Cisco Cisco 3G Wireless WAN (1xRTT, EVDO Rev A Rel 0) HWIC - Verizon

SIM Security Guide for ISR and CGR with Verizon Wireless 4G LTE

SIM Status = OK
SIM User Operation Required = None
Number of CHV1 Retries remaining = 3
c1941_DrMx#

### SIM is in unlock state ###

c1941_DrMx#

cellular 0/0/0 lte sim lock 1111

!!!WARNING: SIM will be locked with pin=1111(4).
Do not enter new PIN to lock SIM. Enter PIN that the SIM is configured with.
Call will be disconnected!!!
Are you sure you want to proceed?[confirm]
c1941_DrMx#
Apr 26 21:22:34.555: %CELLWAN-2-MODEM_DOWN: Modem in HWIC slot 0/0 is DOWN
Apr 26 21:23:06.495: %CELLWAN-2-MODEM_UP: Modem in HWIC slot 0/0 is now UP
c1941_DrMx#
c1941_DrMx#

sh cellular 0/0/0 security

Card Holder Verification (CHV1) = Enabled
SIM Status = Locked
SIM User Operation Required = Enter CHV1
Number of CHV1 Retries remaining = 3
c1941_DrMx#

### SIM is in lock state. SIM needs to be in lock state for SIM authentication to work. ###
### With PIN configured in IOS, calls are established without manual intervention. ###

c1941_DrMx#
c1941_DrMx#

conf term

Enter configuration commands, one per line. End with CNTL/Z.
c1941_DrMx(config)#controller cellular 0/0
c1941_DrMx(config-controller)#

lte sim authenticate 0 1111

CHV1 configured and sent to modem for verification
c1941_DrMx(config-controller)#

end

c1941_DrMx#
Apr 26 21:23:50.571: %SYS-5-CONFIG_I: Configured from console by console
c1941_DrMx#
c1941_DrMx#

sh cellular 0/0/0 security

Card Holder Verification (CHV1) = Enabled
SIM Status = OK
SIM User Operation Required = None
Number of CHV1 Retries remaining = 3
c1941_DrMx#

### SIM now in lock state but can be used for connectivity since authentication is good. ###
### Authentication can be saved in startup-config so when with ISR boots with     ###
### the locked SIM, connection can be established.                                                    ###

### SIM is in lock state. Authenticating SIM as above, but using an encrypted PIN ###
### Create an encrypted PIN via IOS config commands, use the encrypted PIN for ###
### for the authenticate command, then remove the config used to encrypt PIN     ###

1921_LTE#

config term

Enter configuration commands, one per line. End with CNTL/Z.
1921_LTE(config)#

service password-encryption

1921_LTE(config)#

username SIM priv 0 password 1111

1921_LTE(config)#

do show run | i SIM

username SIM privilege 0 password 7 055A575E70
1921_LTE(config)#
1921_LTE(config)#

contr cell 0/0

1921_LTE(config-controller)#

lte sim auth 7 055A575E70

CHV1 configured and sent to modem for verification