Instruction/ maintenance manual of the product SMC-127 Cisco Systems
Go to page of 40
SMC-127 Cisco IOS XR System Managem ent Configu ration Guide Configuring Secure Domain Routers on Cisco IOS XR Software Secure domain router s (SDRs) are a means of di vid ing a single physical system i nto multiple logically separated routers. SDRs are isolat ed from each other i n terms of th eir resources, performance, and av ai lability .
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Prerequisites for Configuring Sec ure Domain Routers SMC-128 Cisco IOS XR System Management Configuration Guide Prerequisites for Configur.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-129 Cisco IOS XR System Managem ent Configu ration Guide Information About Config.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-130 Cisco IOS XR System Management Configuration Guide See the “SDR Access Privileg es” section on page SMC-130 for more information.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-131 Cisco IOS XR System Managem ent Configu ration Guide • Ability to assign nodes (RPs, DRPs, and LCs) to SDRs. • Ability to create other users wi th similar or lo wer priv ileges.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-132 Cisco IOS XR System Management Configuration Guide Designated Secure Domain .
Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-133 Cisco IOS XR System Managem ent Configu ration Guide • DRPs are supported in the Cisco CRS-1 only . DRPs are not supported in the Cisco XR 12000 Series Routers.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-134 Cisco IOS XR System Management Configuration Guide Designated System Control.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-135 Cisco IOS XR System Managem ent Configu ration Guide Removing a DSDRSC Config.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-136 Cisco IOS XR System Management Configuration Guide High Availability Implica.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-137 Cisco IOS XR System Managem ent Configu ration Guide another 30 seconds.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-138 Cisco IOS XR System Management Configuration Guide • T o access install commands, you must be a member of the root-sy stem user group wi th access to the Administration EXEC m ode.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-139 Cisco IOS XR System Managem ent Configu ration Guide which is also the ne w DSDRSC. This operation take s som e time, during which routi ng protocols such as BGP that use loopback or null interfaces are af f ected.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-140 Cisco IOS XR System Management Configuration Guide How to Configure Secure Domain Routers T o create an SDR, configure an SDR name and then add nodes to the configuration .
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-141 Cisco IOS XR System Managem ent Configu ration Guide Complete the follo wing steps to create a non-o wner SDR. Note The procedures in this section can be pe rformed only on a router th at is already running the Cisco IOS XR software.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-142 Cisco IOS XR System Management Configuration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administration EXEC mode.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-143 Cisco IOS XR System Managem ent Configu ration Guide Step 7 pair pair-name primary or locati.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-144 Cisco IOS XR System Management Configuration Guide Step 8 location partially-qualified-nod.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-145 Cisco IOS XR System Managem ent Configu ration Guide Creating SDRs in a 12000 Series Router .
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-146 Cisco IOS XR System Management Configuration Guide Step 3 sdr sdr-name Example: RP/0/0/CPU0:router(admin-config)# sdr rname Enters the Administratio n conf iguration mode for the specif ied SDR.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-147 Cisco IOS XR System Managem ent Configu ration Guide Step 6 location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname)# location 0/5/* Assigns additional nod es to the SDR.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-148 Cisco IOS XR System Management Configuration Guide Adding Nodes to a Non-Owner SDR When adding nodes to an e xisting non-owner SDR, t he follo wing rules apply: • By default, all n odes in a ne w system belong to th e o wner SDR.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-149 Cisco IOS XR System Managem ent Configu ration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administ ration EXEC mode.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-150 Cisco IOS XR System Management Configuration Guide Adding Nodes to an SDR in a Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-151 Cisco IOS XR System Managem ent Configu ration Guide Removing Nodes and SDRs This section co.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-152 Cisco IOS XR System Management Configuration Guide • Y ou must f irst remov e a node from a non-owner SDR befo re it can be reassigned to anoth er non-o w ner SDR.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-153 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-154 Cisco IOS XR System Management Configuration Guide Removing Nodes from a Secure Domain Router: Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-155 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname2 )# no location 0/0/* Remov es a node from a non-owner SDR.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-156 Cisco IOS XR System Management Configuration Guide Removing a Secure Domain Router This section pr ovides instruction s to remove a se cure domain router from either a Cisco CRS-1 or a Cisco XR 12000 Series Router.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-157 Cisco IOS XR System Managem ent Configu ration Guide Configuring a Username and Pa ssword for a Non-Owner SDR After you create an SDR, you can create a username and password on that SDR.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-158 Cisco IOS XR System Management Configuration Guide 5. end or commit 6. Connect a terminal to t he console port of the non-o wner SDR DSDRSC. 7.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-159 Cisco IOS XR System Managem ent Configu ration Guide Step 4 aaa authentication login remote local Example: RP/0/RP0/CPU0:router(admin-config)# aaa authentication login remote local Enables admin plane authentication.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-160 Cisco IOS XR System Management Configuration Guide Step 7 Log in to the non-o wner SDR usi.
Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-161 Cisco IOS XR System Managem ent Configu ration Guide Disabling Remote Login for SDRs When you disable admin plan e authentica tion, the admin username cannot be used to log in to non-o wner SDRs.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Configuration Examples for Secure Domain Router s SMC-162 Cisco IOS XR System Management Configuration Guide Configuration Examples for Se.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Configuration Examp les for Secure Domain Rou ters SMC-163 Cisco IOS XR System Managem ent Configu ration Guide Adding nodes to an SDR: Cisc.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-164 Cisco IOS XR System Management Configuration Guide Additional References The follo wing sections provide ref erences related to SDR config uration. Related Documents Standards MIBs Related T opic Document T itle SDR command reference.
Configuring Secure Domain Ro uters on Cisco IOS XR Software Additional References SMC-165 Cisco IOS XR System Managem ent Configu ration Guide RFCs Technical Assistance RFCs T itle No ne w or modified RFCs are supported b y this feature, and support for e xisting RFCs has not been modified b y this fe ature.
Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-166 Cisco IOS XR System Management Configuration Guide.
An important point after buying a device Cisco Systems SMC-127 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Systems SMC-127 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Systems SMC-127 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Systems SMC-127 you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Systems SMC-127 will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Systems SMC-127, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Systems SMC-127.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Systems SMC-127. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Systems SMC-127 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
