Cisco Systems SMC-127 manual Creating SDRs in a Cisco CRS-1 Router, SMC-149

Page 23

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

DETAILED STEPS

 

Command or Action

Purpose

Step 1

 

 

admin

Enters Administration EXEC mode.

 

Example:

 

 

RP/0/RP0/CPU0:router# admin

 

Step 2

 

 

configure

Enters Administration configuration mode.

 

Example:

 

 

RP/0/RP0/CPU0:router(admin)# configure

 

Step 3

 

 

sdr sdr-name

Enters the SDR configuration submode for the specified SDR.

 

 

• sdr-nameis the name assigned to the SDR.

 

Example:

 

 

RP/0/RP0/CPU0:router(admin-config)# sdr

 

 

rname

 

Step 4

 

 

location partially-qualified-nodeid

Adds additional nodes, DRP pairs, or RP pairs to an SDR.

 

or

 

 

location pair-name

To add a single node

 

 

 

Example:

Enter the location partially-qualified-nodeid command. The

 

value of the partially-qualified-nodeidargument is entered in the

 

RP/0/RP0/CPU0:router(admin-config-sdr:rnam

 

e2)# location 0/0/*

rack/slot/* notation. Node IDs are always specified at the slot

 

or

level, so the wildcard (*) is used to specify the CPU.

 

RP/0/RP0/CPU0:router(admin-config-sdr:rnam

 

 

e2)# location drp1

To add a DRP pair

 

or

 

You must you must first create a pair as described in step 3 and

 

RP/0/RP0/CPU0:router(admin-config-sdr:rnam

 

e)# location 0/RP*/*

step 4 of Creating SDRs in a Cisco CRS-1 Router,

 

 

page SMC-140. Once the DRP pair is created, enter the

 

 

location pair-namecommand. pair-nameis the name assigned to

 

 

the DRP pair.

 

 

To add an RP pair

 

 

Enter the location partially-qualified-nodeid command. The

 

 

value of the partially-qualified-nodeidargument for RPs is

 

 

entered in the rack/RP*/* notation. This command assigns the

 

 

redundant RP pair to the SDR. You cannot assign single RPs to an

 

 

SDR in the Cisco CRS-1.

 

 

 

Cisco IOS XR System Management Configuration Guide

SMC-149

Page 22 Page 24
Image 23
Page 22 Page 24
Contents Contents Configuring Secure Domain Routers on Cisco IOS XR SoftwareSMC-128 Prerequisites for Configuring Secure Domain RoutersSMC-129 Information About Configuring Secure Domain RoutersWhat Is a Secure Domain Router? Owner SDR and Administration Configuration ModeSMC-130 SDR Access PrivilegesNon-Owner SDRs Root-System UsersSMC-131 Root-lr UsersOther SDR Users SMC-132 Designated Secure Domain Router System Controller DsdrscDSCs and DSDRSCs in a Cisco CRS-1 Router SMC-133 DSC and DSDRSCs in a Cisco XR 12000 Series RouterSMC-134 SMC-135 Default Configuration for New Non-Owner SDRsRemoving a Dsdrsc Configuration Default Software Profile for SDRsDsdrsc Redundancy Fault IsolationRebooting an SDR High Availability ImplicationsSMC-137 Cisco IOS XR Software Package ManagementSMC-138 DSC Migration on Cisco CRS-1 Multishelf SystemsSMC-139 CaveatsCreating SDRs How to Configure Secure Domain RoutersContents SMC-141 Summary StepsSMC-142 Command or Action PurposeExample SMC-143 To assign a DRP pair as the DsdrscTo assign a single DRP node as the Dsdrsc To assign an RP pair as the DsdrscSMC-144 To add a single nodeTo add a DRP pair To add an RP pairSMC-145 Creating SDRs in a 12000 Series RouterSMC-146 DSDRSCs in a Cisco XR 12000 Series Router section onSee the DSC and DSDRSCs in a Cisco XR 12000 Series Router section on page SMC-133SMC-147 Refer to the Adding Nodes to a Non-Owner SDR sectionSMC-148 Adding Nodes to a Non-Owner SDRAdding Nodes to an SDR in a Cisco CRS-1 Router SMC-149 Creating SDRs in a Cisco CRS-1 RouterSMC-150 Adding Nodes to an SDR in a Cisco XR 12000 Series RouterSMC-151 Removing Nodes and SDRsA Cisco XR 12000 Series Router section on SMC-152 To remove an RP pair To remove a DsdrscTo remove a single node To remove a DRP pairSMC-154 SMC-155 Nodes to an SDR in a Cisco XR 12000 Series RouterSection on page SMC-150 SMC-156 Removing a Secure Domain RouterSMC-157 Configuring a Username and Password for a Non-Owner SDRSMC-158 Group root-lr End or commit ExitSMC-159 System Security Configuration Guide for moreSMC-160 SMC-161 Disabling Remote Login for SDRsSee Disabling Remote Login for SDRs, page SMC-161for SMC-162 Configuration Examples for Secure Domain RoutersCreating a New SDR on a Cisco CRS-1 Router Creating an SDR on a Cisco XR 12000 Series RouterSMC-163 MIBs Additional ReferencesRelated Documents StandardsDescription Link RFCsTechnical Assistance RFCs TitleSMC-166
Top Page Image Contents