| 5.6 |  | Security Device Manager (SDM) |
| 5.6.3 |  | Downloading and Installing SDM |

| There are several configuration files available to install Cisco Security Device Manager. The specific file required depends on the router series being used. Figure provides the name of the configuration file to use for the router. SDM requires approximately 2.3 MB of free Flash memory.

When installing SDM on an existing router, use the “Downloading and Installing Cisco Security Device Manager (SDM) Version 1.0” document found on the Cisco website. A link is provided at the end of this page. First follow the procedure for the specific router to download the SDM Files. There are two procedures.

- Cisco 1700, 2600, 3600, or 3700 Series Router procedure.
- Cisco 831, 836, or 837 Router procedure. This one is different because they have Cisco Router Web Setup Tool (CRWS) as the default device manager on these routers. Refer to the “Switching Between Cisco Security Device Manager (SDM) and Cisco Router Web Setup Tool (CRWS) on Cisco 83x Series Routers” document.

Once the SDM files are downloaded, there are two processes to replace the router configuration in flash.

- “Modify Your Existing Configuration File”. Use this one to retain the existing configuration.
- “Default Configuration File”. Use this one to start from a fresh default configuration file.

Before SDM can run on the router, a few configuration options must be present in the router configuration file. There are several default router configuration files included in the SDM download file. Either use one of these default configuration files, or modify the existing configuration file using the router CLI to ensure that the router configuration supports SDM.

Modifying The Existing Configuration File

Before installing SDM onto the router, access the CLI using Telnet or the console connection to modify the existing configuration file on the router. SDM requires that the following commands are present in the router configuration file:

- The router HTTP/HTTPS server must be enabled, using the following Cisco IOS commands:

> > ip http server

> > ip http secure-server

> > ip http authentication local

- SDM requires a user account defined with privilege level 15 (enable privileges):

> > username sdm privilege 15 password 0 sdm

Note: For security purposes, the user account defined should be different than the default one used in the example above.

- SSH/Telnet must be configured for local login and privilege level 15:

> > line vty 0 4

> > privilege level 15

> > login local

> > transport input telnet

> > transport input telnet ssh

- Local logging should (optionally) be enabled to support the log monitoring function:

> > logging buffered 51200 warning

If the existing configuration file is used, SDM will not display the Startup Wizard the first time SDM is run. It is assumed that basic network configuration has already been completed.

Using a Default Configuration File

Included in the SDM download file are several default configuration files. See Figure to determine which configuration file should be used for the router. When following the instructions to download the SDM files to the router, use the default configuration file that is listed for the router.

If a default configuration file is used, SDM will display the Startup Wizard, allowing basic network configuration information to be entered, the first time SDM is run.

| Web Links http://www.cisco.com/en/US/products/ sw/secursw/ps5318/prod_installation_guide 09186a008017dcd0.html#92034