Table Of Contents
Release Notes For Security Device Manager Version 1.0.1
Network Modules and WICs Supported
Cisco 1700 Routers Running ITS/CCME and Cisco IOS Version 12.2(13)T
Downloading SDM From Cisco.com and Installing It On Your Router
Upgrading to a New SDM Release
New Features Supported in SDM Release 1.0.1
No Enable Password in Default Configuration File
Configuring Your Router as an AAA Client
Configure the Local Router as an AAA Client
Routers Shipped with SDM Do Not Execute the Standard IOS Startup Sequence
Unable to perform `squeeze flash'
Resolved Caveats - Release 1.0.1
SDM Default Configuration File
SDM Is Not Supported on SOHO 91, SOHO 96, and SOHO 97 Routers.
Modifying the Default Configuration File in Cisco 3620 and 3640 Routers
Obtaining Technical Assistance
Obtaining Additional Publications and Information
Release Notes For Security Device Manager Version 1.0.1
11/12/03
These release notes support Security Device Manager 1.0.1b. These release notes should be used with the documents listed in the related documentation section. These release notes are updated as needed.
Contents
This document contains the following sections:
•
Obtaining Technical Assistance
•
Introduction
Security Device Manager (SDM) is a web-based configuration tool that allows you to configure LAN and WAN interfaces, routing, Network Address Translation (NAT), firewalls, Virtual Private Networks (VPNs), and other features on your router. SDM is installed in router Flash memory, and is run in a Web browser installed on a PC. SDM may be pre installed on the routers listed in the "Hardware Supported" section.
System Requirements
This section contains SDM system requirements.
Memory Requirements
SDM requires 2.8 MB of free Flash memory space on supported routers.
Hardware Supported
This section lists the hardware that SDM supports.
Cisco Routers
SDM is supported on the following Cisco 800 series routers:
•
•
•
SDM is supported on the following Cisco 1700 series routers:
•
•
•
•
•
•
•
•
•
SDM is supported on the following Cisco 2600 series routers:
•
•
•
•
•
•
•
SDM is supported on the following Cisco 3600 series routers:
•
•
•
•
•
SDM is supported on the following Cisco 3700 series routers:
•
•
Network Modules and WICs Supported
SDM supports configuration on following Network Modules.
•
•
•
•
•
•
•
•
•
•
•
•
•
SDM supports only Ethernet configuration on following network modules.
•
•
•
•
•
•
•
•
•
•
SDM supports the following WAN interface cards:
•
•
•
•
•
•
•
•
PC System Requirements
SDM is designed to run on a personal computer that has a Pentium III processor.
Software Supported
This section describes SDM software requirements.
Cisco IOS Images
SDM is compatible with the Cisco IOS images listed in Table 1.
Determining the Cisco IOS Software Version
To determine the version of Cisco IOS software currently running on your Cisco 820 series router, log in to the router and enter the show version EXEC command. The following sample output from the show version command indicates the version number on the second output line:
router> show versionCisco Internetwork Operating System SoftwareIOS (tm) C1700 Software (c1700-k8sv3y7-mz) Version 12.2(13)ZHWeb Browser Versions
SDM can be used with the following browsers:
•
•
PC Operating System Versions
SDM can be run on a PC running any of the following operating systems:
•
•
•
•
•
Installation Notes
This section contains important information regarding installation and upgrades to SDM.
Cisco 1700 Routers Running ITS/CCME and Cisco IOS Version 12.2(13)T
If you are installing SDM on a router that already has the Internet Telephony Service (ITS) or Cisco Call Manager Express (CCME) application installed in Flash, you may exceed the number of files allowed in Flash memory by installing SDM.Cisco 1700 routers using a Cisco IOS version 12.2(13)T image cannot have more than 32 files in Flash memory.
Before installing SDM, you must delete any unneeded files from Flash memory. If no files can be deleted, do not install SDM on the router.
Downloading SDM From Cisco.com and Installing It On Your Router
The document Downloading and Installing Cisco Security Device Manager (SDM) Version 1.0 explains how to download SDM from Cisco.com and install it on your router. To obtain this document, visit the following URL.
Upgrading to a New SDM Release
If SDM is already installed on a router, and you are upgrading to a newer SDM release, you must also upgrade the configuration file for the router in order for new SDM software to function properly. The latest SDM configuration files are contained in the SDM .zip file, available from Cisco.com at the following URL:
http://www.cisco.com/cgi-bin/tablebuild.pl/sdm
The document Downloading and Installing Cisco Security Device Manager (SDM) Version 1.0 explains how to obtain the SDM zip file and how to install SDM and all related files on your router. This document is available at the following URL:
Uninstalling SDM Files
If you want to remove SDM from Flash memory, you can do so by logging onto your router and completing the following steps in EXEC mode:
Step 1
router#delete sdm.tarDelete filename [sdm.tar]?Delete flash:sdm.tar? [confirm]router#squeeze flash:Step 2
New and Changed Information
This section contains information that is new or that has changed since the previous release.
New Features Supported in SDM Release 1.0.1
SDM Release 1.0.1 supports the following new features:
•
•
•
•
Important Notes
This section contains important information for this release.
No Enable Password in Default Configuration File
The default configuration file shipped with earlier versions of SDM configured an enable password, which controlled access to the CLI via the console port. The default configuration files provided with SDM version 1.0.1a do not configure an enable password.
Configuring Your Router as an AAA Client
This section explains how you can configure your router as an Authentication, Authorization, and Accounting (AAA) client in a way that will enable the AAA server to authenticate users logging on to SDM.
Configure the AAA Server
Configure the AAA server by performing the following tasks:
Step 1
Step 2
Step 3
a.
b.
c.
d.
e.
Configure the local router as an AAA client by completing the steps in the next section.
Configure the Local Router as an AAA Client
Open a Telnet or console session to the router you want to be the AAA client, and complete the following steps to configure your router and then log on to SDM.
Step 1
Step 2
username lab privilege 15 password 7 121504151E0A0EStep 3
aaa new-modelaaa authentication login default group tacacs+ localaaa authentication ppp default group tacacs+ localaaa authorization exec default group tacacs+ localaaa authorization network default group tacacs+ local!tacacs-server host 10.1.1.1tacacs-server directed-requesttacacs-server key sdm!ip http authentication aaa!Step 4
Step 5
http://router IP-address/flash/sdm.shtmlReplace router IP-address with the IP address of the router interface the PC is connected to.
Step 6
All users accessing SDM on this router will be authenticated by the AAA server.
Routers Shipped with SDM Do Not Execute the Standard IOS Startup Sequence
Because a default configuration file is provided on a router shipped with SDM, it will not execute the standard Cisco IOS startup sequence. If you are expecting to use the Cisco IOS setup utility, a TFTP/BOOTP configuration download, or other features available through the standard Cisco IOS startup, you will need to erase the configuration file.
To erase the existing configuration and take advantage of the Cisco IOS startup sequence, perform the following steps. This will leave SDM on the router if you later decide you want to use it, but you will need to configure the router manually before you can begin using SDM. Please refer to your router's Quick Start Guide and to the SDM FAQ (available at http://www.cisco.com/go/sdm) for information about the minimum configuration required for using SDM.
Step 1
Step 2
Step 3
Step 4
yourname> enablePassword: sdmyourname#Step 5
yourname# erase startup-configStep 6
Step 7
yourname# reloadStep 8
After the router completes the reload operation, it enters into the standard IOS startup sequence. You can use the startup sequence to give your router a configuration manually, or to copy a configuration file from the network. If you later decide you want to use SDM to change an existing configuration, refer to the instructions on starting SDM included in the Quick Start Guide for your router.
Unable to perform `squeeze flash'
If your router is using a Cisco IOS image with a version earlier than 12.3 in the T release, or 12.2(13)ZH, it may be necessary to use the squeeze flash command to reclaim Flash memory after repeated use of SDM. If this becomes necessary, SDM will inform you that the squeeze flash command must be used, and will execute the command upon your confirmation.
However, the squeeze flash command will not work if an erase flash command has never been executed on the router. If this is the case you will receive an "Unable to perform `squeeze flash'" warning message, and you will need to run the erase flash: command to enable the use of the squeeze flash command.
Executing the erase flash: command will remove SDM and the Cisco IOS image from the router's Flash memory, and you will lose your connection to the router. Complete the following steps to save files in Flash, execute erase flash:, and copy the files back so you can reconnect to SDM.
Step 1
Step 2
Step 3
Step 4
Step 5
copy flash: filename tftp://tftp-server-address/filename
Example:
copy flash: sdm.tar tftp://10.10.10.3/SDM.tar
Note
a.
http://www.cisco.com/kobayashi/sw-center/
b.
c.
Step 6
Step 7
Step 8
copy tftp://tftp-server-address/filename flash:
Example:
copy tftp://10.10.10.3/SDM.tar flash:
Note
Step 9
Now that an erase flash: has been performed on the router, you will be able to execute the squeeze flash command when necessary.
Caveats
Caveats describe unexpected behavior in SDM. Severity 1 caveats are the most serious caveats, severity 2 caveats are less serious, and severity 3 caveats are the least serious of these three severity levels.
Open Caveats - Release 1.0.1
This section lists caveats that are open in release 1.0.1.
•
When updating SDM using Netscape 4.79, SDM occasionally is unable to contact the Cisco.com webserver when the webserver is running, and displays the message "Contacting Cisco.com for SDM updates. Please wait ..."for an indefinite time. The user has to shut down the web browser to dismiss the message. If the web server is actually down, the following message is displayed:
"SDM failed to contact Cisco.com. Please check that your internet connection is up. Then try again."
Workaround:
Before launching SDM or performing SDM updates, clear the browser cache.
•
If a firewall is configured for an interface which already has a Management Access policy associated with it, selecting Replace in the Merge/Replace dialog might prevent access to certain networks.
This occurs because selecting "Replace" causes the policy access control entries (ACEs) to be disassociated from the interface but not from the vty or http line.
Workaround:
On running Firewall wizard in an interface configured with Management Access policy select Merge option instead of Replace and proceed.
•
If SDM is launched in Netscape, using the Secure Shell (SSH) protocol, an SDM wizard launched for the first time will not deliver the configuration to the router when you click Finish. This problem occurs on PCs with processors slower than Pentium III processors, or on PCs with low memory.
Workaround:
While in SDM, select Advanced Mode and click Deliver. The configuration generated in Wizard mode will be delivered to the router. Once this configuration has been delivered to the router using the Deliver button, the LAN, WAN, Firewall, and other wizards will deliver the configuration when you click Finish.
Alternatively, you can close SDM, and relaunch it using Internet Explorer 5.5 or later. If you want to use Netscape, invoke SDM using the Telnet protocol. Do this by starting SDM as usual, and clicking Cancel in the Enter SSH Credentials window. SDM will display another username and password dialog. Enter the username and password in that window and click OK.
•
If the Intrusion Detection Device Manager (IDM) is launched using SDM set to automatic discovery of IP address, IP address discovery may fail. This is a rare problem that occurs when the SSH protocol is used to launch SDM in Netscape 4.79.
Workaround:
Close SDM. Clear the browser cache and try to relaunch the IDM after a short time. You can also try using Internet Explorer 5.5 or later to launch SDM.
•
When updating SDM, if any of the uploaded SDM files shows a size of zero bytes when show flash is invoked, no operations such as copy or delete can be performed on flash. This problem rarely occurs.
Workaround:
Restart the router to be able to perform operations on flash. If files of zero bytes are shown in a show flash display, restart the router before starting SDM.
•
In SDM updates, back up will fail for the image 12.2(13)T8. This is because the time stamps that the SDM backup feature checks to compare modification dates are not present in Flash memory. If the file being checked is an SDM file, the back up of that file fails.
Workaround:
Configure date and time on the router—the SDM Date/Time feature can be used for this—and try SDM Updates again. This time ignore the back up option by clicking "No" when prompted. Backup will still not work, but update will work fine.
•
Configuration of NTP client using SDM fails if an interface configured as a firewall trusted interface is deleted.
Workaround:
Use the CLI to remove the description "$FW_INSIDE$" from any interface that does not have an IP address configured.
The command no description entered in interface configuration mode removes the description.
•
In routers running a Cisco IOS image of version 12.2(11)T6, SDM treats PPPoE connections that do not contain the vpdn-enable, vpdn-group, request-dialin, and protocol pppoe commands as read only. The Edit button is not enabled in the Interfaces and Connections window, and the connection is treated as "Other" in the WAN window.
If SDM is subsequently used to configure another PPPoE connection on the router, those commands are added, and the original PPPoE connections are made complete. However SDM will not show these original connections as editable.
Workaround
Select Refresh from the View menu to make SDM display these PPPoE connections as editable.
•
Port Address Translation (PAT) rules configured with no access list using the CLI are not removed when using SDM to delete WAN connections the rules are associated with.
Workaround
Remove the PAT rules using the CLI.
•
SDM can take more than 30 seconds to switch from Advanced Mode to Wizard Mode.
•
When performing Security Audit from a PC with more than one Network Interface Card (NIC) which is in one of the directly connected Inside Interface networks (as chosen by the user), "Access class not set on VTY lines" security problem as reported cannot be fixed.
•
Router does not reload with default configuration when user executes Reset To Factory Defaults in SDM.
If router is running a Cisco IOS image of version 12.2(11)T6, and the last 4 bits of the config-register value are set to 0, for example 0x2100 or 0x1100, the router does not reload when the user performs a Reset To Factory Defaults. SDM indicates that it has sent a reload command to router and shuts down, and the default configuration is copied to the startup-config, but the reload command has not executed, and the router is still using the running configuration that was present before the Reset operation.
Workaround
Use the CLI config-register command to ensure that the last 4 bits of the config register are not set to 0 (zero).
•
SDM may require up to 10 seconds when being run using Internet Explorer version 6.0 with service pack 1 and JRE version 1.4.1_01 to configure a new serial WAN connection in Wizard mode.
•
Text display is cut and scrolling causes loss of text in Security Audit when browser uses the Java Runtime Environment (JRE) 1.3.1_07 plug-in.
Various text messages are cut and not displayed properly in the Security Audit feature if JRE 1.3.1_07 is installed on the system. For example, the report card contains incomplete sentences, and scrolling up and down in the "Fix It" window causes many of the lines to disappear or to appear incomplete.
The problem is seen only when the plug-in is installed.
Workaround
Upgrade Java Plug-ins to the latest version available from the Sun website at the following URL:
Alternatively, disable the Java plug-in. In Internet Explorer, click Tools, select Internet Options, click Advanced, and uncheck the Use Java 2 v1.3.1_07 option. In Netscape, click Edit, select Preferences, click Advanced, and uncheck Enable Java Plug-in.
•
If you delete a WAN connection that you created in Wizard mode, an ip nat inside command may still remain in a LAN interface configuration.
Workaround
To delete the ip nat inside command from the LAN interface configuration, go to Interfaces and Connections in Advanced Mode, select the LAN interface, click Edit, and delete the association in the Association tab.
•
Enabling AES encryption or IP Compression in the Add/Edit IKE Policy or Add/Edit Transform Set windows might not work even though the IOS image running on the router supports AES encryption o IP Compression. This may happen in the following circumstances:
–
–
Workaround
Do one of the following:
–
–
For more info on VPN Modules, refer to the document at the following URL:
http://www.cisco.com/en/US/products/hw/routers/ps259/products_data_sheet09186a0080088750.html
•
In Advanced Mode Static Routing, if a virtual-template interface is configured as the next hop interface in a static route, SDM generates corresponding CLI commands. Delivering such commands to the router may fail on some platforms.
Workaround
Do not configure a virtual-template interface as a next hop interface if it is not supported on your router.
•
After the SDM Startup Wizard has been completed by the user, SDM terminates and all browser windows close except the browser window hosting the Applet area, when run in Netscape Communicator version 4.79.
Workaround
Manually close the browser window(s) that remain open.
•
When SDM is run in a browser using Sun Microsystem's Java Plug-in version 1.4.0, null-pointer exceptions are displayed in the Java console window when SDM loads and starts.
This problem has been reported by many other users. Refer to the following links for more information:
http://forum.java.sun.com/thread.jsp?forum=30&thread=291011
http://forum.java.sun.com/thread.jsp?forum=2&thread=289203
Workaround
Upgrade Java Plugins to the latest version available from the Sun website at the following URL:
•
When SDM runs with a Cisco IOS image of a version earlier than 12.3 in the T release, or earlier than version 12.2(13)ZH, the HTTP server appends unnecessary characters to names of files it displays. As a result, when SDM is started, the web browser displays the warning "Content does not match the signature."
Workaround
Disregard the warning and click Yes to continue.
•
When an Easy VPN tunnel is active, using SDM to apply a NAT configuration to the Easy VPN inside and outside interfaces will deliver 'ip nat inside' and 'ip nat outside' commands to the router, but the running configuration will not be changed. SDM displays no error message when this is attempted.
Workaround
To apply a NAT configuration to interfaces that have been designated as Easy VPN "inside" or "outside" interfaces, complete the following steps in SDM:
–
–
–
•
When SDM is run in Internet Explorer using Java Plug-in 1.3.1_07, some text in the Wizard Mode Reset to Factory Defaults screen gets cut off.
Workaround
Resize the SDM window to display all text.Upgrade Java Plugins to the latest version available from the Sun website at the following URL:
•
When run using Netscape version 4.79, all SDM windows display a blank signature in the lower left corner. The text "Signed by:" appears, but no signature text follows.
Workaround
None needed. This does not affect the operation of the router.
•
Due to an IOS caveat, if you configure an Ethernet connection with a dialer-pool command, such as a PPPoE connection, subsequently delete the connection, then configure an ATM connection with PPPoE, and then recreate the Ethernet connection with the dialer-pool command, that Ethernet configuration will contain multiple dialer-pool statements, and be read-only in SDM.
Workaround
Use the CLI to remove all PPPoE and dialer-pool statements from the Ethernet interface configuration. After saving the configuration, save the running configuration to the startup configuration. Then, reload the router and reconfigure the Ethernet connection.
•
When configuring Point-to-Point Protocol over Ethernet (PPPoE) for the Cisco 1711 or 1712 VLAN1 interfaces, SDM does not deliver the ip tcp adjust-mss command to the router's configuration.
Workaround
Use the CLI to add the ip tcp adjust-mss command to the VLAN1 interface configuration. Telnet to the router and enter the following command in VLAN1 interface configuration mode.
ip tcp adjust-mss 1452
•
SDM will not start on a Cisco 831 router with 32 MB of memory if run from Netscape. An exception will be displayed in the Java console window and in the router console window indicating a memory allocation failure.
Workaround
Run SDM using Internet Explorer version 5.5 or later. Or, if you want to continue to use Netscape, log onto the router CLI and enter the following memory-size command in global configuration mode:
Router# memory-size iomem 10•
XAuth authentication intermittently fails and Easy VPN tunnels cannot be established using SDM on routers running IOS version 12. 3(4)T. When the user attempts to do an Xauth authentication in SDM, the following error message is displayed:
"Unable to establish a session with the router to process XAUTH request from the Easy VPN server. Easy VPN tunnel cannot be successfully brought up."
This message is followed by another indicating that the connect command was delivered to the router, but that the tunnel was not established.
Workaround:
In the VPN Connections window, select the Easy VPN tunnel configuration and click the "Reset Tunnel" button to clear the tunnel and reconnect it. If this does not bring up the tunnel, use the "Login" button, more than once if necessary, to bring up the tunnel.
Resolved Caveats - Release 1.0.1
This section lists caveats that are resolved in release 1.0.1.
•
SDM does not show Open Shortest Path First (OSPF) as a supported routing protocol for 83x routers running Cisco IOS version 12.3(2) XC images. This problem has been resolved in this release.
•
When SDM is invoked on routers running Cisco IOS version 12.3(4)T, the controls on SDM windows are disabled. This problem has been resolved in this release.
•
Routers with a large Cisco Express Forwarding (CEF) table may find that SDM 1.0.1 takes an extremely long time to load. This problem has been resolved in this release.
•
The default configuration file shipped with SDM had no banner, and contained an enable password. A banner has been added to the default configuration file, and the enable password has been removed from the configuration file in this release.
•
SDM's IDS Network Module Management feature is does not work on routers running Cisco IOS images of version 12.3(4T) because the Secure Shell (SSH) version used by SDM and the version used by IOS are not compatible. This problem has been resolved in this release. If SDM detects differing SSH versions, it will use Telnet.
•
Static Network Address Translation (NAT) rules are shown as read-only by SDM on routers running Cisco IOS images of version 12.3(4T). When a user creates a static NAT rule and delivers it to the router, SDM displays the rule as read-only. This problem has been fixed in this release.
Documentation Updates
The following sections explain how documentation may be inaccurate or incomplete.
Omissions
The following sections explain information that was not included in documentation.
SDM Default Configuration File
SDM includes a default configuration file. The configuration does the following:
•
•
•
•
Note
It is highly recommended that you change the username and password values because they are well known. SDM will help you change those values. Please refer your router's Quick Start Guide for information on how to launch SDM.
Caution
SDM Is Not Supported on SOHO 91, SOHO 96, and SOHO 97 Routers.
The Cisco 831, 836, and 837 Cabling and Setup Quick Start Guides do not state that SDM is not supported on the SOHO 91, SOHO 96, and SOHO 97 routers. The SOHO series of routers do not support SDM.
Modifying the Default Configuration File in Cisco 3620 and 3640 Routers
The instructions provided in the Cisco 3620 and 3640 Modular Access Routers Quick Start Guide for Starting SDM might not work.
The initial communication between a browser running on a PC and SDM is controlled by the default configuration file for the router. On most supported routers, SDM uses a fixed Fast Ethernet port at address `0`, Fast Ethernet 0/0 or Fast Ethernet 0. The PC is connected to this interface, and the interface is given an IP address in the default configuration file that SDM recognizes.
For the 3620 and 3640 routers there are no fixed Ethernet ports.
By convention many of these routers ship with a Fast Ethernet capable network module in Slot 0. SDM assumes this to be the case in its default configuration file. If this is not true for your router, you need to modify the default configuration file to enable and provide an IP address for an Ethernet interface before SDM can communicate with the router.
Perform the following steps to enable SDM to communicate with the browser:
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Related Documentation
This section lists other documents with information on SDM.
Platform-Specific Documents
Refer to the Quick Start Guide for your router , available on www.cisco.com, to learn how to start SDM for the first time.
Software Documents
These documents are available on www.cisco.com/go/sdm
•
•
•
Obtaining Documentation
Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation on the World Wide Web at this URL:
http://www.cisco.com/univercd/home/home.htm
You can access the Cisco website at this URL:
International Cisco websites can be accessed from this URL:
http://www.cisco.com/public/countries_languages.shtml
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated regularly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual or quarterly subscription.
Registered Cisco.com users can order a single Documentation CD-ROM (product number DOC-CONDOCCD=) through the Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/ordering_place_order_ordering_tool_launch.html
All users can order monthly or quarterly subscriptions through the online Subscription Store:
http://www.cisco.com/go/subscription
Ordering Documentation
You can find instructions for ordering documentation at this URL:
http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm
You can order Cisco documentation in these ways:
•
http://www.cisco.com/en/US/partner/ordering/index.shtml
•
Documentation Feedback
You can submit comments electronically on Cisco.com. On the Cisco Documentation home page, click Feedback at the top of the page.
You can e-mail your comments to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com, which includes the Cisco Technical Assistance Center (TAC) website, as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from the Cisco TAC website. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC website, including TAC tools and utilities.
Cisco.com
Cisco.com offers a suite of interactive, networked services that let you access Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.
Cisco.com provides a broad range of features and services to help you with these tasks:
•
•
•
•
•
To obtain customized information and service, you can self-register on Cisco.com at this URL:
http://tools.cisco.com/RPF/register/register.do
Technical Assistance Center
The Cisco TAC is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two types of support are available: the Cisco TAC website and the Cisco TAC Escalation Center. The type of support that you choose depends on the priority of the problem and the conditions stated in service contracts, when applicable.
We categorize Cisco TAC inquiries according to urgency:
•
•
•
•
Cisco TAC Website
The Cisco TAC website provides online documents and tools to help troubleshoot and resolve technical issues with Cisco products and technologies. To access the Cisco TAC website, go to this URL:
All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC website. Some services on the Cisco TAC website require a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:
http://tools.cisco.com/RPF/register/register.do
If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC website, you can open a case online at this URL:
http://www.cisco.com/tac/caseopen
If you have Internet access, we recommend that you open P3 and P4 cases online so that you can fully describe the situation and attach any necessary files.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.
To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
Before calling, please check with your network operations center to determine the Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
http://www.cisco.com/en/US/products/products_catalog_links_launch.html
•
•
http://www.cisco.com/go/packet
•
http://www.cisco.com/go/iqmagazine
•
http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html
•
http://www.cisco.com/en/US/learning/le31/learning_recommended_training_list.html
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
Copyright © 2003 Cisco Systems, Inc. All rights reserved.
Guest
