RTD Embedded Technologies, Inc.
|
www.rtd.com
22
IDAN-
ID5915 User’s Manual
Figure 15: Listing Commands
Figure 16: Listing Options for a Command
Configuration Basics
To view the current configuration of the router, use the
show running-config
command. To change the configuration, one must switch from
privileged EXEC mode to configuration mode. This is done with the
configure terminal
command. The command prompt will change from
Router#
to
Router(config)#
. To leave configuration mode, use the
exit
command.
In Cisco IOS, most configuration commands take effect immediately. However, the new configuration will not persist across a reboot unless it
is saved to NVRAM by running the command
copy running-config startup-config
in privileged EXEC mode. To revert changes to the
running configuration, use the command
copy startup-config running-config
.
The following screenshot demonstrates using configuration mode to change the hostname, and then saves it to NVRAM:
Figure 17: Changing the Configuration
Setting a Password
By default, the router has no passwords configured, which is a significant security issue. Configuration commands are used to set passwords.
The serial console may have a different password than network terminal(s). A separate password may be set on the
enable
command as an
additional layer of security.
By default, passwords are stored in plain text in the configuration. This weakens the security of the router as passwords can be printed to the
screen via
show running-config
, and are also visible in any configuration backups. Best practice is to use the command
service password-
encryption
to store the passwords in an encrypted format.
The following screenshot demonstrates a basic method to set passwords. In the example below, both local serial console and network
terminals have a password of MustBeChanged set, while the
enable
command is protected with the password EnableMe.