SMC-152 | Cisco Systems SMC-127 instruction

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

•You must first remove a node from a non-owner SDR before it can be reassigned to another non-owner SDR.

•To remove a node from the owner SDR inventory, assign the node to an non-owner SDR.

•The owner SDR cannot be removed, and the owner DSDRSC (DSC) cannot be removed.

Removing Nodes from a Secure Domain Router in a Cisco CRS-1 Router

SUMMARY STEPS

1.admin

2.configure

3.sdr sdr-name

4.no location partially-qualified-nodeid or

no location pair-name

5.end or commit

DETAILED STEPS

	Command or Action	Purpose
Step 1
Step 1	admin	Enters Administration EXEC mode.
	Example:
	RP/0/RP0/CPU0:router# admin
Step 2
Step 2	configure	Enters Administration configuration mode.
	Example:
	RP/0/RP0/CPU0:router(admin)# configure
Step 3
Step 3	sdr sdr-name	Enters the SDR configuration submode for the specified SDR.
	Example:
	RP/0/RP0/CPU0:router(admin-config)# sdr
	rname

Cisco IOS XR System Management Configuration Guide

SMC-152

Image 26

Cisco Systems SMC-127 manual SMC-152

Contents

Configuring Secure Domain Routers on Cisco IOS XR Software Contents Prerequisites for Configuring Secure Domain Routers SMC-128 Owner SDR and Administration Configuration Mode Information About Configuring Secure Domain RoutersWhat Is a Secure Domain Router? SMC-129 Root-System Users SDR Access PrivilegesNon-Owner SDRs SMC-130 SMC-131 Root-lr UsersOther SDR Users SMC-132 Designated Secure Domain Router System Controller DsdrscDSCs and DSDRSCs in a Cisco CRS-1 Router DSC and DSDRSCs in a Cisco XR 12000 Series Router SMC-133 SMC-134 Default Software Profile for SDRs Default Configuration for New Non-Owner SDRsRemoving a Dsdrsc Configuration SMC-135 High Availability Implications Fault IsolationRebooting an SDR Dsdrsc Redundancy Cisco IOS XR Software Package Management SMC-137 DSC Migration on Cisco CRS-1 Multishelf Systems SMC-138 Caveats SMC-139 Creating SDRs How to Configure Secure Domain RoutersContents Summary Steps SMC-141 SMC-142 Command or Action PurposeExample To assign an RP pair as the Dsdrsc To assign a DRP pair as the DsdrscTo assign a single DRP node as the Dsdrsc SMC-143 To add an RP pair To add a single nodeTo add a DRP pair SMC-144 Creating SDRs in a 12000 Series Router SMC-145 Cisco XR 12000 Series Router section on page SMC-133 DSDRSCs in a Cisco XR 12000 Series Router section onSee the DSC and DSDRSCs in a SMC-146 Refer to the Adding Nodes to a Non-Owner SDR section SMC-147 SMC-148 Adding Nodes to a Non-Owner SDRAdding Nodes to an SDR in a Cisco CRS-1 Router Creating SDRs in a Cisco CRS-1 Router SMC-149 Adding Nodes to an SDR in a Cisco XR 12000 Series Router SMC-150 SMC-151 Removing Nodes and SDRsA Cisco XR 12000 Series Router section on SMC-152 To remove a DRP pair To remove a DsdrscTo remove a single node To remove an RP pair SMC-154 SMC-155 Nodes to an SDR in a Cisco XR 12000 Series RouterSection on page SMC-150 Removing a Secure Domain Router SMC-156 Configuring a Username and Password for a Non-Owner SDR SMC-157 Group root-lr End or commit Exit SMC-158 System Security Configuration Guide for more SMC-159 SMC-160 SMC-161 Disabling Remote Login for SDRsSee Disabling Remote Login for SDRs, page SMC-161for Creating an SDR on a Cisco XR 12000 Series Router Configuration Examples for Secure Domain RoutersCreating a New SDR on a Cisco CRS-1 Router SMC-162 SMC-163 Standards Additional ReferencesRelated Documents MIBs RFCs Title RFCsTechnical Assistance Description Link SMC-166