Cisco Systems SMC-127 manual SMC-160

Page 34

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

 

Command or Action

Purpose

Step 7

 

 

Log in to the non-owner SDR using admin plane

Logs a root-system user into the SDR using admin plane

 

authentication:

authentication.

 

Username:xxxx@admin

Note Where it says “Username:xxxx@admin,” replace

 

Password:xxxx

xxxx with your username.

 

Example:

 

 

Username:xxxx@admin

 

 

Password:xxxx

 

Step 8

 

 

configure

Enters configuration mode.

 

Example:

 

 

RP/0/RP0/CPU0:router# configure

 

Step 9

 

 

username username

Defines an SDR username and enters username

 

 

configuration mode.

 

Example:

The user-nameargument can be only one word. Spaces and

 

RP/0/RP0/CPU0:router(config)# username user1

quotation marks are not allowed.

Step 10

 

 

secret password

Defines a password for the user.

 

Example:

 

 

RP/0/RP0/CPU0:router(config-un)# secret 5 XXXX

 

Step 11

 

 

group root-lr

Adds the user to the predefined root-lr group.

 

 

Note Only users with root-system authority or root-lr

 

Example:

authority may use this option.

 

RP/0/RP0/CPU0:router(config-un)# group root-lr

 

Step 12

 

 

end

Saves configuration changes.

 

or

When you issue the end command, the system prompts

 

 

 

commit

you to commit changes:

 

 

Uncommitted changes found. Commit them?

 

Example:

Entering yes saves configuration changes to the

 

RP/0/RP0/CPU0:router (config)# end

running configuration file, exits the configuration

 

or

session, and returns the router to EXEC mode.

 

 

 

RP/0/RP0/CPU0:router(config)# commit

Entering no exits the configuration session and

 

 

 

 

returns the router to EXEC mode without

 

 

committing the configuration changes.

 

 

Entering cancel leaves the user in the same

 

 

command mode without committing the

 

 

configuration changes.

 

 

Use the commit command to save the configuration

 

 

changes to the running configuration file and remain

 

 

within the configuration session.

Step 13

 

 

exit

Closes the active terminal session and log off the router.

 

Example:

 

 

exit

 

 

 

 

Cisco IOS XR System Management Configuration Guide

SMC-160

Image 34
Contents Configuring Secure Domain Routers on Cisco IOS XR Software ContentsPrerequisites for Configuring Secure Domain Routers SMC-128Owner SDR and Administration Configuration Mode Information About Configuring Secure Domain RoutersWhat Is a Secure Domain Router? SMC-129Root-System Users SDR Access PrivilegesNon-Owner SDRs SMC-130Other SDR Users Root-lr UsersSMC-131 DSCs and DSDRSCs in a Cisco CRS-1 Router Designated Secure Domain Router System Controller DsdrscSMC-132 DSC and DSDRSCs in a Cisco XR 12000 Series Router SMC-133SMC-134 Default Software Profile for SDRs Default Configuration for New Non-Owner SDRsRemoving a Dsdrsc Configuration SMC-135High Availability Implications Fault IsolationRebooting an SDR Dsdrsc RedundancyCisco IOS XR Software Package Management SMC-137DSC Migration on Cisco CRS-1 Multishelf Systems SMC-138Caveats SMC-139Contents How to Configure Secure Domain RoutersCreating SDRs Summary Steps SMC-141Example Command or Action PurposeSMC-142 To assign an RP pair as the Dsdrsc To assign a DRP pair as the DsdrscTo assign a single DRP node as the Dsdrsc SMC-143To add an RP pair To add a single nodeTo add a DRP pair SMC-144Creating SDRs in a 12000 Series Router SMC-145Cisco XR 12000 Series Router section on page SMC-133 DSDRSCs in a Cisco XR 12000 Series Router section onSee the DSC and DSDRSCs in a SMC-146Refer to the Adding Nodes to a Non-Owner SDR section SMC-147Adding Nodes to an SDR in a Cisco CRS-1 Router Adding Nodes to a Non-Owner SDRSMC-148 Creating SDRs in a Cisco CRS-1 Router SMC-149Adding Nodes to an SDR in a Cisco XR 12000 Series Router SMC-150A Cisco XR 12000 Series Router section on Removing Nodes and SDRsSMC-151 SMC-152 To remove a DRP pair To remove a DsdrscTo remove a single node To remove an RP pairSMC-154 Section on page SMC-150 Nodes to an SDR in a Cisco XR 12000 Series RouterSMC-155 Removing a Secure Domain Router SMC-156Configuring a Username and Password for a Non-Owner SDR SMC-157Group root-lr End or commit Exit SMC-158System Security Configuration Guide for more SMC-159SMC-160 See Disabling Remote Login for SDRs, page SMC-161for Disabling Remote Login for SDRsSMC-161 Creating an SDR on a Cisco XR 12000 Series Router Configuration Examples for Secure Domain RoutersCreating a New SDR on a Cisco CRS-1 Router SMC-162SMC-163 Standards Additional ReferencesRelated Documents MIBsRFCs Title RFCsTechnical Assistance Description LinkSMC-166