Using the SDM startup wizard

Use the following process to access SDM for the first time . This procedure assumes that an out-of-box router with SDM installed is being used, or that a default SDM configuration was loaded into flash.

Step 1
Connect a PC to the lowest number LAN Ethernet port of the router using a cross-over cable.

Step 2
Assign a static IP address to the PC. It is recommended to use 10.10.10.2 with a 255.255.255.0 subnet mask.

Step 3
Launch a supported web browser.

Step 4
Use the URL https://10.10.10.1. A login prompt will appear.

Step 5
Log in using the default user account:

Username: sdm
Password: sdm

The SDM startup wizard opens, requiring a basic network configuration to be entered . To access SDM after the initial startup wizard is completed, use either http: or https:, followed by the router IP address.

When you enter https: it specifies that the Secure Sockets Layer (SSL) protocol be used for a secure connection. If SSL is not available, use http: to access the router.

Once the WAN interface is configured, SDM is accessible through a LAN or WAN interface.

NOTE:

The startup wizard information needs to be entered only once and will only appear when a default configuration is detected.

Troubleshooting SDM Access
Use the following tips to troubleshoot SDM access problems:

  • First determine if there is a web browser problem by checking the following:
    • Are Java and JavaScript enabled on the browser? Enable them.
    • Are popup windows being blocked? Disable popup blockers on the PC, since SDM requires popup windows.
    • Are there any unsupported Java plug-ins installed and running? Disable them using the Windows Control Panel.
  • Is the router preventing access? Remember that certain configuration settings are required for SDM to work. Check the following:
    • Is one of the default configurations being used, or is an existing router configuration being used? Sometimes new configurations disable SDM access.
    • Is HTTP server enabled on the router? If it is not, enable it and check that other SDM prerequisite parameters are configured as well. Refer to the "Downloading and Installing Cisco SDM" document for the required settings. This document can be found at the weblink below.
    • Did SDM access work before, but now its not? Ensure that the PC is not being blocked by a new ACL. Remember that SDM requires HTTP, SSH, and Telnet access to the router, which could have been inadvertently disabled in a security lockdown.
  • Is SDM installed?
    • The quickest way to determine this is to access it using the appropriate HTTP or HTTPS method https:///flash/sdm.shtml.
    • Use the show flash command to view the flash file system and make sure that the required SDM files are present.
Lab Activity

Lab Exercise: Configure Basic Security using Security Device Manager (SDM)

In this lab, students will configure basic router security using SDM. Students will learn to copy the SDM files to the router Flash memory, and configure the router to support SDM. Students will then use SDM to configure a basic firewall, reset a router interface, configure PAT, create a banner, and configure secure management access. Finally, students will learn to use SDM to perform a security audit and automatic lockdown.

Downloading and Installing Cisco SDM