Cisco 3900 Series, 2900 Series, And 1900 Series Integrated .

PrefaceType of DocumentLinksCisco Internet OperatingSystem Software (IOS)Cisco IOS software release 15.0 is the next IOS release following the CiscoIOS 12.4(24)T release. For information about new features in Cisco IOSsoftware release 15.0, see the Cisco IOS software pages at Cisco.com.Go here to read a product bulletin that specifies the software feature setsavailable for Cisco 1900, 2900 and 3900 Series Integrated ServicesRouters in release 15.0. It also issues recommendations for Flash andDRAM memory ateral/iosswrel/ps8802/ps5460/ product bulletin c25-566278 ps10537 Products Bulletin.htmlWirelessVoiceModules Cisco IOS Command Reference for Cisco Aironet Access Points andBridges, versions 12.4(10b) JA and 12.3(8) JEC Wireless LAN Controllers Unified Wireless LAN Access Points Cisco IOS Voice Port Configuration Guide SCCP Controlled Analog (FXS) Ports with Supplementary Features inCisco IOS Gateways Cisco SRE Internal Service Modules Configuration Guide. Cisco Services Ready Engine Configuration Guide. Cisco SRE Service Modules Configuration Guide. Connecting Cisco EtherSwitch Service Modules to the Network. Cisco EtherSwitch Service Modules Feature Guide.Searching Cisco DocumentsTo search a Hyper Text Markup Language (HTML) document using a web browser, press Ctrl-F(Windows) or Cmd-F (Apple). In most browsers, the option to search whole words only, invoke casesensitivity, or search forward and backward is also available.To search a PDF document in Adobe Reader, use the basic Find toolbar (Ctrl-F) or the Full ReaderSearch window (Shift-Ctrl-F). Use the Find toolbar to find words or phrases within a specific document.Use the Full Reader Search window to search multiple PDF files simultaneously and to change casesensitivity and other options. Adobe Reader’s online help has more information about how to search PDFdocuments.Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software Configuration GuideOL-21850-01vii

PrefaceCisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software Configuration GuideviiiOL-21850-01

PA R T1Configuring the Router

Overview of the Hardware and SoftwareThe Cisco 3900 series, 2900 series, and 1900 series integrated services routers (ISRs) offer secure,wire-speed delivery of concurrent data, voice, and video services. The modular design of these routersprovides maximum flexibility, allowing you to configure your router to meet evolving needs.The routers offer features such as hardware-based virtual private network (VPN) encryptionacceleration, intrusion-protection and firewall functions, and optional integrated call processing andvoice mail. A wide variety of legacy network modules and interfaces, service modules (SMs), internalservices modules (ISMs), next-generation packet voice/data modules (PVDM3), Services PerformanceEngines (SPEs), high-density interfaces for a wide range of connectivity requirements, and sufficientperformance and slot density for future network expansion requirements and advanced applications areavailable.Power-saving hardware and software features are incorporated throughout the series. These routersprovide access to the multi-gigabit fabric, which provides a connection between switch ports withoutusing up external ports. The logical Gigabit Ethernet (GE) interface on the router connects external andinternal modules through the backplane for LAN and WAN switching. Software feature upgrades areprovided through software licensing.The following sections describe the Cisco 3900 series, 2900 series, and 1900 series ISRs: New Features in this Release, page 2 New Features by Platform, page 4 New Slots, page 4 New Slots and Ports by Platform, page 5 Common Ports, page 6 Licensing, page 6 Getting Started, page 7Americas Headquarters:Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA

Overview of the Hardware and SoftwareNew Features in this ReleaseNew Features in this ReleaseNew features in this release are described in Table 1.Table 1New FeaturesFeatureDescriptionServices PerformanceEngineSPEs1 are modular motherboards on Cisco 3900 series ISRs. The SPEhouses PVDM3 slots, system memory slots, and the ISM slot. The SPEprovides a modular approach to system upgrades. You simply slide out theSPE from the router to replace internal modules, or upgrade the SPE toimprove router performance. See Cisco 2900 series and 3900 seriesIntegrated Services Routers Hardware Installation Guide for instructions.Cryptographic EngineAcceleratorCisco 3900 series routers with either Services Performance Engine 200 orServices Performance Engine 250 have an onboard cryptographicaccelerator that is shared between SSLVPN and IPSec. By default,acceleration of SSL is disabled so IPSec performance is maximized.See the “Configuring Security Features” section on page 1 in this guidefor information about enabling the SSLVPN feature.USB ConsoleCisco 3900 series, 2900 series, and 1900 series ISRs provide an additionalmechanism for configuring the system through a USB2 serial console port.The traditional RJ-45 serial console port is also available.Power ManagementSome modules and interface cards that are inserted in new slots providehardware and software power management features described below:Advanced CapabilityCompactFlash High efficiency AC power supplies Electrical components with built-in power saving features, such asRAM select and clock gating Ability to disable unused clocks to modules and peripherals Ability to power down unused modules and put peripherals into areset state, put front panel ports and unused internal components in ashutdown or reset stateCisco 3900 series, 2900 series, and 1900 series ISRs use AdvancedCapability CF3 memory to store the system image, configuration files, andsome software data files.SFP/Gigabit Ethernet Port Cisco 2921, Cisco 2951 and Cisco 3900 Series routers have anSFP/Gigabit Ethernet port that supports copper and fiber concurrentconnections. Media can be configured for failover redundancy when thenetwork goes down. For more information, see the “Configuring BackupData Lines and Remote Management” section on page 1.Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software2

Overview of the Hardware and SoftwareNew Features in this ReleaseTable 1New Features (continued)FeatureDescriptionNew Modules andInterface CardsCisco 3900 series, 2900 series, and 1900 series ISRs introduce thefollowing new modules and interface cards, which are inserted in thefollowing new router slots: EHWIC PVDM3 ISM SMNoteSee the router’s product page at Cisco.com for a complete list ofsupported modules and interfaces.Multi-Gigabit FabricCommunicationCisco 3900 series, 2900 series, and 1900 series ISRs use a MGF4 for thenew modules and interface cards to inter-communicate on the router.Legacy modules that support Cisco HIMI5 also support MGF tointer-communicate on the router. Next generation module driversintegrate with the MGF to perform port configurations, configure packetflow, and control traffic buffering. All configurations are performed fromthe module-side, which may or may not lead to changes on the MGF. Formore information, see the “Configuring Multi-Gigabit FabricCommunication” section on page 1.Integrated ApplicationServices FeaturesCisco 3900 series, 2900 series, and 1900 series ISRs offer integratedsecurity features and voice features. See the “Configuring Security Features” section on page 1 See the “Unified Communications on Cisco Integrated ServicesRouters” section on page 11. SPE Services Performance Engine2. USB universal serial bus3. CF CompactFlash4. MGF multi-gigabit fabric5. HIMI High-Speed Intrachassis Module InterconnectCisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers SoftwareOL-21850-013

Overview of the Hardware and SoftwareNew Features by PlatformNew Features by PlatformTable 2 shows new feature support by platform.Table 2New Features in this Release by 39453945EServices Performance EngineNNNNNNYYYYCryptographic EngineAccelerationNNNNNNYUSB Serial ConsoleYYYYYYPower ManagementYYYYYNew Module and Interface CardFeaturesYYYYAdvanced CapabilityCompactFlashYYYSFP/Gigabit Ethernet PortNNMulti-Gigabit FabricCommunicationYIntegrated Application YYYYY4YYYYYYYY1. Must have Services Performance Engine 200 installed in the router.2. Must have Services Performance Engine 250 installed in the router.3. Does not support Voice application services.4. Does not support Voice application services. Includes embedded wireless access point that supports Cisco Unified Wireless Architecture.New SlotsCisco 3900 series, 2900 series, and 1900 series ISRs have introduced new slots on the chassis. The firstcolumn in Table 3 lists the new slot names. The second column lists the corresponding old slot names.Modules previously inserted in the old slots now insert in the new slots with the help of an adapter card.For instance, network modules (NMs), enhanced network modules (NMEs), and extension voicemodules (EVMs) use an adapter, or carrier card, to insert into the SM slot. See your router’s hardwareinstallation guide for adapter information.Table 3New Slot Names and Old Slot NamesNew Slot NamesOld Slot NamesEHWICHWIC,HWIC-DW, WIC, VWIC, VICISMAIM1PVDM3PVDMSMNM, NME, EVMSPE2—1. AIM is not supported in this release. See your hardware installation guide for more information.2. The SPE is available only on the Cisco 3900 series ISRs.Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software4

Overview of the Hardware and SoftwareNew Slots and Ports by PlatformNew Slots and Ports by PlatformThis section provides the type and number of the slots and ports available in the Cisco 3900 series,2900 series, and 1900 series ISRs. Cisco 3900 Series ISRs, page 5 Cisco 2900 Series ISRs, page 5 Cisco 1900 Series ISRs, page 6Cisco 3900 Series ISRsTable 4 lists the slots and ports available on Cisco 3900 series routers.To view the installation guide, see the following URL 0/hardware/installation/guide/Hardware Installation Guide.htmlTable 4RouterCisco 3945Cisco 3945ECisco 3925Cisco 3925ECisco 3900 Series 240GE (RJ-45)/SFP portsCF232SPE3114213314411. One RJ-45 GE two combo GE/SFPs.2. Four RJ-45 GE, or three RJ-45 GE one combo GE/SFP, or two RJ-45 GE two combo GE/SFP.3. One RJ-45 GE two combo GE/SFPs, or three RJ-45 GEs.4. Four RJ-45 GE, or three RJ-45 GE one combo GE/SFP, or two RJ-45 GE two combo GE/SFP.Cisco 2900 Series ISRsTable 5 lists the slots and ports available on Cisco 2900 series routers.To view the installation guide, see the following URL 0/hardware/installation/guide/Hardware Installation Guide.htmlTable 5Cisco 2900 Series RoutersRouterEHWICSMDbl-WideSMISMPVDM3CFGE (RJ-45)portsGE (RJ-45)/SFP portsCisco 295142213221Cisco 292141113221Cisco 291141112230Cisco 290140012230Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers SoftwareOL-21850-015

Overview of the Hardware and SoftwareCommon PortsCisco 1900 Series ISRsTable 6 lists the slots and ports available on Cisco 1900 series routers. To view the installation guide, see the following URL 0/hardware/installation/guide/1900 HIG.htmlTable 6Cisco 1900 Series ISR RoutersRouterEHWICSMDbl-WideSMISMPVDM3WLANCFGE (RJ-45)portsCisco 194120010022Cisco 1941W20000122Common PortsThe following ports are common among Cisco 3900 series, 2900 series, and 1900 series routers: Gigabit Ethernet RJ45—Ports available through an RJ45 connector. Gigabit Ethernet RJ45/SFP—Ports available through RJ45- SFP connectors. Connection supportsfail-over if the secondary connection goes down. RS232 Aux—Supports modem control lines and remote administration for box-to-box redundancyapplications. RS232 Serial Console—Supports modem control lines and remote administration of the router withthe proprietary cable shipped in the box. Type A USB 2.0—Supports USB-based flash memory sticks, security tokens, and USB-compliantdevices. Type B mini-port USB Serial Console—Supports modem control lines and remote administration ofthe router using a type B USB-compliant cable.LicensingCisco 3900 series, 2900 series, and 1900 series ISRs support Cisco IOS software entitlement. Your routeris shipped with the software image and the corresponding permanent licenses for the technologypackages and features that you specified preinstalled. You do not need to activate or register the softwareprior to use. If you need to upgrade or install a new technology package or feature see SoftwareActivation on Integrated Services ess/sw activation/SA on ISR.html.Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software6

Overview of the Hardware and SoftwareGetting StartedGetting StartedSee the router-specific hardware installation guide to install the router in an appropriate location.Connect the router with the appropriate cables. Supply power to the router and perform the initialsoftware configuration using Cisco Configuration Professional Express. After the initial configurationis completed, perform the following steps:Step 1Follow instructions in the “Basic Router Configuration” section on page 1 to perform additional routerconfigurations.Step 2(Optional) If you are setting up the Cisco 1941W ISR, follow instructions in the “Configuring theWireless Device” section on page 1 to configure the embedded wireless device on the router.Step 3Follow instructions in the “Configuring Security Features” section on page 1 to configure securityfeatures on the router.Step 4Follow instructions in the “Unified Communications on Cisco Integrated Services Routers” section onpage 1 to configure Voice features on the router.Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers SoftwareOL-21850-017

Overview of the Hardware and SoftwareGetting StartedCCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase,Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good,Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks;Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card,and One Million Acts of Green are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA,CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus,Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast,EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the IronPort logo, Laser Link, LightStream,Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY, PowerPanels, PowerTV,PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx logo areregistered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not implya partnership relationship between Cisco and any other company. (0910R)Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, andfigures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional andcoincidental. 2009-2010 Cisco Systems, Inc. All rights reserved.Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software8

Basic Router ConfigurationThis module provides configuration procedures for Cisco 3900 series, 2900 series, and 1900 seriesintegrated services routers (ISRs). It also includes configuration examples and verification stepswhenever possible.NoteSee Appendix A, “Cisco IOS CLI for Initial Configuration” for information on how to perform the initialconfiguration using the Cisco Internet Operating System (IOS) command line interface on Cisco 3900series, 2900 series, and 1900 series integrated services routers.Basic Configuration Default Configuration, page 2 Configuring Global Parameters, page 3Interface Configuration Interface Ports, page 5 Configuring Gigabit Ethernet Interfaces, page 6 Configuring Wireless LAN Interfaces, page 7 Configuring Interface Card and Module Interfaces, page 7 Configuring a Loopback Interface, page 7Routing Configuration Configuring Command-Line Access, page 9 Configuring Static Routes, page 11 Configuring Dynamic Routes, page 12Americas Headquarters:Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA

Basic Router ConfigurationDefault ConfigurationDefault ConfigurationWhen you boot up your Cisco router for the first time, you notice some basic configuration has alreadybeen performed. Use the show running-config command to view the initial configuration, as shown inthe following example.Router# show running-configBuilding configuration.Current configuration : 723 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Router!boot-start-markerboot-end-marker!logging message-counter syslog!no aaa new-model!no ipv6 cefip source-routeip cef!!!!multilink bundle-name authenticated!!archivelog confighidekeys!!!!!interface GigabitEthernet0/0no ip addressshutdownduplex autospeed auto!interface GigabitEthernet0/1no ip addressshutdownduplex autospeed auto!interface GigabitEthernet0/2no ip addressshutdownduplex autospeed auto!ip forward-protocol ndCisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software2

Basic Router ConfigurationConfiguring Global Parameters!no ip http server!!!!!control-plane!!line con 0line aux 0line vty 0 3login!exception data-corruption buffer truncatescheduler allocate 20000 1000endConfiguring Global ParametersTo

configuration of the router using the Cisco IOS CLI, and additional configuration procedures for the router. v Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software Configuration Guide OL-21850-01 Preface Conventions This document uses the following conventions: