Contents | Cisco Systems SMC-127 instruction

Configuring Secure Domain Routers on

Cisco IOS XR Software

Secure domain routers (SDRs) are a means of dividing a single physical system into multiple logically separated routers. SDRs are isolated from each other in terms of their resources, performance, and availability.

Note SDRs were previously known as Logical Routers (LRs). The name was changed for Release 3.3.0.

Feature History for Configuring Secure Domain Routers on Cisco IOS XR Software

Release	Modification
Release 3.2	This feature was supported on Cisco XR 12000 Series Routers.

Release 3.3.0	This feature was supported on the Cisco CRS-1.
	The term Logical Router (LR) was changed to Secure Domain Router
	(SDR).
	Support was added for distributed route processor cards (DRPs) and DRP
	pairs on the Cisco CRS-1.
	Support was added for SDR-specific software package activation on the
	Cisco CRS-1 and Cisco XR 12000 Series Routers.

Release 3.4.0	No modification.

Contents

•Prerequisites for Configuring Secure Domain Routers, page SMC-128

•Information About Configuring Secure Domain Routers, page SMC-129

•How to Configure Secure Domain Routers, page SMC-140

•Configuration Examples for Secure Domain Routers, page SMC-162

•Additional References, page SMC-164

Cisco IOS XR System Management Configuration Guide

SMC-127

Image 1

Cisco Systems SMC-127 manual Configuring Secure Domain Routers on Cisco IOS XR Software, Contents

Contents

Contents Configuring Secure Domain Routers on Cisco IOS XR Software SMC-128 Prerequisites for Configuring Secure Domain Routers What Is a Secure Domain Router? Information About Configuring Secure Domain RoutersOwner SDR and Administration Configuration Mode SMC-129 Non-Owner SDRs SDR Access PrivilegesRoot-System Users SMC-130 Other SDR Users Root-lr UsersSMC-131 DSCs and DSDRSCs in a Cisco CRS-1 Router Designated Secure Domain Router System Controller DsdrscSMC-132 SMC-133 DSC and DSDRSCs in a Cisco XR 12000 Series Router SMC-134 Removing a Dsdrsc Configuration Default Configuration for New Non-Owner SDRsDefault Software Profile for SDRs SMC-135 Rebooting an SDR Fault IsolationHigh Availability Implications Dsdrsc Redundancy SMC-137 Cisco IOS XR Software Package Management SMC-138 DSC Migration on Cisco CRS-1 Multishelf Systems SMC-139 Caveats Contents How to Configure Secure Domain RoutersCreating SDRs SMC-141 Summary Steps Example Command or Action PurposeSMC-142 To assign a single DRP node as the Dsdrsc To assign a DRP pair as the DsdrscTo assign an RP pair as the Dsdrsc SMC-143 To add a DRP pair To add a single nodeTo add an RP pair SMC-144 SMC-145 Creating SDRs in a 12000 Series Router See the DSC and DSDRSCs in a DSDRSCs in a Cisco XR 12000 Series Router section onCisco XR 12000 Series Router section on page SMC-133 SMC-146 SMC-147 Refer to the Adding Nodes to a Non-Owner SDR section Adding Nodes to an SDR in a Cisco CRS-1 Router Adding Nodes to a Non-Owner SDRSMC-148 SMC-149 Creating SDRs in a Cisco CRS-1 Router SMC-150 Adding Nodes to an SDR in a Cisco XR 12000 Series Router A Cisco XR 12000 Series Router section on Removing Nodes and SDRsSMC-151 SMC-152 To remove a single node To remove a DsdrscTo remove a DRP pair To remove an RP pair SMC-154 Section on page SMC-150 Nodes to an SDR in a Cisco XR 12000 Series RouterSMC-155 SMC-156 Removing a Secure Domain Router SMC-157 Configuring a Username and Password for a Non-Owner SDR SMC-158 Group root-lr End or commit Exit SMC-159 System Security Configuration Guide for more SMC-160 See Disabling Remote Login for SDRs, page SMC-161for Disabling Remote Login for SDRsSMC-161 Creating a New SDR on a Cisco CRS-1 Router Configuration Examples for Secure Domain RoutersCreating an SDR on a Cisco XR 12000 Series Router SMC-162 SMC-163 Related Documents Additional ReferencesStandards MIBs Technical Assistance RFCsRFCs Title Description Link SMC-166