I picked up one of these cheap off ebay the other day, but I am struggling to configure it!

I goggled, and managed to reset it back to what I thought were the out of the box settings (using Putty, and the rommon prompt), but when I try and bring up the web interface to configure it on IE8, it tells me I should use IE5 or 6 (as that is what is was tested for). I can however log in, and a java app loads, and then errors (handy!). i tried with Chrome and that had a similar affect apart from saying it was tested with old versions of Nutscrape.

As my main PC was running W7, I stuck on a copy of vmware workstation, and installed win xp sp3 into it, which comes with IE6. Stuck on the latest Java plugin, and connected up the router, and it just keeps prompting me for a password. The really annoy thing is that I can get it to accept a password on the non-supported browsers (the warning comes up after the password has been entered).

From the IOS side I managed to setup of DHCP, unfortunately I this is my first venture into IOS land.... Ideally I would like to have my first stab at setting it up via the wbe interface so I am less likely to leave any great holes in it.

Finally does anyone know if I can get updated f/w for it? Cisco seem to want to charge me for it.... tight @r$e b@$t@rds.

Edited 27 February, 201016 yr by mbames

The GUI on cisco routers is shte. Unsuffereably ****e, and it usually f**ks up the config good and proper, far worse than you'll do at the IOS prompt.

Good routers though- I have an 870W here. Took *ages* to get right.

Get a console cable (I can send you one if you don't have one), or telnet it and do it at a command line.

I can probably even sort out a base config for you- do a "sh ver" and post results.

What version of IOS does it have, and 837 the complete model number?

Thanks, I can serial to it, so will do an sh ver tomorrow.

I believe this is meant to support VPN endpoints, as such I am hoping to use it to replace my Vigor 2800VG which keeps dropping sync every 6 or so hours (ISP and BT claim it is not them)

837 is the model number, http://en.wikipedia.org/wiki/Cisco_837

Thanks,

Matt

sounds like the passwords are still stored on you router and you need to wipe the vty and maybe the secret password so that you can remote into the device. Are you able to get to configuration mode at all, if you can then you can change the vty passwords command is below

line vty 0 4

login

password "enter your password here"

exit

Dont forget to save the running config after, otherwise reboot and you lose all.

If not you will need to go through password recovery so you can get to config mode to change the vty password. Link below if you cannot access enable mode or higher

http://www.cisco.com/en/US/products/hw/routers/ps380/products_password_recovery09186a00800942bc.shtml

btw the web portals are **** stick to ios land its so much better.

Regards Amit

Edited 28 February, 201016 yr by amity498

http://66.102.9.132/search?q=cache:KUeJE291y7QJ:www.velocityreviews.com/forums/t172928-cisco-837-config.html+cisco+837+sample+config&cd=1&hl=en&ct=clnk&gl=uk&client=firefox-a has a couple of sample configs for an 837 , and I've got a working generic ADSL config at work that will also do the trick..

As others have said , the GUI is pants and you'll need to use a console cable to configure it properly , but if you have no experience of cisco routers it won't be all that easy to get it up and working

Sounds like I could be in for a fun ride. Still I am software engineer, and I understand the basics of networks, so hopefully this won't be the total horrible job!

Think I need to understand the various modes it has, and how to save configs, etc and I might slowly get there. After I have a basic config working, I then want to add in VPN support, which I believe this router supports....

Thanks all :-)

Well you seem to have been able get into the cli using a serial cable.

When you connect you'll have prompt ending with >

With this level of access you can't do much. Press ? and enter to see a list of commands that are available to you. You can type a command , leave a space and press ? to see the next options available to you.

If you type enable and hit enter the prompt will change to a #

In this mode you can do quite a bit more but still not change the config.

Type configure terminal , or conf t for short to get into configure mode and you'll see you now have another set of commands available to you but not everything that was available in enable mode.

Exit will get you out of config mode back to enable mode.

To save the config you can do either write mem , or copy run start.

To wipe the config , erase start , then reboot it.

Here's that basic config from an 857W that may help you.

Post the sh ver and I'll see if I can help with an IOS image.

Edited 28 February, 201016 yr by cjb

When you connect you'll have prompt ending with >

With this level of access you can't do much. Press ? and enter to see a list of commands that are available to you. You can type a command , leave a space and press ? to see the next options available to you.

Yep, I can do that

cisco_gw>

If you type enable and hit enter the prompt will change to a #

In this mode you can do quite a bit more but still not change the config.

I get prompted for a password, which when entered changed my prompt to a #

cisco_gw#

Type configure terminal , or conf t for short to get into configure mode and you'll see you now have another set of commands available to you but not everything that was available in enable mode.

Yep

cisco_gw(config)#

Exit will get you out of config mode back to enable mode.

To save the config you can do either write mem , or copy run start.

To wipe the config , erase start , then reboot it.

Tis these basic commands most things on the internet think I should know, but don't....

Here's that basic config from an 857W that may help you.

Thanks, I will have a look at that and see how much of it I can understand (will leave the glass of wine alone for the moment!)

Post the sh ver and I'll see if I can help with an IOS image.

Output from sh ver:

cisco_gw>sh ver

Cisco IOS Software, C837 Software (C837-K9O3Y6-M), Version 12.3(8)T6, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright © 1986-2004 by Cisco Systems, Inc.

Compiled Tue 28-Dec-04 20:34 by hqluong

ROM: System Bootstrap, Version 12.2(11r)YV1, RELEASE SOFTWARE (fc1)

cisco_gw uptime is 6 minutes

System returned to ROM by power-on

System image file is "flash:c837-k9o3y6-mz.123-8.T6.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

[email protected].

Cisco C837 (MPC857DSL) processor (revision 0x501) with 44237K/4915K bytes of memory.

Processor board ID FOC08503R3J (3368159725), with hardware revision 0000

CPU rev number 7

1 Ethernet interface

4 FastEthernet interfaces

1 ATM interface

128K bytes of NVRAM.

12288K bytes of processor board System flash (Read/Write)

2048K bytes of processor board Web flash (Read/Write)

Configuration register is 0x2102

cisco_gw>

Edited 28 February, 201016 yr by mbames

This is my current config as it stands (after I bu99ered about with the other day). I realise I need to stick in my ISP details, and DNS servers, etc, as I assume the router does not do DNS itself..... What I think I need to learn is how to edit bits of this and not trash the rest of the configuration....

cisco_gw#show configuration

Using 1177 out of 131072 bytes

!

version 12.3

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname cisco_gw

!

boot-start-marker

boot-end-marker

!

enable secret 5 **my_password**

!

no aaa new-model

ip subnet-zero

!

ip dhcp pool DHCPpoolLAN_0

network 192.168.100.0 255.255.255.0

dns-server 192.168.100.200

default-router 192.168.100.200

!

!

no ip domain lookup

ip ips po max-events 100

no ftp-server write-enable

!

!

!

!

!

!

!

interface Ethernet0

ip address 192.168.100.1 255.255.255.0

ip nat inside

ip virtual-reassembly

hold-queue 100 out

!

interface ATM0

no ip address

shutdown

no atm ilmi-keepalive

dsl operating-mode auto

!

interface FastEthernet1

no ip address

duplex auto

speed auto

!

interface FastEthernet2

no ip address

duplex auto

speed auto

!

interface FastEthernet3

no ip address

duplex auto

speed auto

!

interface FastEthernet4

no ip address

duplex auto

speed auto

!

ip classless

ip http server

no ip http secure-server

!

!

!

control-plane

!

!

line con 0

no modem enable

line aux 0

line vty 0 4

exec-timeout 120 0

login

length 0

!

scheduler max-task-time 5000

end

in relation to that you wanted a to login in via the portal, you need to set a vty password. no password set = access denied

use the command i posted up above( need to do when your in config mode), and after that type service enable-encryption, that way it will encrypt all passwords so you cannot read them in plain text via show con

also something i just thought of as well do you have a static ip address given to you by your ISP so that can be assigned to your ATM port. If not everything you restart your router you will need to change the ip address on that

Edited 28 February, 201016 yr by amity498

in relation to that you wanted a to login in via the portal, you need to set a vty password. no password set = access denied

use the command i posted up above( need to do when your in config mode), and after that type service enable-encryption, that way it will encrypt all passwords so you cannot read them in plain text via show con

also something i just thought of as well do you have a static ip address given to you by your ISP so that can be assigned to your ATM port. If not everything you restart your router you will need to change the ip address on that

will have a tinker on Tues (working at home). I have a static IP with my ISP. I have a secondary work ADSL line, so I won't affect %dayjob% :wonder:

Cheers,

Matt

Well I am posting in here having connected via the 837 with a pretty basic configuration.... so getting there slowly!

Next steps:

- IP reservation by MAC address

- opening up a port for uTorrent to work with

and when I am feeling brave:

- VPN

I have noticed that when it reboots, I get this a couple of errors about

%NAT: Error activating CNBAR on the interface Ethernet0

%NAT: Error activating CNBAR on the interface Dialer0

See middle of quote, the strange thing is that I don't think I have configured any cnbar stuff (what ever it actually is!):

System Bootstrap, Version 12.2(11r)YV1, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright © 2004 by cisco Systems, Inc.

C800/SOHO series (Board ID: 23-127) platform with 49152 Kbytes of main memory

program load complete, entry point: 0x80013000, size: 0x71e568

Self decompressing the image : ######################################################################################################################################### [OK]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

© of the Commercial Computer Software - Restricted

Rights clause at FAR sec. 52.227-19 and subparagraph

© (1) (ii) of the Rights in Technical Data and Computer

Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

Cisco IOS Software, C837 Software (C837-K9O3Y6-M), Version 12.3(8)T6, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright © 1986-2004 by Cisco Systems, Inc.

Compiled Tue 28-Dec-04 20:34 by hqluong

Image text-base: 0x800131E8, data-base: 0x80D9413C

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

[email protected].

Cisco C837 (MPC857DSL) processor (revision 0x501) with 44237K/4915K bytes of memory.

Processor board ID FOC08503R3J (3368159725), with hardware revision 0000

CPU rev number 7

1 Ethernet interface

4 FastEthernet interfaces

1 ATM interface

128K bytes of NVRAM.

12288K bytes of processor board System flash (Read/Write)

2048K bytes of processor board Web flash (Read/Write)

%NAT: Error activating CNBAR on the interface Ethernet0

%NAT: Error activating CNBAR on the interface Dialer0

Press RETURN to get started!

*Mar 1 00:00:06.063: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to up

*Mar 1 00:00:06.067: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to up

*Mar 1 00:00:06.067: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to up

*Mar 1 00:00:06.067: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to up

*Mar 1 00:00:07.251: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to up

*Mar 1 00:00:07.255: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to up

*Mar 1 00:00:07.255: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to up

*Mar 1 00:00:07.255: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to up

*Mar 1 00:00:13.943: %SYS-6-LOGGERSTART: Logger process started

*Mar 1 00:00:14.571: %LINK-3-UPDOWN: Interface Ethernet0, changed state to up

00:00:14: %SYS-6-CLOCKUPDATE: System clock has been updated from 00:00:14 UTC Fri Mar 1 2002 to 12:00:14 BST Fri Mar 1 2002, configured from console by console.

00:00:15: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to up

00:00:15: %LINK-3-UPDOWN: Interface ATM0, changed state to down

00:00:16: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to down

00:00:16: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to down

00:00:16: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to down

00:00:17: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to down

00:00:17: %SYS-5-CONFIG_I: Configured from memory by console

00:00:18: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up

00:00:18: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down

00:00:18: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down

00:00:18: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to down

00:00:19: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up

00:00:19: %SYS-5-RESTART: System restarted --

Cisco IOS Software, C837 Software (C837-K9O3Y6-M), Version 12.3(8)T6, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright © 1986-2004 by Cisco Systems, Inc.

Compiled Tue 28-Dec-04 20:34 by hqluong

00:00:19: %SNMP-5-COLDSTART: SNMP agent on host cisco_gw is undergoing a cold start

00:00:42: %LINK-3-UPDOWN: Interface ATM0.1, changed state to up

00:00:42: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0.1, changed state to up

00:00:43: %DIALER-6-BIND: Interface Vi2 bound to profile Di0

00:00:43: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up

00:00:44: %LINK-3-UPDOWN: Interface ATM0, changed state to up

00:00:45: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to up

00:00:45: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up

and after that I have to hit enter a few times?

I ended up basing my config on this one:

http://www.ifm.net.nz/cookbooks/827_basic_nz.html

Edited 2 March, 201016 yr by mbames

Software bug in that version of IOS , it seems.

Software bug in that version of IOS , it seems.

Arh, I won't worry too much then, thought I might have gaffed up my config!

just done a quick google and it does seem to a software bug. At least its not causing issues

This is my current config as it stands (after I bu99ered about with the other day). I realise I need to stick in my ISP details, and DNS servers, etc, as I assume the router does not do DNS itself..... What I think I need to learn is how to edit bits of this and not trash the rest of the configuration....

Some of the 800 series can do DNS but it requires a very up-to-date IOS and can still be a bit shaky IME. There's an example of how I've done it on mine here.

As far as editing the config, it's easy enogh once you get the idea. Log in and make sure you're enabled (# prompt).

configure terminal

(conf t) puts you into config mode, and any entres can be deleted by putting 'no' in front. For example,

ip http server

turns on a web server,

no ip http server

turns it off.

Regarding your IOS: You can't have the latest as you only have 12MB of flash and the latest ones need 16.

What you can have is 12.4.25b. I will PM you.

Regarding your IOS: You can't have the latest as you only have 12MB of flash and the latest ones need 16.

What you can have is 12.4.25b. I will PM you.

I had a nose and all the versions of 12.4 needed 64mb ram and 16mb flash so I helped with a 12.3 image.

I had a nose and all the versions of 12.4 needed 64mb ram and 16mb flash so I helped with a 12.3 image.

This one claims it will fit in 12MB Flash, but you're right about the RAM- I missed that, so yes, 12.3 is probably the limit.

Software Advisor.pdf

Ok, so lack of flash and ram is the issue..... is it worth be stumping up some money for some extra flash and dram too?

If so, is it standard stuff, or do I need to search for cisco flash ram?

Thanks all for your help so far :-)

Ok, so lack of flash and ram is the issue..... is it worth be stumping up some money for some extra flash and dram too?

If so, is it standard stuff, or do I need to search for cisco flash ram?

Thanks all for your help so far :-)

You would need memory for that specific router , but I wouldn't bother upgrading unless there's a bug in the version you are running that affects you , or there's a specific feature that you need in a later version of code.

For normal domestic use I doubt either will apply and it would almost certainly be cheaper to find another secondhand 837 with more memory and sell the old one than buying the bits to upgrade yours.

You would need memory for that specific router , but I wouldn't bother upgrading unless there's a bug in the version you are running that affects you , or there's a specific feature that you need in a later version of code.

For normal domestic use I doubt either will apply and it would almost certainly be cheaper to find another secondhand 837 with more memory and sell the old one than buying the bits to upgrade yours.

I'd second that unless you can find some on ebay. Mine came from work- as did the router as it was a learning experience, plus I use my Internet connection for support, so it was justified. I'll have a look for part numbers etc.

Fitting it is dead easy if you do get some- as you've upgraded IOS you've done 3/4 of the work.

DNS would be nice to have, along with dyndns autodating support - got my reminded email today. My Draytek supported dyndns (no-ip.org), although I do have another solution in place - though cPanel hosting I was able to add an alias to my static IP.

The other need I ideally need is VPN termination (if that is the correct wording) so that I can VPN back to my house when I am away....