VMware ESXi and vSphere Cluster Management
Cisco Configuration Professional (CCP) Overview
Learn how Cisco Configuration Professional configures, monitors, and troubleshoots Cisco IOS routers, and compare full CCP with CCP Express, Cisco SDM, and IOS CLI.
What Is Cisco Configuration Professional?
Cisco Configuration Professional (CCP) is a graphical management application for supported Cisco IOS routers. It provides screens, menus, status views, and guided wizards for common router administration tasks.
A wizard is a step-by-step workflow that collects required settings, creates the corresponding router configuration, and applies it to the device. CCP therefore reduces the need to enter every IOS command manually, which can help administrators who are still learning the Cisco IOS command-line environment.
CCP is designed to make common LAN, WAN, routing-edge, and security tasks more approachable. It can assist with router deployment, configuration, monitoring, and basic troubleshooting. The tool does not remove the need to understand networking or router behavior: an administrator must still choose appropriate addresses, policies, interfaces, and security parameters.
How CCP Is Deployed
The full CCP application is installed on an administrator's Windows workstation. The workstation then connects across the network to a supported Cisco router and manages that router through the application.
This is different from software embedded directly in a router. The full CCP program runs on the PC, while the router supplies the IOS management and configuration endpoint. A single workstation-based installation can be used to administer multiple supported routers, subject to connectivity, credentials, platform support, and software compatibility.
- Install the full CCP application on a Windows workstation.
- Establish IP reachability between the workstation and the target router.
- Provide the required management access settings and credentials.
- Select the router in CCP and choose a configuration, monitoring, or troubleshooting category.
- Review the proposed changes before applying them.
- Verify both the resulting configuration and the router's operational status.
What CCP Can Configure
CCP organizes common router tasks into functional categories. The exact screens and available features depend on the router platform and IOS software support.
LAN and WAN Interfaces
For a LAN, or Local Area Network, CCP can help configure local router interfaces, addressing, and interface status. For a WAN, or Wide Area Network, it can provide workflows for the connection type, addressing, and provider-facing parameters supported by the device.
A typical interface workflow is:
- Select the target router.
- Choose the appropriate LAN or WAN interface.
- Enter addressing and connection parameters.
- Review the settings generated by the wizard.
- Apply the changes.
- Verify that the interface and connectivity have the expected status.
Basic Device and Network Services
CCP can assist with basic device settings such as configuring a hostname. It also provides workflows for services commonly used at the network edge, including:
- DNS: the Domain Name System, which supports name resolution.
- DHCP: the Dynamic Host Configuration Protocol, which provides IP addresses and related settings to clients.
- User and access management: local users and related router management access settings.
- Device groups: organization of multiple managed routers into logical groups for easier administration.
Security Features
CCP includes guided workflows for several router security functions:
- NAT: Network Address Translation, which translates address information between network domains.
- Stateful firewall: a firewall that tracks connection state when applying traffic policy.
- Application-aware firewall: controls that can use application-level information when making policy decisions.
- IPS: an Intrusion Prevention System that detects and helps prevent malicious or unwanted traffic.
- VPN: a Virtual Private Network that creates protected connectivity across an untrusted network.
Wizards reduce the mechanical complexity of creating common security configurations, but they do not make policy decisions for the administrator. You still need to understand which interfaces are trusted, which traffic is permitted, what networks are protected, and how the security policy affects users.
Quality of Service
QoS, or Quality of Service, can also be configured through CCP workflows. Its high-level purpose is to classify and prioritize traffic when a link has limited capacity or when some traffic, such as voice, is delay-sensitive.
For example, an administrator might use a QoS workflow to prioritize voice traffic across a low-bandwidth WAN link. CCP provides a configuration interface; it does not replace the need for a sound QoS design.
CCP Feature Categories
| Category | Representative Tasks | Administrative Goal |
|---|---|---|
| Interface configuration | Configure LAN and WAN interfaces, addressing, and status | Provide working network connectivity |
| Basic services | Set the hostname, DNS-related options, DHCP, and user access | Prepare the router for basic operation and administration |
| Security | Configure NAT, stateful firewall, application-aware policy, and IPS | Control traffic and protect the network edge |
| VPN | Build protected site-to-site or other supported VPN configurations | Secure connectivity across untrusted networks |
| QoS | Classify and prioritize selected traffic | Manage traffic on constrained or important links |
| Monitoring | View router status, health, interfaces, and operational information | Understand current device operation |
| Troubleshooting | Use WAN and VPN diagnostics and status views | Find common connectivity and configuration problems |
| Device grouping | Organize multiple managed routers | Make larger device sets easier to administer |
Practical CCP Workflows
Initial Branch-Router Setup
For a small branch office, an administrator could use CCP to assign a hostname, configure LAN and WAN interfaces, specify DNS-related settings, and enable DHCP service for local clients. After applying the wizard-generated settings, the administrator should verify interface status, client addressing, and upstream connectivity.
Internet-Edge NAT and Firewall
A NAT and firewall workflow generally requires the administrator to:
- Identify the inside and outside interfaces.
- Choose the required address-translation behavior.
- Define allowed and denied traffic as appropriate.
- Review and apply the generated configuration.
- Verify that translations occur and that the policy permits intended traffic while blocking unintended traffic.
Site-to-Site VPN
A VPN wizard can collect peer addressing, protected-network information, and authentication and encryption parameters supported by the devices. After applying the configuration, use VPN status and diagnostic views to check whether the tunnel is established.
Both VPN endpoints need compatible settings. A wizard can make the configuration process easier, but it cannot correct a mismatched peer address, authentication method, encryption parameter, or protected-network definition.
Monitoring and Troubleshooting with CCP
CCP can display router health and operational information through GUI status views. Depending on the supported device and software, these views can help an administrator inspect interfaces, connectivity, WAN operation, VPN state, and other device information.
GUI diagnostics are useful for narrowing down common problems, but they complement rather than eliminate IOS knowledge. The final configuration and the actual behavior of the router remain the authorities when a screen does not explain the problem.
WAN Link Is Unavailable
- Confirm that the correct interface and WAN connection type were selected.
- Verify addressing, encapsulation, and provider-facing parameters.
- Determine whether the interface is administratively down, physically down, or unable to establish connectivity.
- Validate the resulting IOS configuration if the GUI settings do not produce the expected result.
VPN Tunnel Does Not Establish
- Confirm peer addressing and reachability.
- Compare authentication, encryption, and protected-network definitions on both endpoints.
- Use VPN status and diagnostic views to identify negotiation or policy mismatches.
- Check that firewall and NAT behavior does not interfere with VPN traffic.
NAT or Firewall Blocks Expected Traffic
- Verify inside and outside interface assignments.
- Review the selected translation rule and firewall policy direction.
- Confirm that the traffic matches the intended policy.
- Inspect monitoring information and the underlying router configuration.
CCP Cannot Manage the Router
- Verify IP reachability between the Windows workstation and the router.
- Confirm that the router platform and IOS software support the intended management tool.
- Check management access settings and credentials.
- Use the full CCP application when broader functionality is required instead of the limited embedded edition.
CCP Express
Cisco Configuration Professional Express (CCP Express) is a reduced-function device manager embedded in the router. It resides in router flash memory, which is nonvolatile storage that can hold software and embedded management components.
CCP Express is not the same as the full workstation-based CCP application. Its smaller feature set makes it suitable for basic local or initial device management on an individual router. The full CCP application provides broader administration and is intended for management from a Windows workstation.
| Characteristic | Cisco Configuration Professional | CCP Express |
|---|---|---|
| Where it runs | Runs on an administrator's Windows workstation | Runs as an embedded device-management component associated with the router |
| Installation location | Installed on the workstation | Stored in router flash memory |
| Feature breadth | Broader configuration, monitoring, and troubleshooting workflows | Reduced feature set |
| Typical scope | Can manage multiple supported routers and broader router functions | Usually focused on basic management of an individual device |
| Management use case | Ongoing administration and guided configuration | Basic local or initial device management |
Relationship Between Cisco SDM and CCP
Cisco Router and Security Device Manager (SDM) was an earlier GUI-based tool for basic Cisco router and security configuration. CCP followed SDM in the product progression and served as the newer graphical management application for supported IOS routers.
Understanding this relationship is useful when reading older course material, reviewing legacy documentation, or encountering an existing router environment that refers to SDM. SDM and CCP are separate tool names, even though they address similar goals: helping administrators configure and manage routers through a GUI.
| Tool | Role | Relative Position |
|---|---|---|
| Cisco SDM | GUI tool for basic router and security configuration | Earlier tool in the product progression |
| Cisco CCP | GUI application for configuring, monitoring, and troubleshooting supported IOS routers | Successor to SDM in the product progression |
CCP GUI Compared with Cisco IOS CLI
Cisco IOS is the network operating system and command-line environment used on many Cisco routers. With the IOS CLI, an administrator enters commands directly in configuration modes. With CCP, the administrator uses GUI screens and wizards that apply the corresponding IOS configuration to the router.
| Consideration | CCP GUI | Cisco IOS CLI |
|---|---|---|
| Ease of initial configuration | Guided screens can make common setup easier for beginners | Requires knowledge of commands, modes, and syntax |
| Guided workflows | Wizards collect settings and help sequence common tasks | Administrator determines the command sequence directly |
| Feature depth | Limited to features exposed and supported by the application, platform, and IOS version | Provides direct access to the IOS features and commands supported by the device |
| Configuration visibility | Shows settings through categories, forms, and status views | Shows the actual command-based configuration and command output |
| Troubleshooting flexibility | Convenient for common diagnostics and visual status checks | More flexible for detailed inspection, unusual faults, and advanced troubleshooting |
| Required administrator skill | Less command syntax knowledge is needed initially | Strong IOS and networking knowledge is important |
Advantages of the GUI
- Guided setup reduces syntax mistakes during common tasks.
- Configuration categories make available functions easier to discover.
- Status and monitoring views provide a visual summary of device operation.
- New administrators can perform standard configuration tasks while building IOS knowledge.
Limitations of the GUI
- Feature availability depends on the router platform and IOS software support.
- The application may not expose every advanced command or design option.
- A generated configuration can still be logically incorrect if the administrator supplies unsuitable values.
- Advanced troubleshooting may require CLI commands and direct inspection of IOS output.
Regardless of the interface used, validate the generated configuration and the operational result. A successful wizard completion does not prove that the network policy, routing, security, or connectivity is correct.
Choosing the Appropriate Tool
- Choose full CCP when you need broader GUI-based administration from a Windows workstation or need to organize and manage multiple supported routers.
- Choose CCP Express when basic or initial management of an individual device is sufficient and the embedded feature set meets the requirement.
- Use IOS CLI when the required feature is unavailable in the GUI, when detailed verification is needed, or when troubleshooting requires advanced command output.
- Recognize SDM terminology when working with older training material or legacy environments.
Prerequisites
Before studying CCP, it helps to understand the purpose of a router, basic LAN and WAN concepts, IP addressing, router interfaces, and the basic structure of Cisco IOS configuration modes. Familiarity with NAT, firewalling, VPNs, DHCP, DNS, and QoS makes the corresponding CCP workflows easier to understand. You should also be comfortable administering a Windows workstation and testing network connectivity.
Key Points to Remember
- CCP is a graphical management application for supported Cisco IOS routers.
- The full application is installed on a Windows administrator workstation; it is not the router operating system.
- CCP provides guided workflows for interfaces, basic services, security, VPN, QoS, monitoring, and troubleshooting.
- CCP Express is a smaller embedded device manager stored in router flash memory.
- SDM is the earlier Cisco GUI tool that CCP followed in the product progression.
- A GUI simplifies common tasks, but platform and IOS support limit feature availability.
- Administrators should validate both generated IOS configuration and real operational behavior.
- CLI knowledge remains important for advanced configuration and troubleshooting.
For a related reference, see Cisco Configuration Professional Overview.