Wednesday, October 22, 2008

Security Device Manager-2

SDM User Interfaces

Many screens within SDM allow you to perform different tasks, as described in the sections that follow.
Configuring Interfaces Using SDM
Starting from the home page, click Configure from the top line and then Interfaces and Connections on the category bar on the left side of the screen under the Tasks column. Here
you will be shown a screen link, as displayed in Figure 29-21.

Figure 29-21 Interfaces and Connections


To configure an interface that has not been previously configured, select the connection you
want to make and click the Create New Connection button. You are taken to a wizard screen that looks like Figure 29-22. For this example, you want to configure the other LAN interface on this router, GigabitEthernet 0/1. Choose the interface you want to configure, and then click Next.

Figure 29-22 LAN Wizard


Figure 29-23 shows the first screen of the wizard, which provides information about what the wizard will be able to accomplish. Click Next to continue to the next screen.

Figure 29-23 LAN Wizard


Figure 29-24 shows the next screen of the wizard. If you want this interface to be a gateway for a LAN, with no trunking involved, select the Configure this interface for straight routing option, and then click the Next button to continue.

Figure 29-24 LAN Wizard


In the next screen, shown in Figure 29-25, you can assign an IP address and subnet mask to the interface. Click Next to continue.

Figure 29-25 LAN Wizard: IP Address and Subnet Mask


After assigning the IP address and subnet mask, you are taken to the next screen of the wizard (shown in Figure 29-26), which asks whether you want to enable a DHCP server on this interface. The default answer is No. Click Next to continue.

Figure 29-26 LAN Wizard: DHCP Server


Figure 29-27 shows the final screen of the wizard, where you see a summary of what you have configured. If you want to test the connectivity of the interface, check the box at the bottom of the screen, Test the connectivity after configuring, and click Finish, or just click Finish to send your changes to the router for implementation.

Figure 29-27 LAN Wizard: Summary


After the configuration is sent to the router, you are taken back to the Interfaces and Connections screen. If you want to make changes to your interfaces, choose the Edit Interface/Connection tab, highlight the interface you want to edit, and click the Edit button. Here you can makes changes to the address or subnet mask; you can also associate ACL or inspection rules to the interface. NAT and quality of service (QoS) options can also be edited from here.

Configuring Routing Using SDM
Starting from the SDM home page, Figure 29-28 shows the screen that appears when you click Configure from the top line and then Routing on the category bar on the left side of the screen under the Tasks column.

Figure 29-28 Routing

Clicking the Add button in the middle of the Static Routing section allows you to create a static route, as shown in Figure 29-29. Clicking the Edit button on the right side of the Dynamic Routing section of this screen allows you to configure the dynamic routing protocols of RIP, Open Shortest Path First Protocol (OSPF), and Enhanced Interior Gateway Routing Protocol (EIGRP), as shown in Figure 29-30.
Figure 29-29 Add IP Static Route


Figure 29-30 Edit IP Dynamic Routing


SDM Monitor Mode

Figure 29-31 shows the monitor mode of the SDM. Monitor mode lets you view current information about the router, its interfaces, its firewall status, active VPN connections, and
any messages in the router event log.

Figure 29-31 SDM Monitor Mode


The following table describes how to navigate through the SDM monitor mode to accomplish some key tasks.

Task/SDM Navigation

View information about router interfaces:
From the toolbar, click Monitor Mode, and then in the left frame, click Interface Status. From the Select Interface field on the upper-left side of the Interface Status window, select the interface for which you want to view information, and then in the Available Items group, select the information you want to view.
View graphs of CPU or memory usage:
From the toolbar, click Monitor Mode, and then click the Overview page.
View information about the firewall:
From the toolbar, click Monitor Mode,and then in the left frame, click Firewall Status.
View information about VPN Connections
From the toolbar, click Monitor Mode, and then in the left frame, click VPN Status. From the Select a Category field, select whether to view information about Internet Key Exchange security associations (IKE SA), IPsec Tunnels, or Dynamic Multipoint VPN (DMVPN) Tunnels.

View messages in the router event log
From the toolbar, click Monitor Mode,and then in the left frame, click Logging.

Using SDM to Configure a Router to Act as a DHCP Server

From the home page of the SDM, click Configure, and then click Additional Tasks from the category bar on the left side under Tasks. From there, you should see the section titled DHCP on the left side of the Configure window (see Figure 29-32).

Figure 29-32 Additional Tasks: DHCP


Click DHCP Pools to bring up a screen showing you which DHCP pools have already been created. Click theAdd button to create a new DHCP pool from the screen in Figure 29-33.

Figure 29-33 Add DHCP Pool


After entering your DHCP Information, click OK. You should see a pop-up window that
shows the status of the commands being delivered to the router, as shown in Figure 29-34.

Figure 29-34 Command Delivery Status

As shown in Figure 29-35, clicking the DHCP Pool Status button will show you which IP
addresses have been leased out in this DHCP pool.

Figure 29-35 DHCP Pool Status