Les adresses IP ne peuvent pas être configurées sur des liaisons L2.

Romain2525 Posted messages 18 Status Member -  
Romain2525 Posted messages 18 Status Member -
Hello,

I have a Cisco 878 router that I can't configure. It was given to me formatted, so there's nothing on it.

Here's the problem I have when I try to configure a network interface.

Router(config)#interface FastEthernet 1

Router(config-if)#ip address 192.168.1.1 255.255.255.0

% IP addresses may not be configured on L2 links.

I was told to go through the VLAN.

The problem is that to do this, I need to add VLANs to the database.

However, the database can only have a maximum of one VLAN.

And when I try to add a VLAN to the database, here's what I get:

http://image.noelshack.com/fichiers/2014/16/1397828607-sans-titre6.jpg

And here is the final configuration I have on the interfaces:

http://image.noelshack.com/fichiers/2014/16/1397828607-sans-titre8.jpg

http://image.noelshack.com/fichiers/2014/16/1397828607-sans-titre5.jpg

And I still cannot configure my Ethernet network cards 0, 1, 2, or 3. I always get the same message: IP addresses may not be configured on L2 links.

I tried setting it up through a graphical configuration using a web browser, but at a certain point, no matter how much I click next, nothing happens. No error messages, no crashes, just clicking into void.

I opened another topic with a lot of screenshots at this address:
https://openclassrooms.com/forum/sujet/probleme-routeur-cisco-configurer-une-carte-reseau

Thank you in advance to anyone who can help me.

Best regards.

Configuration: Windows 7 / Chrome 34.0.1847.131

3 answers

  1. phil2k Posted messages 10841 Registration date   Status Contributor Last intervention   2 339
     
    Hello

    On this range of routers, you cannot directly configure an address on a fastethernet port.
    In fact, the FA0-FA03 ports are like a switch.

    You need to create VLANs, assign an address to the VLAN, and assign the port to the VLAN.

    See examples here

    --
    "To fix something that doesn't work or makes too much noise, you just need to hit it with something that works better or makes more noise." Les Shadoks
    4
    1. Romain2525 Posted messages 18 Status Member 1
       
      Thank you for your response. I already tried going through VLANs but without results. In fact, I can only have one VLAN in my database (that's what the router tells me). Take a look at this topic I created. It has all the screenshots that show what it looks like.

      https://openclassrooms.com/forum/sujet/probleme-routeur-cisco-configurer-une-carte-reseau


      router2#
      router2#sh
      router2#show ip
      router2#show ip inter
      router2#show ip interface brief
      Interface IP-Address OK? Method Status Protocol
      FastEthernet0 unassigned YES unset up down
      FastEthernet1 unassigned YES unset up down
      FastEthernet2 unassigned YES unset up down
      FastEthernet3 unassigned YES unset up down
      BRI0 unassigned YES NVRAM administratively down down
      BRI0:1 unassigned YES unset administratively down down
      BRI0:2 unassigned YES unset administratively down down
      Vlan1 10.10.10.2 YES NVRAM up down
      router2#conf t
      router2#conf terminal
      Enter configuration commands, one per line. End with CNTL/Z.
      router2(config)#inter
      router2(config)#interface fa
      router2(config)#interface fastEthernet 0
      router2(config-if)#ip
      router2(config-if)#ip add
      router2(config-if)#ip address 192.168.1.1 255.255.255.0

      % IP addresses may not be configured on L2 links.

      router2(config-if)#exit
      router2(config)#vlan 2
      ^
      % Invalid input detected at '^' marker.

      router2(config)#exit
      router2#vla
      *Mar 1 00:15:42.243: %SYS-5-CONFIG_I: Configured from console by cisco on console
      router2#vlan dat
      router2#vlan database
      router2(vlan)#vlan
      router2(vlan)#vlan 2
      Vlan cannot be added. Maximum number of 1 vlan(s) in the database.

      router2(vlan)#exit
      APPLY completed.
      Exiting....
      router2#conf t
      Enter configuration commands, one per line. End with CNTL/Z.
      router2(config)#conf t
      router2(config)#conf t
      ^
      % Invalid input detected at '^' marker.

      router2(config)#inter
      router2(config)#interface fa
      router2(config)#interface fastEthernet 0
      router2(config-if)#sw
      router2(config-if)#switchport acce
      router2(config-if)#switchport access vlan
      router2(config-if)#switchport access vlan 1
      router2(config-if)#exit
      router2(config)#exit
      router2#
      *Mar 1 00:16:17.155: %SYS-5-CONFIG_I: Configured from console by cisco on console
      router2#show ip
      router2#show ip inter
      router2#show ip interface breif
      router2#show ip interface brief
      Interface IP-Address OK? Method Status Protocol
      FastEthernet0 unassigned YES unset up down
      FastEthernet1 unassigned YES unset up down
      FastEthernet2 unassigned YES unset up down
      FastEthernet3 unassigned YES unset up down
      BRI0 unassigned YES NVRAM administratively down down
      BRI0:1 unassigned YES unset administratively down down
      BRI0:2 unassigned YES unset administratively down down
      Vlan1 10.10.10.2 YES NVRAM up down
      router2#trololo
      1
  2. phil2k Posted messages 10841 Registration date   Status Contributor Last intervention   2 339
     
    What IOS is used?

    Advanced IP Services is required to support multiple VLANs.
    Advanced Security does not support them...

    --
    "To fix something that isn't working or is too noisy, you just need to hit it with something that works better or makes more noise" The Shadoks
    0
  3. Romain2525 Posted messages 18 Status Member 1
     
    How can I find out? It's a Cisco 878.

    When I run a show configuration, I get this (I don't know if it helps you):

    router2#show configuration
    Using 3060 out of 131072 bytes
    !
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    !
    hostname router2
    !
    boot-start-marker
    boot-end-marker
    !
    logging buffered 51200 warnings
    !
    no aaa new-model
    !
    resource policy
    !
    ip subnet-zero
    ip cef
    no ip dhcp use vrf connected
    ip dhcp excluded-address 10.10.10.1
    !
    ip dhcp pool sdm-pool
    import all
    network 10.10.10.0 255.255.255.248
    default-router 10.10.10.1
    lease 0 2
    !
    !
    no ip domain lookup
    ip domain name yourdomain.com
    !
    !
    crypto pki trustpoint TP-self-signed-319006384
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-319006384
    revocation-check none
    rsakeypair TP-self-signed-319006384
    !
    !
    crypto pki certificate chain TP-self-signed-319006384
    certificate self-signed 01 nvram:IOS-Self-Sig#3401.cer
    username cisco privilege 15 secret 5 $1$HyHw$/olHc8OFKMAm4IK8PPXZC/
    !
    !
    controller DSL 0
    line-term cpe
    !
    !
    crypto isakmp policy 100
    encr aes
    group 2
    crypto isakmp key VpnK3! address 10.10.10.1
    !
    !
    crypto ipsec transform-set IPSECSET esp-aes esp-sha-hmac
    !
    crypto map IPSECMAP 100 ipsec-isakmp
    set peer 10.10.10.1
    set transform-set IPSECSET
    match address CRYPTOACL
    !
    !
    !
    interface BRI0
    no ip address
    encapsulation hdlc
    shutdown
    !
    interface FastEthernet0
    !
    interface FastEthernet1
    !
    interface FastEthernet2
    !
    interface FastEthernet3
    !
    interface Vlan1
    description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
    ip address 10.10.10.2 255.0.0.0
    ip access-group IPSECACL out
    ip tcp adjust-mss 1452
    crypto map IPSECMAP
    !
    ip classless
    !
    ip http server
    ip http access-class 23
    ip http authentication local
    ip http secure-server
    ip http timeout-policy idle 60 life 86400 requests 10000
    !
    ip access-list extended CRYPTOACL
    permit ip 10.10.10.0 0.0.0.255 10.10.10.0 0.0.0.255
    ip access-list extended IPSECACL
    permit ahp host 10.10.10.2 host 10.10.10.1
    permit esp host 10.10.10.2 host 10.10.10.1
    permit udp host 10.10.10.2 host 10.10.10.1 eq isakmp
    !
    access-list 23 permit 10.10.10.0 0.0.0.7
    no cdp run
    !
    control-plane
    !
    banner login ^C
    -----------------------------------------------------------------------
    Cisco Router and Security Device Manager (SDM) is installed on this device.
    This feature requires the one-time use of the username "cisco"
    with the password "cisco". The default username and password have a privilege level of 15.

    Please change these publicly known initial credentials using SDM or the IOS CLI.
    Here are the Cisco IOS commands.

    username <myuser> privilege 15 secret 0 <mypassword>
    no username cisco

    Replace <myuser> and <mypassword> with the username and password you want to use.

    For more information about SDM please follow the instructions in the QUICK START
    GUIDE for your router or go to https://www.cisco.com/c/en/us/products/cloud-systems-management/managed-services-accelerator/index.html
    -----------------------------------------------------------------------
    ^C
    !
    line con 0
    login local
    no modem enable
    speed 115200
    line aux 0
    line vty 0 4
    access-class 23 in
    privilege level 15
    login local
    transport input telnet ssh
    !
    scheduler max-task-time 5000
    end
    0
    1. phil2k Posted messages 10841 Registration date   Status Contributor Last intervention   2 339
       
      it's a show ver that needs to be done
      0
    2. Romain2525 Posted messages 18 Status Member 1
       
      Yes, I just found it by myself ;) . Here it is:

      router2#sh ver
      Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(4)T7, RELEASE SOFTWARE (fc1)
      Technical Support: https://www.cisco.com/c/en/us/support/index.html
      Copyright (c) 1986-2006 by Cisco Systems, Inc.
      Compiled Wed 29-Nov-06 00:43 by kellythw

      ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

      router2 uptime is 2 hours, 23 minutes
      System returned to ROM by power-on
      System image file is "flash:c870-advsecurityk9-mz.124-4.T7.bin"


      This product contains cryptographic features and is subject to United
      States and local country laws governing import, export, transfer and
      use. Delivery of Cisco cryptographic products does not imply
      third-party authority to import, export, distribute or use encryption.
      Importers, exporters, distributors and users are responsible for
      compliance with U.S. and local country laws. By using this product you
      agree to comply with applicable laws and regulations. If you are unable
      to comply with U.S. and local laws, return this product immediately.

      A summary of U.S. laws governing Cisco cryptographic products may be found at:
      https://pepd.cloudapps.cisco.com/legal/export/pepd/Search.do

      If you require further assistance please contact us by sending email to
      export@cisco.com.

      Cisco 878 (MPC8272) processor (revision 0x200) with 118784K/12288K bytes of memory.
      Processor board ID FCZ113311H1
      MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
      4 FastEthernet interfaces
      1 ISDN Basic Rate interface
      128K bytes of non-volatile configuration memory.
      24576K bytes of processor board System flash (Intel Strataflash)

      Configuration register is 0x3922
      0
    3. phil2k Posted messages 10841 Registration date   Status Contributor Last intervention   2 339
       
      here it is, the first line of the show ver
      : Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M),

      it doesn't work with this version of IOS, you need ADVIPSERVICESK9
      0
    4. Romain2525 Posted messages 18 Status Member 1
       
      That's just what I thought. A professional made me download this and told me to proceed with the update. However, I'm unable to transfer this file from my PC to the router. I tried via FTP but without success. It's quite complex for me since I've never dealt with Cisco in my life.

      Thanks for your help anyway; at least I know which direction I should go.
      0
    5. phil2k Posted messages 10841 Registration date   Status Contributor Last intervention   2 339
       
      the update is done using tftp

      copy tftp start....
      0