Managing the Device Using Web User Interface

The Web User Interface (Web UI) is an embedded GUI-based device-management tool that provides the ability to provision the device, to simplify device deployment and manageability, and to enhance the user experience. It comes with the default image, so there is no need to enable anything or install any license on the device. You can use WebUI to build configurations, and to monitor and troubleshoot the device without having CLI expertise. This chapter includes the these sections:

Setting Up Factory Default Device Using Web UI

Quick Setup Wizard allows you perform the basic router configuration. To configure the router:


Note


Before you access the Web UI, you need to have the basic configuration on the device.


Procedure


Step 1

Connect the RJ-45 end of a serial cable to the RJ-45 console port on the router.

Step 2

After the device initial configuration wizard appears, enter No to get into the device prompt when the following system message appears on the router.

Would you like to enter the initial configuration dialog? [yes/no]: no

Step 3

From the configuration mode, enter the following configuration parameters.

!
ip dhcp pool WEBUIPool
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1

username admin privilege 15 password 0 default
!
interface gig 0/0/1
ip address 192.168.1.1 255.255.255.0
!

Step 4

Connect the PC to the router using an Ethernet cable to the gig 0/0/1 interface.

Step 5

Set up your PC as a DHCP client to obtain the IP address of the router automatically.

Step 6

Launch the browser and enter the device IP address in your browser’s address line. For a secure connection, type https://192.168.1.1/#/dayZeroRouting. For a less secure connection, enter http://192.168.1.1/#/dayZeroRouting.

Step 7

Enter the default username (admin) and the password as default.


Using Basic or Advanced Mode Setup Wizard

To configure the router using the basic or advanced mode setup:

Procedure


Step 1

Choose the Basic Mode or Advanced Mode and click Go To Account Creation Page.

Step 2

Enter the username and password. Reenter the password to confirm.

Step 3

Click Create and Launch Wizard.

Step 4

Enter the device name and domain name.

Step 5

Select the appropriate time zone from the Time Zone drop-down list.

Step 6

Select the appropriate date and time mode from the Date and Time drop-down list.

Step 7

Click LAN Settings.


Configure LAN Settings

Procedure


Step 1

Choose the Web DHCP Pool/DHCP Pool name or the Create and Associate Access VLAN option.

  1. If you choose the Web DHCP Pool, specify the following:

    Pool Name—Enter the DHCP Pool Name. Network—Enter network address and the subnet mask.
  2. If you choose the Create and Associate Access VLAN option, specify the following:

    Access VLAN—Enter the Access VLAN identification number. The range is from 1 to 4094. Network—Enter the IP address of the VLAN. Management Interfaces—Select the interface and move to the selected list box using the right and left arrows. You can also double click or drag and drop to move the interface to the selected list box.

Step 2

Click Primary WAN Settings.


Configure Primary WAN Settings

Procedure


Step 1

Select the primary WAN type. You con configure Serial, 3G/4G, Ethernet, or Broadband (xDSL) as primary WAN depending on the WAN types supported by the router.

Step 2

Select the interface from the drop-down list.

Step 3

Check the Get DNS Server info directly from ISP check box to get the DNS server information directly from the service provider. You can also manually enter the Primary DNS and Secondary DNS.

Step 4

Check the Get IP automatically from ISP check box to get the IP address information directly from the service provider. You can also manually enter the IP address and subnet mask.

Step 5

Check the Enable NAT check box to enable NAT. It is recommended to enable NAT.

Step 6

Check the Enable PPPOE check box to enable PPPoE. If you have enabled PPPoE, select the required authentication mode. The options are: PAP and CHAP.

Step 7

Enter the user name and password provided by the service provider.

Step 8

Click Security / APP Visibility WAN Settings.


Configure Secondary WAN Settings

For advanced configuration, you should configure the secondary WAN connection.

Procedure


Step 1

Select the secondary WAN type. You con configure Serial, 3G/4G, Ethernet, or Broadband (xDSL) as a secondary WAN depending on the WAN types supported by the router.

Step 2

Select the interface from the drop-down list.

Step 3

Check the Get DNS Server info directly from ISP check box to get the DNS server information directly from the service provider. You can also manually enter the Primary DNS and Secondary DNS.

Step 4

Check the Get IP automatically from ISP check box to get the IP address information directly from the service provider. You can also manually enter the IP address and subnet mask.

Step 5

Check the Enable NAT check box to enable NAT. It is recommended to enable NAT.

Step 6

Check the Enable PPPOE check box to enable PPPoE. If you have enabled PPPoE, select the required authentication mode. The options are PAP and CHAP .

Step 7

Enter the user name and password provided by the service provider.

Step 8

Click Security / APP Visibility WAN Settings.


Configure Security Settings

Procedure


Step 1

Check the Enable Cisco Recommended Security Settings check box to ensure that all passwords are not shown in plain text. The passwords are encrypted.

Step 2

Click Day 0 Config Summary.

Step 3

To preview the configuration, click CLI Preview to preview the configuration.

Step 4

Click Finish to complete the Day Zero setup.


Using Web User Interface for Day One Setup

To configure the Web user interface:

Procedure


Step 1

Configure the HTTP server. By default, the HTTP server configuration should be present on the device. Ensure the configuration by checking if the ip http server and ip http secure-server commands are present in the running configuration.

Device #configure terminal
Device (config)#ip http server
Device (config)#ip http secure-server

Step 2

Set up the authentication options to log into Web UI. You can use one of these methods to authenticate:

  1. You can authenicate using local database. To use a local database for Web UI authentication, ensure to have the ip http authentication local command in the running configuration. This command is preconfigured on the device. If the command is not present, configure the device as shown in this example:

    Device #configure terminal 
    Device (config)#ip http authentication local

    Note

     

    You need a user with privilege 15 to access the configuration screens on Web UI. If the privilege is less than 15, you can access only the Dashboard and Monitoring screens on Web UI.

    To create a user account, use the username <username> privilege <privilege> password 0 <passwordtext>

    Device #configure terminal
    Device (config)# username <username> privilege <privilege> password 0 <passwordtext>
  2. Authenticate using AAA options. To use AAA authentication for Web UI, ensure to configure ‘ip http authentication aaa’ on the device. Also, ensure that the required AAA server configuration is present on the device.

    Device #configure terminal
    Device (config)#ip http authentication local
     

Step 3

Launch the browser. In the address bar, type the IP address of the device. For a secure connection, type https://ip-address.

Step 4

Enter the default username (cisco) and password provided with the device

Step 5

Click Log In.