access router with octopus cable

I've come across some access / lights out routers. Usually attached to a DSL line which gets unplugged when not in use.

The router has the octal cable which connects to the console of your network devices.

You can create aliases as follows
ip host MY-NET-DEV1 2033 172.20.1.1

Now you can just type MY-NET-DEV1 to connect
CTRL + SHIFT + 6 and then X to disconnect

Somes the aliases aren't filled in and you need to figure out what is connected to which ports.

First off use clear line to clear all the tty lines.
All the ports start at 2000
When you do sh line you will see TTY lines with numbers 33, this means to connect its the access router IP and 2033
telnet 172.20.1.1 2033
Generally telnet is used because you are connecting over the octal cable

Connect to each TTY line
If you don't see a hostname you'll have to just try usernames and passwords until you get in.
If you have access to the physical location you can also trace the octal cables
Once you know which ports are connected to which devices you can create you ip host objects.

quick way to see if a port is connected

sh interface gig 1/47 status

CLI shortcuts on cisco devices

Some useful shortcuts

Shortcut	Function
CTRL-R	Reprint line, useful to recover from a trashed prompt from console messages
CTRL-A	Move cursor to beginning of line
CTRL-E	Move cursor to end of line
Esc-B	Move backwards one word
Esc-F	Move forward one word
CTRL-W	Deletes the word cursor is under
CTRL-U	Deletes the entire line
CTRL-Shift-6	Terminate operation (ping, traceroute, etc)
CTRL-Shift-6,X	Suspends Session
CTRL-Z	Exits configuration mode, returning you to privileged EXEC mode
TAB	Completes a partial command
CTRL-P	Rotate backward through command history
CTRL-N	Rotate forward through command history

http://startup-config.com/command-line-shortcuts-cisco-geek

Log off a stuck session off anyconnect

User is stuck logged in via anyconnect

vpn session-db logoff name [username]

Allow ssh access to a cisco router

Since you don't have ssh already setup you'll probably need to connect with the console cable

Stop the annoying logs interrupting you on the console
line con 0
logging sync

Setting up a host name and domain name on the router
conf t
hostname R1
ip domain name example.com

Generate your keys
conf t
crypto key generate rsa
Key length should be 1024 (Need at least 1024 for ssh version2)

Configure a username and password
username admin priv 15 secret mypassword
password mypassword will be stored in plain text
secret mypassword will be stored in md5 hash

Enable aaa
aaa new-model (make the router ask for a username and a password)

enable secret myenablepw

Turn off telnet
line vty 0 4 (on router)
line vty 0 15 (on switch)
line vty 0 4
transport input ssh

Named Access-list
*** Important to type ip in front of access-list if you are used to ASA ***
*** Don't for get to look for access lists under the vty lines ***
ip access-list extended MYACL_NAME permit tcp host s.s.s.s host d.d.d.d eq 22
int g0/0
ip access-group MYACL_NAME in

Numbered Access-list
access-list 150 permit tcp host s.s.s.s host d.d.d.d eq 22
int g0/0
ip acccess-group 150 in

Example ACL

ip access-list extended OUTSIDE_IN

    10 permit tcp host x.x.x any

    20 permit tcp host y.y.y.y any

    30 permit tcp z.z.z.z 0.0.0.15 (networks need to be added with wildcard)

    200 deny ip any any log

interface Dialer1

ip access-group OUTSIDE_in in

Adding a license on ASA

You can request and apply a demo license (lasts 30 days) while you wait for the real license to be purchased.

Email [ licensing@cisco.com ] with the model [ASA5505] and serial [ xxxxxxxxxx ] and them to send you a [SECURITY PLUS K9] demo license.

When you get your new license purchased.

Go to http://www.cisco.com/go/license

Add your pak number

Fill in the serial of the device

You will get an email from cisco with the license

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

On the deivce do
conf t
activation-key xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

Note:  For some new license settings to take effect a system reboot may be required.Software License Agreement

vtp config on cisco switch

You won't find vtp settings in sh run

You need sh vtp status on a working switch and copy settings


Set your vtp domain
password
vtp pruning