Cisco Systems SMC-127 manual Refer to the Adding Nodes to a Non-Owner SDR section, SMC-147

Page 21

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

Step 6

Step 7

Step 8

Step 9

Step 10

Step 11

Command or Action

Purpose

 

 

location partially-qualified-nodeid

Assigns additional nodes to the SDR.

 

Enter the value of the partially-qualified-nodeidargument

Example:

to specify a single node. The value of the nodeid argument

RP/0/0/CPU0:router(admin-config-sdr:rname)#

is entered in the rack/slot/* notation. Node IDs are always

location 0/5/*

specified at the slot level, so the wildcard (*) is used to

 

specify the CPU.

 

Refer to the “Adding Nodes to a Non-Owner SDR” section

 

on page SMC-148for more information.

 

 

Repeat Step 6 as needed to add additional nodes to

Adds additional nodes to the SDR.

the SDR.

 

 

 

exit

(Optional) Exits the SDR configuration submode and returns to

 

Administration configuration mode.

 

Note Complete this step only if you need to create additional

 

SDRs.

 

 

Repeat Step 3 through Step 7 as needed to create

Creates additional SDRs.

additional SDRs.

 

 

 

end

Saves configuration changes.

or

When you issue the end command, the system prompts you

 

commit

to commit changes:

 

Uncommitted changes found. Commit them?

Example:

Entering yes saves configuration changes to the

RP/0/0/CPU0:router

running configuration file, exits the configuration

(admin-config-sdr:rname)# end

session, and returns the router to EXEC mode.

or

Entering no exits the configuration session and returns

RP/0/0/CPU0:router(admin-config-sdr:rname)#

the router to EXEC mode without committing the

commit

configuration changes.

 

 

Entering cancel leaves the user in the same command

 

mode without committing the configuration changes.

 

Use the commit command to save the configuration

 

changes to the running configuration file and remain within

 

the configuration session.

 

 

Create a username and password for the new SDR.

(Optional) Refer to the “Configuring a Username and Password

 

for a Non-Owner SDR” section on page SMC-157.

 

 

Cisco IOS XR System Management Configuration Guide

SMC-147

Image 21
Contents Contents Configuring Secure Domain Routers on Cisco IOS XR SoftwareSMC-128 Prerequisites for Configuring Secure Domain RoutersWhat Is a Secure Domain Router? Information About Configuring Secure Domain RoutersOwner SDR and Administration Configuration Mode SMC-129Non-Owner SDRs SDR Access PrivilegesRoot-System Users SMC-130Root-lr Users Other SDR UsersSMC-131 Designated Secure Domain Router System Controller Dsdrsc DSCs and DSDRSCs in a Cisco CRS-1 RouterSMC-132 SMC-133 DSC and DSDRSCs in a Cisco XR 12000 Series RouterSMC-134 Removing a Dsdrsc Configuration Default Configuration for New Non-Owner SDRsDefault Software Profile for SDRs SMC-135Rebooting an SDR Fault IsolationHigh Availability Implications Dsdrsc RedundancySMC-137 Cisco IOS XR Software Package ManagementSMC-138 DSC Migration on Cisco CRS-1 Multishelf SystemsSMC-139 CaveatsHow to Configure Secure Domain Routers ContentsCreating SDRs SMC-141 Summary StepsCommand or Action Purpose ExampleSMC-142 To assign a single DRP node as the Dsdrsc To assign a DRP pair as the DsdrscTo assign an RP pair as the Dsdrsc SMC-143To add a DRP pair To add a single nodeTo add an RP pair SMC-144SMC-145 Creating SDRs in a 12000 Series RouterSee the DSC and DSDRSCs in a DSDRSCs in a Cisco XR 12000 Series Router section onCisco XR 12000 Series Router section on page SMC-133 SMC-146SMC-147 Refer to the Adding Nodes to a Non-Owner SDR sectionAdding Nodes to a Non-Owner SDR Adding Nodes to an SDR in a Cisco CRS-1 RouterSMC-148 SMC-149 Creating SDRs in a Cisco CRS-1 RouterSMC-150 Adding Nodes to an SDR in a Cisco XR 12000 Series RouterRemoving Nodes and SDRs A Cisco XR 12000 Series Router section onSMC-151 SMC-152 To remove a single node To remove a DsdrscTo remove a DRP pair To remove an RP pairSMC-154 Nodes to an SDR in a Cisco XR 12000 Series Router Section on page SMC-150SMC-155 SMC-156 Removing a Secure Domain RouterSMC-157 Configuring a Username and Password for a Non-Owner SDRSMC-158 Group root-lr End or commit ExitSMC-159 System Security Configuration Guide for moreSMC-160 Disabling Remote Login for SDRs See Disabling Remote Login for SDRs, page SMC-161forSMC-161 Creating a New SDR on a Cisco CRS-1 Router Configuration Examples for Secure Domain RoutersCreating an SDR on a Cisco XR 12000 Series Router SMC-162SMC-163 Related Documents Additional ReferencesStandards MIBsTechnical Assistance RFCsRFCs Title Description LinkSMC-166