so I'm currently connecting to the top device
right there.
Let's press Enter a few times.
And there we go.
So I put some basic configs on it and an IP address.
We could do a show IP interface brief.
I put an IP address on this gig 00 interface of 10.0.0.1,
and then I put an IP address over on the other one
at 10.0.0.2 so I could telnet to it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
at 10.0.0.2 so I could telnet to it.
Now originally when I tried that,
it was like, nope, nope, nope.
Not letting me in.
And so, as far as VTY access on the second device,
do a show run and do a section line.
It had transport input none as a default.
And so it wasn't allowing any access in on the VTY line.
So I modified that and I said privilege level 15, King Kong
rights, transport, input all, no matter what protocol, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
rights, transport, input all, no matter what protocol,
and no log in required.
Not very secure for a production environment, but for lab
I just wanted to get in.
But those are the kinds of things we need to think about.
Like, the console, what type of authentication is there.
We've had several videos on that.
Are they requiring AAA or local log in or a password.
If it's AAA, we need look at the method list and the default
methods just to verify how we're supposed to log in.
All right, so we've covered that previously.
So I've got access to these devices.
And I'm in the console.
If we do a show users, this shows me WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
If we do a show users, this shows me
I'm connected on logical VTY line zero.
If I take an exit, now we're back to 2911-01.
And do and do a show users.
Now it shows me I'm on the console with no authentication.
OK.
So let's talk about some of the additional options
and protocols for accessing these devices.
If we're going to connect on the VTY lines,
we have options of telnet.
Actually, telnet is such a bad idea.
So for production, we probably shouldn't allow telnet in.
Also, on the VTY lines, we can use an access list WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Also, on the VTY lines, we can use an access list
with the access class command to restrict
a source address of who may connect or try to connect.
Also, for log in, just having a password there for log in
is probably not a good idea.
We'd want to do some AAA and either a special method
list or a default method list that's
calling on a group of AAA servers,
whether it's TACACS or radius.
And then a fallback to a local user name.
So we'd also want to create a local user like Bob
or admin with an enabled secret password for it
so that we could get in later.
Also, I'd recommend doing a level 15.
And that way you have that King Kong account as a backup WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that way you have that King Kong account as a backup
to get in in case your AAA servers are not reachable.
We also took a look at doing a test AAA command with the AAA
servers just to verify that you can reach your AAA servers
and that that's working correctly.
All right.
So VTY and log in.
Again, we've covered a lot of that in previous videos.
Now, let's talk about moving files.
Updating images between devices.
Some of the popular options are TFTP to copy
an image or a file.
We can also use FTP.
Now, Cisco used to, like a decade ago, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now, Cisco used to, like a decade ago,
they used to enable us to make a router and FTP server.
I believe that's been gone for several versions of iOS.
However, we can, put an asterisk here,
we can make a router a TFTP server and then have an image
or file here and then copy it over, which is very convenient.
We can also copy files via HTTP, which, again,
we can make a router and HTTP server
and then copy from that server over to a another device.
Or you can also use a external server.
We also can copy via HTTPS, which WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We also can copy via HTTPS, which
is a little bit more problematic because you have
to get the right ciphers but that's
also a possibility if you are concerned about encrypting
your download of the file.
And another option is SCP, secure copy protocol,
which is another good one.
We can make a router an SCP server.
We can copy from that server down.
So whether you have, I'll say a real of these servers
on your networks, which is a great idea,
or you want to make an existing device,
like a router, a TFTP server, or an HTTP server, an SCP server, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
like a router, a TFTP server, or an HTTP server, an SCP server,
you can do that.
So as we proceed through these videos, what we'll do
is we'll do demonstrations of TFTP and HTTP and SCP
and I'll also show you the syntax for FTP
as well, so that you can see what the syntax looks like,
see the options involved for making it work correctly,
and then have a really big leg up
or headstart in the event of trying this on your own.
And we're going to demo these video
by video on these two 2911s that I just unboxed today.
All right. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
All right.
So I'll see you in the next video
where we'll take a look at doing a file transfer via TFTP
where we'll make one of these devices, 2911-01, a TFTP
server.
We'll have an image on this flash that we want to share.
And then we'll make this 2911-02 a TFTP client.
And we'll do a copy over TFTP from one router
over to another.
So I'll see you in the next video.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing.