Wednesday, June 10, 2009

SDM on a cisco 870

SDM (security device manager) on a cisco 870 should be fairly easy according to the cisco website:

http://www.cisco.com/en/US/products/sw/secursw/ps5318/prod_installation_guide09186a00803e4727.html#wp72503

show flash: doesn't show me any of the telltale signs of installation, so I'm moving on!

After downloading and tftp-ing a new IOS  over, I now have the following image running:

c870-advsecurityk9-mz.124-4.T4.bin

Now it's time to configure the router for SDM:

conf t
ip http server
ip http secure-server
ip http authentication local
ip http timeout-policy idle 600 life 86400 requests 10000
end

As we already created a user (sdm/sdmpass), we can leave it at that for now and get the client up and running. As I said before, I installed SDM on my laptop, not on the router as I want to preserve space there when possible.

After running the SDM launcher it launches automatically in IE... which is a pain. Disable pop-up blockers and allow activeX to run. Also, the biggest SDM GOTCHA about it was that I had to uninstall my version of Java (6u14) and reinstall an older version (http://java.sun.com/products/archive/j2se/6u7/index.html). After that, plain sailing with logging in as sdm/sdmpass.

And don't forget:

wr mem
copy running-config startup-config

No comments:

Post a Comment