Group root-lr End or commit Exit, SMC-158 | Cisco Systems SMC-127

Configuring Secure Domain Routers on Cisco IOS XR Software

How to Configure Secure Domain Routers

5.end or commit

6.Connect a terminal to the console port of the non-owner SDR DSDRSC.

7.Log in to the non-owner SDR using admin plane authentication:

Username:username@admin

Password:xxxx

8.configure

9.username username

10.secret password

11.group root-lr

12.end or commit

13.exit

14.Username:username

Password:xxxx

15.Provide the new username and password to the user.

16.Disable admin plane authentication as described in the “Disabling Remote Login for SDRs” section on page SMC-161.

DETAILED STEPS

	Command or Action	Purpose
Step 1
Step 1	Connect a terminal to the console port of the DSC	Note If an IP address has not yet been assigned to the
	(DSDRSC of the owner SDR).	Management Ethernet port, you must connect a
		terminal directly to the console port of the DSC.
Step 2
Step 2	admin	Enters Administration EXEC mode.
	Example:
	RP/0/RP0/CPU0:router# admin
Step 3
Step 3	configure	Enters Administration configuration mode.
	Example:
	RP/0/RP0/CPU0:router(admin)# configure

Cisco IOS XR System Management Configuration Guide

SMC-158

Image 32

Cisco Systems SMC-127 manual Group root-lr End or commit Exit, SMC-158

Contents

Configuring Secure Domain Routers on Cisco IOS XR Software Contents Prerequisites for Configuring Secure Domain Routers SMC-128 Information About Configuring Secure Domain Routers What Is a Secure Domain Router?Owner SDR and Administration Configuration Mode SMC-129 SDR Access Privileges Non-Owner SDRsRoot-System Users SMC-130 SMC-131 Root-lr UsersOther SDR Users SMC-132 Designated Secure Domain Router System Controller DsdrscDSCs and DSDRSCs in a Cisco CRS-1 Router DSC and DSDRSCs in a Cisco XR 12000 Series Router SMC-133 SMC-134 Default Configuration for New Non-Owner SDRs Removing a Dsdrsc ConfigurationDefault Software Profile for SDRs SMC-135 Fault Isolation Rebooting an SDRHigh Availability Implications Dsdrsc Redundancy Cisco IOS XR Software Package Management SMC-137 DSC Migration on Cisco CRS-1 Multishelf Systems SMC-138 Caveats SMC-139 Creating SDRs How to Configure Secure Domain RoutersContents Summary Steps SMC-141 SMC-142 Command or Action PurposeExample To assign a DRP pair as the Dsdrsc To assign a single DRP node as the DsdrscTo assign an RP pair as the Dsdrsc SMC-143 To add a single node To add a DRP pairTo add an RP pair SMC-144 Creating SDRs in a 12000 Series Router SMC-145 DSDRSCs in a Cisco XR 12000 Series Router section on See the DSC and DSDRSCs in aCisco XR 12000 Series Router section on page SMC-133 SMC-146 Refer to the Adding Nodes to a Non-Owner SDR section SMC-147 SMC-148 Adding Nodes to a Non-Owner SDRAdding Nodes to an SDR in a Cisco CRS-1 Router Creating SDRs in a Cisco CRS-1 Router SMC-149 Adding Nodes to an SDR in a Cisco XR 12000 Series Router SMC-150 SMC-151 Removing Nodes and SDRsA Cisco XR 12000 Series Router section on SMC-152 To remove a Dsdrsc To remove a single nodeTo remove a DRP pair To remove an RP pair SMC-154 SMC-155 Nodes to an SDR in a Cisco XR 12000 Series RouterSection on page SMC-150 Removing a Secure Domain Router SMC-156 Configuring a Username and Password for a Non-Owner SDR SMC-157 Group root-lr End or commit Exit SMC-158 System Security Configuration Guide for more SMC-159 SMC-160 SMC-161 Disabling Remote Login for SDRsSee Disabling Remote Login for SDRs, page SMC-161for Configuration Examples for Secure Domain Routers Creating a New SDR on a Cisco CRS-1 RouterCreating an SDR on a Cisco XR 12000 Series Router SMC-162 SMC-163 Additional References Related DocumentsStandards MIBs RFCs Technical AssistanceRFCs Title Description Link SMC-166