dardan:ccna_security:labs:0_initialize_devices
Initialize and Reload Network Devices
Initialize the Router and Reload
Step 1: Connect to the router Router> enable Step 2: Erase the startup configuration file from NVRAM Router# erase startup-config Step 3: Reload the router Router# reload Step 4: Bypass the initial configuration dialog Would you like to enter the initial configuration dialog? [yes/no]: no Step 5: Terminate the autoinstall program Would you like to terminate autoinstall? [yes]: yes Initialize the Switch and Reload Step 1: Connect to the switch Switch> enable Step 2: Determine if there have been any VLANs created Switch# show flash Step 3: Delete the VLAN file Switch# delete vlan.dat Step 4: Erase the startup configuration file Switch# erase startup-config Step 5: Reload the switch Switch# reload Step 6: Bypass the initial configuration dialog Would you like to enter the initial configuration dialog? [yes/no]: no
Java Settings on PCs
Step 1: Enable the next-generation Java Plug-in a. Open the Control Panel, and select Java to access the Java Control Panel. b. In the Java Control Panel, click the Advanced tab. c. Locate the heading “Java Plug-in”. Select the checkbox to Enable the next-generation Plug-in. a browser restart is required. d. Click Apply. e. Click Yes to allow the changes. Click OK to acknowledge the changes. Step 2: Change the Java security settings. a. Click the Security tab. b. Change the Security Level to Medium by moving the slider. c. Click Apply Step 3: Change the Java Applet Runtime settings a. Click the Java tab and then the View button to change the Java Applet Runtime Settings. b. Double-click the Runtime Parameters box. Type –Xmx256m in the box. c. Click OK. Click OK again to exit the Java Control Panel. Step 4: Restart all web browsers, including CCP if it opened, in order for the changes to take effect.
Access a Cisco Router Using a Mini-USB Console Cable
Step 1: Set up the physical connection with a mini-USB cable. a. Connect the mini-USB cable to the mini-USB console port of the router. b. Connect the other cable end to a USB port on the computer. c. Turn on the Cisco router and computer. Step 2: Verify that the USB console is ready Step 3: Enable the COM port for the Windows 7 PC a. Click the Windows Start icon to access the Control Panel b. Open the Device Manager. c. Click the Ports (COM & LPT) tree link to expand it. Right-click the USB Serial Port icon and choose Update Driver Software. d. Choose Browse my computer for driver software e. Choose Let me pick from a list of device drivers on my computer and click Next f. Choose the Cisco Serial driver and click Next g. The device driver is installed successfully. Take note of the assigned port number listed at the top of the window. In this sample, COM 5 is used for communication with the router. Click Close. h. Open Tera Term. Click the Serial radio button and choose Port COM5: Cisco Serial (COM 5). This port should now be available for communication with the router. Click OK
Download and Install the AnyConnect Client Software Packages
Step 1: Download the AnyConnect Secure Mobility Client software packages from cisco.com
a. Using a browser, connect to the www.cisco.com and log in.
b. Click Support > Security (VPN, Firewall) > AnyConnect VPN Client.
c. From the Cisco AnyConnect VPN Client screen, click Download Software
d. From the Download Software – Select a Product screen, click AnyConnect Secure Mobility Client
e. Click AnyConnect Security Mobility Client v4.x.
f. Use the scroll bar in the Download Software – AnyConnect Secure Mobility Client v4.x screen to locate the Full installation package – Windows / Head-end deployment (PKG) file. Click Download. Note: The Windows package release 4.1.00028 filename is anyconnect-win-4.1.1.00028-k9.pkg.
Step 2: Upload the AnyConnect Secure Mobility Client to the ASA 5505
a. After the anyconnect-win-4.1.00028-k9.pkg has been downloaded, connect the PC to the ASA 5505 E0/1 interface and assign it a static IP address of 192.168.1.3 with a subnet mask of 255.255.255.0 Note: This PC will also need TFTP software installed. Tftpd32.exe is used for this example.
b. Configure the ASA’s VLAN with an IP address of 192.168.1.1, a subnet mask of 255.255.255.0, and the nameif to inside.
ciscoasa(config)# int vlan 1
ciscoasa(config-if)# ip address 192.168.1.1 255.255.255.0
ciscoasa(config-if)# nameif inside
INFO: Security level for "inside" set to 100 by default.
ciscoasa(config-if)# no shut
c. Activate interface E0/0.
ciscoasa(config-if)# int e0/1
ciscoasa(config-if)# no shut
ciscoasa(config-if)# end
d. Start the Tftpd32 software and verify that the anyconnect-win-4.1.00028-k9.pkg file is located in the default directory.
e. From the CLI on the ASA, issue the copy tftp://192.168.1.1/anyconnect-win-4.1.000028-k9.pkg flash: command.
ciscoasa# copy tftp://192.168.1.3/anyconnect-win-4.1.00028-k9.pkg flash:
f. Issue the show flash command on the ASA to verify that the file has been uploaded to flash.
ciscoasa# show flash
Step 2: Upload the AnyConnect Secure Mobility Client to the ASA 5505.
a. After the anyconnect-win-4.1.00028-k9.pkg has been downloaded, connect the PC to the ASA 5505
E0/1 interface and assign it a static IP address of 192.168.1.3 with a subnet mask of 255.255.255.0.
Note: This PC will also need TFTP software installed. Tftpd32.exe is used for this example.
b. Configure the ASA’s VLAN with an IP address of 192.168.1.1, a subnet mask of 255.255.255.0,and the nameif to inside.
ciscoasa(config)# int vlan 1
ciscoasa(config-if)# ip address 192.168.1.1 255.255.255.0
ciscoasa(config-if)# nameif inside
INFO: Security level for "inside" set to 100 by default.
ciscoasa(config-if)# no shut
c. Activate interface E0/0.
ciscoasa(config-if)# int e0/1
ciscoasa(config-if)# no shut
ciscoasa(config-if)# end
d. Start the Tftpd32 software and verify that the anyconnect-win-4.1.00028-k9.pkg file is located in the default directory.
e. From the CLI on the ASA, issue the copy tftp://192.168.1.1/anyconnect-win-4.1.000028-k9.pkg flash:
command.
ciscoasa# copy tftp://192.168.1.3/anyconnect-win-4.1.00028-k9.pkg flash:
f. Issue the show flash command on the ASA to verify that the file has been uploaded to flash.
ciscoasa# show flash
dardan/ccna_security/labs/0_initialize_devices.txt · Last modified: 2018/09/09 16:03 by dardan