Solved: Installation of Cisco SDM not working

ohcdsysadmin · ‎03-15-2008

Please assist me in installing Cisco Security and Device Manager.

I have a 2811 Router, which is configured to be a video conf gatekeeper.

I'm trying to install Cisco's SDM to configure routing.

I have installed it on my workstation, but I cannot access the Router. Have a message saying: http not enabled and/or ip http authentication local command not enabled.

Also, I am unable to install it on my router's flash. I cannot even access my router via the web browser. However, I can telnet into the router.

The following is the contents of my flash drive:

-#- --length-- -----date/time------ path

1 40374688 Sep 10 2007 14:46:08 -10:00 c2800nm-adventerprisek9_ivs-mz.124-12

b.bin

2 1823 Sep 10 2007 14:55:38 -10:00 sdmconfig-2811.cfg

3 6036480 Sep 10 2007 14:56:16 -10:00 sdm.tar

4 861696 Sep 10 2007 14:56:32 -10:00 es.tar

5 1164288 Sep 10 2007 14:56:52 -10:00 common.tar

6 1038 Sep 10 2007 14:57:08 -10:00 home.shtml

7 113152 Sep 10 2007 14:57:24 -10:00 home.tar

8 527849 Sep 10 2007 14:57:42 -10:00 128MB.sdf

9 1697952 Sep 10 2007 14:58:06 -10:00 securedesktop-ios-3.1.1.45-k9.pkg

10 416354 Sep 10 2007 14:58:26 -10:00 sslclient-win-1.1.3.173.pkg

205291520 bytes available (51216384 bytes used)

I have attached my router's running configuration.

Please assist me.

Thank you very much!!!!!

Mark Yeates · ‎03-15-2008

Yes, Definitely add your workstation's IP address to your ACL. Do you have a need to allow

the subnet 172.24.132.0 access to your router? Since you can telnet to the router you should be fine just modifying your ACL. You should keep your management ACL as strict as possible to limit access only the management workstations.

View solution in original post

Mark Yeates · ‎03-15-2008

Please check to see that your workstation's IP address matches your management access control list (172.24.132.1-62). Also check to see if you are using a cross over cable if you are directly connected to the router. Everything else looks good.

Mark

ohcdsysadmin · ‎03-15-2008

Mark,

Thanks for your quick response.

My workstation is on a seperate subnet. Instead of connecting this workstation to the 172.24.132.0 subnet, which is for video endpoints only, can I just include my workstation (only 1 ip address) on the router's access control list?

Or, will this addition compromise my router's security too much?

(side question) And, do I also need to include the other specific subnets (routes that I have added to the 2811 router) to the access control list, that I would like to connect to?

Please let me know what my options are.

Thank you very much!!

Mark Yeates · ‎03-15-2008

Yes, Definitely add your workstation's IP address to your ACL. Do you have a need to allow

the subnet 172.24.132.0 access to your router? Since you can telnet to the router you should be fine just modifying your ACL. You should keep your management ACL as strict as possible to limit access only the management workstations.

ohcdsysadmin · ‎03-15-2008

Mark,

I'll add it on.

Thank you very much!!!!

ohcdsysadmin · ‎03-15-2008

Mark,

I'll add it on.

Thank you very much!!!!

Mark Yeates · ‎03-15-2008

I am glad to know that I solved your problem. Thank you for the rating!

Mark

ohcdsysadmin · ‎03-15-2008

Mark,

Tried it. It worked!!!!!!

Thank you very much!!!!