Cisco IOS router 837 - configure DDNS / dynamic DNS

I have an Internet, connected to my Cisco router link. The package that I subscribed comes with a dynamic IP address. I said me, if I need remote access in the Cisco router, I need to enable the DDNS function. Is this possible on a Cisco router? I have been informed that this feature is not supported. Please help me

Hi Bro

Yes, Cisco ASA and Cisco IOS router supported DDNS. Just make sure you have the right version of IOS, which you could refer to this URL of Cisco http://www.cisco.com/en/US/docs/ios/12_3/12_3y/12_3ya8/gt_ddns.html#wp1202953.

Please refer to the config below made with dyndns.org.

hostname INT-RTR1
!
IP domain name dyndns.org
8.8.8.8 IP name-server
!
IP ddns update DynDNS method
HTTP
Add http://ramraj: [email protected] / * //nic/update?system=dyndns&hostname=&myip=>
maximum interval of 30 0 0 0
minimum interval 30 0 0 0
!
interface Dialer1
IP ddns update hostname INT - RTR1.dyndns.org
IP ddns update DynDNS
!

Note: hostname = INT - RTR1.dyndns.org was the host added/registered in the dyndns.org site.

Note: Press Ctrl + V, then just type the symbol? When to add the CLI adds http://___ above.

Note: ramraj:cisco123 is simply an example of an IDs in dyndns.org.

You can also refer to this URL for more details http://www.petri.co.il/csc_configuring_dynamic_dns_in_cisco_ios.htm

P/S: If you cela this comment is useful, please rate well :-)

Tags: Cisco Security

hash (IKE policy)

To specify the hashing algorithm in a policy of Internet Key Exchange, use the command hash policy Internet Security Association Key Management Protocol (ISAKMP) configuration mode. IKE policy define a set of parameters to use when the IKE negotiation. To reset the hash algorithm for the algorithm of hash-1 defaultsecure hash algorithm (SHA), don't use No form of this command.

hash {sha | SHA256 . SHA384 | md5}

no hash

Description of the syntax

SHA	Specifies the hash algorithm SHA-1 (HMAC variant).
SHA256	Specifies the family of SHA-2 256 bits (HMAC variant) as the hashing algorithm.
SHA384	Specifies the family of SHA-2 384 bits (HMAC variant) as the hashing algorithm.
MD5	Specifies the MD5 (HMAC variant) as the hashing algorithm.

Default values

The SHA-1 hashing algorithm

Control modes

The ISAKMP policy configuration

Order history

Release	Change
11.3 T	This command was introduced.
12.4 (4) T	IPv6 support has been added.
12.2 (33) SRA	This command was integrated into Cisco IOS version 12. (33) SRA.
12.2SX	This command is supported in the Cisco IOS release 12.2SX train. Support in a specific 12.2SX release this train is dependent on your hardware platform game and platform functionality.
Cisco IOS XE version 2.1	This command was introduced on the ASR 1000 series Cisco routers.
15.1 (2) T	This command was modified. Sha256 , sha384 , and keywords have been added.

Of course, depends a bit on your IOS.

HTH,

Ian

SSL VPN and Dynamic DNS - ddns on IOS

Hello

I am configuring a VPN SSL via SDM tunnel on a 877 router. The router gets the dynamic public IP address from the ISP, so I configured DDNS for remote access to the router. I would like to know if it is possible to configure the SSL VPN to support dynamic IP via SDM o CLI.

Concerning

Gerard

Looks like I fixed the problem using:

WebVPN gateway gateway_1

interface Dialer0 port 443 of intellectual property

SSL local trustpoint

development

However when the router restarts, it generates this error:

Incorrect ip address first configure the gateway IP address

No idea how to postpone orders for webvpn start until dialer0 Gets a dynamic IP address?

I'm losing configuration when I turned off my Cisco 857 router

I bought the new router Cisco 857 of the shop. Router must have been used before as I couln can't go inside with name of user and password default cisco/cisco.

Well I followed digital and reset the password for the user name and password. Now I have finally connected to Cisco CP express on my IE browser.

I discovered that someone was using a router in the shop that's why I countries: ' t log in to him in the first place. In any case the problem is that when I changed my configuration and applies the settings he remembers until I turned off. When I turn on again he remembers all the parameters of this shop.

He returned everything back: IP address, former account to level 15 and password - just like after the password reset.

I tried again and he again lost the settings. So I found instructions:

http://www.Cisco.com/en/us/products/HW/routers/ps233/products_tech_note09186a00800a65a5.shtml

I followed it and changed once again all the settings of the router. My settings are still lost after the power on/off. I noticed that when I do everything first bit it shows

0x2102 not 0x2142 like they think that is password reset mode.

Here is my output from Hyper Terminal:

=============================

Cisco#enable

Cisco#show start

Using 3359 out of 131072 bytes

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname Cisco

boot-start-marker

boot-end-marker

logging buffered 51200 warnings

enable secret 5 $1$hpKF$Rc1tl6r45J8iHG7EN5jSk.

no aaa new-model

crypto pki trustpoint TP-self-signed-3185909327

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3185909327

revocation-check none

rsakeypair TP-self-signed-3185909327

crypto pki certificate chain TP-self-signed-3185909327

certificate self-signed 01 nvram:IOS-Self-Sig#5.cer

dot11 syslog

no ip dhcp use vrf connected

ip dhcp excluded-address 10.10.10.1

ip dhcp pool ccp-pool

import all

network 10.10.10.0 255.255.255.248

default-router 10.10.10.1

lease 0 2

ip cef

no ip domain lookup

ip domain name molinary.com

username admin privilege 15 secret 5 $1$jD3j$r6ROikgGsIlcMTGjkxFQ6.

username username privilege 15 password 0 password

archive

log config

hidekeys

interface ATM0

no ip address

shutdown

no atm ilmi-keepalive

dsl operating-mode auto

interface ATM0.1 point-to-point

description $ES_WAN$

ip nat outside

ip virtual-reassembly

pvc 0/38

encapsulation aal5mux ppp dialer

dialer pool-member 1

interface FastEthernet0

interface FastEthernet1

interface FastEthernet2

interface FastEthernet3

interface Vlan1

description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$

ip address 10.10.10.1 255.255.255.248

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1452

interface Dialer0

ip address dhcp

encapsulation ppp

dialer pool 1

dialer-group 1

no cdp enable

ppp authentication chap pap callin

ppp chap hostname [email protected]/* */

ppp chap password 0 netgear01

ppp pap sent-username [email protected]/* */ password 0 netgear01

ip forward-protocol nd

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

ip nat inside source list 1 interface ATM0.1 overload

access-list 1 remark INSIDE_IF=Vlan1

access-list 1 remark CCP_ACL Category=2

access-list 1 permit 10.10.10.0 0.0.0.7

dialer-list 1 protocol ip permit

no cdp run

control-plane

banner exec ^C

% Password expiration warning.

-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device

and it provides the default username "cisco" for one-time use. If you have

already used the username "cisco" to login to the router and your IOS image

supports the "one-time" user option, then this username has already expired.

You will not be able to login to the router with this username after you exit

this session.

It is strongly suggested that you create a new username with a privilege level

of 15 using the following command.

username privilege 15 secret 0

Replace and with the username and password you

want to use.

-----------------------------------------------------------------------

banner login ^CAuthorized access only!

Disconnect IMMEDIATELY if you are not an authorized user!^C

line con 0

no modem enable

line aux 0

line vty 0 4

privilege level 15

transport input telnet ssh

scheduler max-task-time 5000

end

Cisco#

Cisco#show version

Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, R

ELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Compiled Fri 22-Jan-10 14:46 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

Cisco uptime is 20 minutes

System returned to ROM by power-on

System image file is "flash:c850-advsecurityk9-mz.124-15.T12.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

[email protected]/* */.

Cisco 857 (MPC8272) processor (revision 0x400) with 59392K/6144K bytes of memory

Processor board ID FCZ140792J5

MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10

4 FastEthernet interfaces

1 ATM interface

128K bytes of non-volatile configuration memory.

20480K bytes of processor board System flash (Intel Strataflash)

Configuration register is 0x2102

Cisco#

Cisco#end

Translating "end"

% Unknown command or computer name, or unable to find computer address

Cisco#reload

Proceed with reload? [confirm]

*Mar 1 01:19:27.786: %SYS-5-RELOAD: Reload requested by username on console. R

eload Reason: Reload Command.

System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

Technical Support: http://www.cisco.com/techsupport

C850 series (Board ID: 2-149) platform with 65536 Kbytes of main memory

Booting flash:/c850-advsecurityk9-mz.124-15.T12.bin

Self decompressing the image : ############################################## [O

Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

Rights clause at FAR sec. 52.227-19 and subparagraph

Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T12, R

ELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Compiled Fri 22-Jan-10 14:46 by prod_rel_team

Image text-base: 0x8002007C, data-base: 0x814E7240