Cisco Systems SMC-127 manual SMC-152

Page 26

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

•You must first remove a node from a non-owner SDR before it can be reassigned to another non-owner SDR.

•To remove a node from the owner SDR inventory, assign the node to an non-owner SDR.

•The owner SDR cannot be removed, and the owner DSDRSC (DSC) cannot be removed.

Removing Nodes from a Secure Domain Router in a Cisco CRS-1 Router

SUMMARY STEPS

1.admin

2.configure

3.sdr sdr-name

4.no location partially-qualified-nodeid or

no location pair-name

5.end or commit

DETAILED STEPS

	Command or Action	Purpose
Step 1
Step 1	admin	Enters Administration EXEC mode.
	Example:
	RP/0/RP0/CPU0:router# admin
Step 2
Step 2	configure	Enters Administration configuration mode.
	Example:
	RP/0/RP0/CPU0:router(admin)# configure
Step 3
Step 3	sdr sdr-name	Enters the SDR configuration submode for the specified SDR.
	Example:
	RP/0/RP0/CPU0:router(admin-config)# sdr
	rname

Cisco IOS XR System Management Configuration Guide

SMC-152

Image 26

Contents Configuring Secure Domain Routers on Cisco IOS XR Software ContentsPrerequisites for Configuring Secure Domain Routers SMC-128Owner SDR and Administration Configuration Mode Information About Configuring Secure Domain RoutersWhat Is a Secure Domain Router? SMC-129Root-System Users SDR Access PrivilegesNon-Owner SDRs SMC-130SMC-131 Root-lr UsersOther SDR Users SMC-132 Designated Secure Domain Router System Controller DsdrscDSCs and DSDRSCs in a Cisco CRS-1 Router DSC and DSDRSCs in a Cisco XR 12000 Series Router SMC-133SMC-134 Default Software Profile for SDRs Default Configuration for New Non-Owner SDRsRemoving a Dsdrsc Configuration SMC-135High Availability Implications Fault IsolationRebooting an SDR Dsdrsc RedundancyCisco IOS XR Software Package Management SMC-137DSC Migration on Cisco CRS-1 Multishelf Systems SMC-138Caveats SMC-139Creating SDRs How to Configure Secure Domain RoutersContents Summary Steps SMC-141SMC-142 Command or Action PurposeExample To assign an RP pair as the Dsdrsc To assign a DRP pair as the DsdrscTo assign a single DRP node as the Dsdrsc SMC-143To add an RP pair To add a single nodeTo add a DRP pair SMC-144Creating SDRs in a 12000 Series Router SMC-145Cisco XR 12000 Series Router section on page SMC-133 DSDRSCs in a Cisco XR 12000 Series Router section onSee the DSC and DSDRSCs in a SMC-146Refer to the Adding Nodes to a Non-Owner SDR section SMC-147SMC-148 Adding Nodes to a Non-Owner SDRAdding Nodes to an SDR in a Cisco CRS-1 Router Creating SDRs in a Cisco CRS-1 Router SMC-149Adding Nodes to an SDR in a Cisco XR 12000 Series Router SMC-150SMC-151 Removing Nodes and SDRsA Cisco XR 12000 Series Router section on SMC-152 To remove a DRP pair To remove a DsdrscTo remove a single node To remove an RP pairSMC-154 SMC-155 Nodes to an SDR in a Cisco XR 12000 Series RouterSection on page SMC-150 Removing a Secure Domain Router SMC-156Configuring a Username and Password for a Non-Owner SDR SMC-157Group root-lr End or commit Exit SMC-158System Security Configuration Guide for more SMC-159SMC-160 SMC-161 Disabling Remote Login for SDRsSee Disabling Remote Login for SDRs, page SMC-161for Creating an SDR on a Cisco XR 12000 Series Router Configuration Examples for Secure Domain RoutersCreating a New SDR on a Cisco CRS-1 Router SMC-162SMC-163 Standards Additional ReferencesRelated Documents MIBsRFCs Title RFCsTechnical Assistance Description LinkSMC-166