Cisco Systems SMC-127 Removing Nodes and SDRs, A Cisco XR 12000 Series Router section on, SMC-151

Page 25

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

 

Command or Action

Purpose

Step 4

 

 

location partially-qualified-nodeid

Adds additional nodes to the SDR.

 

 

Enter the value of the partially-qualified-nodeid

 

Example:

argument to specify a single node. The value of the

 

RP/0/0/CPU0:router(admin-config-sdr:rname)#

nodeid argument is entered in the rack/slot/*

 

location 0/5/*

notation. Node IDs are always specified at the slot

 

 

level, so the wildcard (*) is used to specify the CPU.

 

 

If you add an RP installed in a redundancy slot next

 

 

to the DSDRSC, then the second RP becomes the

 

 

standby DSDRSC. Refer to the “DSC and DSDRSCs

 

 

in a Cisco XR 12000 Series Router” section on

 

 

page SMC-133for more information.

Step 5

 

 

end

Saves configuration changes.

 

or

When you issue the end command, the system

 

 

 

commit

prompts you to commit changes:

 

 

Uncommitted changes found. Commit them?

 

Example:

Entering yes saves configuration changes to the

 

RP/0/0/CPU0:router

running configuration file, exits the

 

(admin-config-sdr:rname2)# end

configuration session, and returns the router to

 

or

 

EXEC mode.

 

 

 

RP/0/0/CPU0:router(admin-config-sdr:rname2)#

Entering no exits the configuration session and

 

commit

 

returns the router to EXEC mode without

 

 

 

 

committing the configuration changes.

 

 

Entering cancel leaves the user in the same

 

 

command mode without committing the

 

 

configuration changes.

 

 

Use the commit command to save the configuration

 

 

changes to the running configuration file and remain

 

 

within the configuration session.

 

 

 

Removing Nodes and SDRs

This section contains the following instructions:

Removing Nodes from a Secure Domain Router in a Cisco CRS-1 Router, page SMC-152

Removing Nodes from a Secure Domain Router: Cisco XR 12000 Series Router, page SMC-154

Removing a Secure Domain Router, page SMC-156

When removing a node or an entire SDR, the following rules apply:

When a node is removed from a non-owner SDR, it is automatically returned to the owner SDR inventory.

To remove a DSDRSC, first remove the other nodes in the SDR, and then remove the DSDRSC. This rule does not apply when the entire SDR is removed.

If all nodes are removed from a non-owner SDR, the SDR name is also removed.

To remove all nodes, including the DSDRSC, remove the SDR name. All nodes are returned to the owner SDR inventory.

Cisco IOS XR System Management Configuration Guide

SMC-151

Image 25
Contents Contents Configuring Secure Domain Routers on Cisco IOS XR SoftwareSMC-128 Prerequisites for Configuring Secure Domain RoutersWhat Is a Secure Domain Router? Information About Configuring Secure Domain RoutersOwner SDR and Administration Configuration Mode SMC-129Non-Owner SDRs SDR Access PrivilegesRoot-System Users SMC-130Other SDR Users Root-lr UsersSMC-131 DSCs and DSDRSCs in a Cisco CRS-1 Router Designated Secure Domain Router System Controller DsdrscSMC-132 SMC-133 DSC and DSDRSCs in a Cisco XR 12000 Series RouterSMC-134 Removing a Dsdrsc Configuration Default Configuration for New Non-Owner SDRsDefault Software Profile for SDRs SMC-135Rebooting an SDR Fault IsolationHigh Availability Implications Dsdrsc RedundancySMC-137 Cisco IOS XR Software Package ManagementSMC-138 DSC Migration on Cisco CRS-1 Multishelf SystemsSMC-139 CaveatsContents How to Configure Secure Domain RoutersCreating SDRs SMC-141 Summary StepsExample Command or Action PurposeSMC-142 To assign a single DRP node as the Dsdrsc To assign a DRP pair as the DsdrscTo assign an RP pair as the Dsdrsc SMC-143To add a DRP pair To add a single nodeTo add an RP pair SMC-144SMC-145 Creating SDRs in a 12000 Series RouterSee the DSC and DSDRSCs in a DSDRSCs in a Cisco XR 12000 Series Router section onCisco XR 12000 Series Router section on page SMC-133 SMC-146SMC-147 Refer to the Adding Nodes to a Non-Owner SDR sectionAdding Nodes to an SDR in a Cisco CRS-1 Router Adding Nodes to a Non-Owner SDRSMC-148 SMC-149 Creating SDRs in a Cisco CRS-1 RouterSMC-150 Adding Nodes to an SDR in a Cisco XR 12000 Series RouterA Cisco XR 12000 Series Router section on Removing Nodes and SDRsSMC-151 SMC-152 To remove a single node To remove a DsdrscTo remove a DRP pair To remove an RP pairSMC-154 Section on page SMC-150 Nodes to an SDR in a Cisco XR 12000 Series RouterSMC-155 SMC-156 Removing a Secure Domain RouterSMC-157 Configuring a Username and Password for a Non-Owner SDRSMC-158 Group root-lr End or commit ExitSMC-159 System Security Configuration Guide for moreSMC-160 See Disabling Remote Login for SDRs, page SMC-161for Disabling Remote Login for SDRsSMC-161 Creating a New SDR on a Cisco CRS-1 Router Configuration Examples for Secure Domain RoutersCreating an SDR on a Cisco XR 12000 Series Router SMC-162SMC-163 Related Documents Additional ReferencesStandards MIBsTechnical Assistance RFCsRFCs Title Description LinkSMC-166