Manuel d’utilisation Cisco Systems SMC-127

40 pages 0.49 mb
Télécharger

Aller à la page of 40

Summary
  • Cisco Systems SMC-127 - page 1

    SMC-127 Cisco IOS XR System Managem ent Configu ration Guide Configuring Secure Domain Routers on Cisco IOS XR Software Secure domain router s (SDRs) are a means of di vid ing a single physical system i nto multiple logically separated routers. SDRs are isolat ed from each other i n terms of th eir resources, performance, and av ai lability . Note ...

  • Cisco Systems SMC-127 - page 2

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Prerequisites for Configuring Sec ure Domain Routers SMC-128 Cisco IOS XR System Management Configuration Guide Prerequisites for Configuring Secure Domain Routers Before conf iguring SDRs, the follo win g conditions must be met: Initial configuration • The router must be running the C ...

  • Cisco Systems SMC-127 - page 3

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-129 Cisco IOS XR System Managem ent Configu ration Guide Information About Configuring Secure Domain Routers Re vie w the follo wing topics before config uring secure domain rout ers: • What Is a Secure Domain Router?, page SMC-1 ...

  • Cisco Systems SMC-127 - page 4

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-130 Cisco IOS XR System Management Configuration Guide See the “SDR Access Privileg es” section on page SMC-130 for more information. Note The Administration modes cannot be u sed to conf igure the features wi thin a non-o wne ...

  • Cisco Systems SMC-127 - page 5

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-131 Cisco IOS XR System Managem ent Configu ration Guide • Ability to assign nodes (RPs, DRPs, and LCs) to SDRs. • Ability to create other users wi th similar or lo wer priv ileges. • Complete authority o ver the chassis. • ...

  • Cisco Systems SMC-127 - page 6

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-132 Cisco IOS XR System Management Configuration Guide Designated Secure Domain Router System Controller (DSDRSC) In a router ru nning the Ci sco IOS XR software, one Rout e Processor is assigned the role of Designated System Cont ...

  • Cisco Systems SMC-127 - page 7

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-133 Cisco IOS XR System Managem ent Configu ration Guide • DRPs are supported in the Cisco CRS-1 only . DRPs are not supported in the Cisco XR 12000 Series Routers. Note DRPs can also be used to provide addi tional proce ssing ca ...

  • Cisco Systems SMC-127 - page 8

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-134 Cisco IOS XR System Management Configuration Guide Designated System Controller (DSC) in a Cisco XR 12000 Series Router • The first RP to be boot ed with t he Cisco IOS XR software in a Cisco XR 12000 Series Router will beco ...

  • Cisco Systems SMC-127 - page 9

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-135 Cisco IOS XR System Managem ent Configu ration Guide Removing a DSDRSC Configuration There are two ways to remo ve a DSDRSC from an SDR: • First remov e all other nodes from the SDR config ur ation, and then remo ve the DSDRS ...

  • Cisco Systems SMC-127 - page 10

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-136 Cisco IOS XR System Management Configuration Guide High Availability Implications Fault Isolation Because the CPU and memory of an SDR are not shared wi th other SDRs, conf iguration problems that cause out-of-resources condi ...

  • Cisco Systems SMC-127 - page 11

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-137 Cisco IOS XR System Managem ent Configu ration Guide another 30 seconds. This causes an inconsistent sy stem view in the name d SDR us ing DRP pai red across the rack in which the DRP loses cont rol Ethernet connectivity , but ...

  • Cisco Systems SMC-127 - page 12

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-138 Cisco IOS XR System Management Configuration Guide • T o access install commands, you must be a member of the root-sy stem user group wi th access to the Administration EXEC m ode. • Most show install commands can be used ...

  • Cisco Systems SMC-127 - page 13

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-139 Cisco IOS XR System Managem ent Configu ration Guide which is also the ne w DSDRSC. This operation take s som e time, during which routi ng protocols such as BGP that use loopback or null interfaces are af f ected. Similarly , ...

  • Cisco Systems SMC-127 - page 14

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-140 Cisco IOS XR System Management Configuration Guide How to Configure Secure Domain Routers T o create an SDR, configure an SDR name and then add nodes to the configuration . In Cisco CRS-1 routers, at least one node in each SDR must be expli ...

  • Cisco Systems SMC-127 - page 15

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-141 Cisco IOS XR System Managem ent Configu ration Guide Complete the follo wing steps to create a non-o wner SDR. Note The procedures in this section can be pe rformed only on a router th at is already running the Cisco IOS XR software. F o r in ...

  • Cisco Systems SMC-127 - page 16

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-142 Cisco IOS XR System Management Configuration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administration EXEC mode. Step 2 configure Example: RP/0/RP0/CPU0:router(admin)# configure ...

  • Cisco Systems SMC-127 - page 17

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-143 Cisco IOS XR System Managem ent Configu ration Guide Step 7 pair pair-name primary or location partially-qualified-nodeid primary Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# pair drp1 primary or RP/0/RP0/CPU0:router(admin-config- ...

  • Cisco Systems SMC-127 - page 18

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-144 Cisco IOS XR System Management Configuration Guide Step 8 location partially-qualified-nodeid or location pair-name Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# location 0/0/* or RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# l ...

  • Cisco Systems SMC-127 - page 19

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-145 Cisco IOS XR System Managem ent Configu ration Guide Creating SDRs in a 12000 Series Router T o create a non-o wner SDR in a Cisco XR 12000 Seri es Router, create an SDR name, add an RP (that can act as DSDRSC) or 2 RP s in adjacent redundanc ...

  • Cisco Systems SMC-127 - page 20

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-146 Cisco IOS XR System Management Configuration Guide Step 3 sdr sdr-name Example: RP/0/0/CPU0:router(admin-config)# sdr rname Enters the Administratio n conf iguration mode for the specif ied SDR. • If this SDR does not yet e xist, it is cr ...

  • Cisco Systems SMC-127 - page 21

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-147 Cisco IOS XR System Managem ent Configu ration Guide Step 6 location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname)# location 0/5/* Assigns additional nod es to the SDR. • Enter the value of the partially-qua ...

  • Cisco Systems SMC-127 - page 22

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-148 Cisco IOS XR System Management Configuration Guide Adding Nodes to a Non-Owner SDR When adding nodes to an e xisting non-owner SDR, t he follo wing rules apply: • By default, all n odes in a ne w system belong to th e o wner SDR. When a n ...

  • Cisco Systems SMC-127 - page 23

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-149 Cisco IOS XR System Managem ent Configu ration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administ ration EXEC mode. Step 2 configure Example: RP/0/RP0/CPU0:router(admin)# configur ...

  • Cisco Systems SMC-127 - page 24

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-150 Cisco IOS XR System Management Configuration Guide Adding Nodes to an SDR in a Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3. sdr sdr-name 4. location partially-qualified-n odeid 5. end or commit DETAILED ST EPS Step 5 ...

  • Cisco Systems SMC-127 - page 25

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-151 Cisco IOS XR System Managem ent Configu ration Guide Removing Nodes and SDRs This section contains the fo llo wing instructions: • Removing No des from a Secure Domain Router in a Cisco CRS-1 Router , page SMC-152 • Removing Nodes from a ...

  • Cisco Systems SMC-127 - page 26

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-152 Cisco IOS XR System Management Configuration Guide • Y ou must f irst remov e a node from a non-owner SDR befo re it can be reassigned to anoth er non-o w ner SDR. • T o remov e a node from the o wner SDR in ventory , assign the node to ...

  • Cisco Systems SMC-127 - page 27

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-153 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid or no location pair-name Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# no location 0/0/* or RP/0/RP0/CPU0:router(admin-config-sdr:rn ...

  • Cisco Systems SMC-127 - page 28

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-154 Cisco IOS XR System Management Configuration Guide Removing Nodes from a Secure Domain Router: Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3. sdr sdr-name 4. no location partially-quali fied -nodeid 5. end or commit DE ...

  • Cisco Systems SMC-127 - page 29

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-155 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname2 )# no location 0/0/* Remov es a node from a non-owner SDR. • When a node is remo ved fr o ...

  • Cisco Systems SMC-127 - page 30

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-156 Cisco IOS XR System Management Configuration Guide Removing a Secure Domain Router This section pr ovides instruction s to remove a se cure domain router from either a Cisco CRS-1 or a Cisco XR 12000 Series Router. T o remove an SDR, you ca ...

  • Cisco Systems SMC-127 - page 31

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-157 Cisco IOS XR System Managem ent Configu ration Guide Configuring a Username and Pa ssword for a Non-Owner SDR After you create an SDR, you can create a username and password on that SDR. When you assign root-lr pri vileges to t hat username, ...

  • Cisco Systems SMC-127 - page 32

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-158 Cisco IOS XR System Management Configuration Guide 5. end or commit 6. Connect a terminal to t he console port of the non-o wner SDR DSDRSC. 7. Log in to the non-o wner SDR using admin plane authenti cation: Username: userna me @admin Passw ...

  • Cisco Systems SMC-127 - page 33

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-159 Cisco IOS XR System Managem ent Configu ration Guide Step 4 aaa authentication login remote local Example: RP/0/RP0/CPU0:router(admin-config)# aaa authentication login remote local Enables admin plane authentication. • The remote k eywo rd ...

  • Cisco Systems SMC-127 - page 34

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-160 Cisco IOS XR System Management Configuration Guide Step 7 Log in to the non-o wner SDR using admin plane authentication: Username: xxxx @admin Password: xxxx Example: Username: xxxx@admin Password: xxxx Logs a root-system user into the SDR ...

  • Cisco Systems SMC-127 - page 35

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-161 Cisco IOS XR System Managem ent Configu ration Guide Disabling Remote Login for SDRs When you disable admin plan e authentica tion, the admin username cannot be used to log in to non-o wner SDRs. Only local SDR usernames can be used to log i ...

  • Cisco Systems SMC-127 - page 36

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Configuration Examples for Secure Domain Router s SMC-162 Cisco IOS XR System Management Configuration Guide Configuration Examples for Secure Domain Routers Creating a New SDR on a Cisco CRS-1 Router RP/0/RP0/CPU0:router# admin RP/0/RP0/CPU0:router(admin)# configure RP/0/RP0/CPU0:router ...

  • Cisco Systems SMC-127 - page 37

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Configuration Examp les for Secure Domain Rou ters SMC-163 Cisco IOS XR System Managem ent Configu ration Guide Adding nodes to an SDR: Cisco CRS-1 Router RP/0/RP0/CPU0:router# admin RP/0/RP0/CPU0:router(admin)# configure RP/0/RP0/CPU0:router(admin-config)# sdr rname2 RP/0/RP0/CPU0:router( ...

  • Cisco Systems SMC-127 - page 38

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-164 Cisco IOS XR System Management Configuration Guide Additional References The follo wing sections provide ref erences related to SDR config uration. Related Documents Standards MIBs Related T opic Document T itle SDR command reference. Secur e Domain Router C ...

  • Cisco Systems SMC-127 - page 39

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Additional References SMC-165 Cisco IOS XR System Managem ent Configu ration Guide RFCs Technical Assistance RFCs T itle No ne w or modified RFCs are supported b y this feature, and support for e xisting RFCs has not been modified b y this fe ature. — Description Link The Cisco T echnica ...

  • Cisco Systems SMC-127 - page 40

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-166 Cisco IOS XR System Management Configuration Guide ...

Fabricant Cisco Systems Catégorie Network Router

Les documents que nous recevons du fabricant de l'appareilCisco Systems SMC-127 peuvent être divisés en plusieurs groupes. Ceux-ci sont, entre autres:
- dessins techniques Cisco Systems
- manuels d’utilisations SMC-127
- fiches produit Cisco Systems
- dépliants
- ou étiquettes-énergie Cisco Systems SMC-127
Tous sont importants, mais les informations les plus importantes du point de vue de l'utilisation de l'appareil se trouvent dans le manuel d’utilisation Cisco Systems SMC-127.

Un groupe de documents appelé manuels d’utilisation est également divisé en types plus spécifiques, tels que: Manuels d’installation Cisco Systems SMC-127, manuels d’entretien, brefs manuels ou manuels de l’utilisateur Cisco Systems SMC-127. Selon vos besoins, vous devriez chercher le document dont vous avez besoin. Sur notre site, vous pouvez voir le manuel le plus populaire d’utilisation du produit Cisco Systems SMC-127.

Manuels d’utilsiation similaires

Manuel d’utilisation complet de l’appareil Cisco Systems SMC-127, quelle devrait-elle être?
Le manuel d’utilisation, également appelé le mode d’emploi, ou tout simplement le manuel, est un document technique destiné à aider à utiliser Cisco Systems SMC-127 par les utilisateurs. Des manuels sont généralement écrits par un rédacteur technique, mais dans un langage accessible à tous les utilisateurs Cisco Systems SMC-127.

Le manuel d’utilisation complet Cisco Systems, devrait inclure plusieurs éléments de base. Certains d'entre eux sont moins importants, tels que: la couverture / page de titre ou pages d'auteur. Cependant, la partie restante, devrait nous fournir des informations importantes du point de vue de l'utilisateur.

1. Introduction et des conseils sur la façon d'utiliser le manuel Cisco Systems SMC-127 - Au début de chaque manuel, nous devrions trouver des indices sur la façon d'utiliser le document. Il doit contenir des informations sur l'emplacement de la table des matières Cisco Systems SMC-127, FAQ ou des problèmes les plus fréquents - les points qui sont les plus souvent recherchés par les utilisateurs de chaque manuel
2. Table des matières - index de tous les conseils pour lCisco Systems SMC-127 qui peuvent être trouvés dans le document courant
3. Conseils sur la façon d'utiliser les fonctions de base de l’appareil Cisco Systems SMC-127 - qui devraient nous aider dans les premières étapes lors de l'utilisation Cisco Systems SMC-127
4. Troubleshooting - séquence systématique des activités qui nous aideront à diagnostiquer et ensuite résoudre les principaux problèmes de Cisco Systems SMC-127
5. FAQ - questions fréquemment posées
6. Détails du contact Informations sur l'endroit où chercher le contact avec le fabricant / service Cisco Systems SMC-127 dans un pays donné, si le problème ne peut être résolu par nous-mêmes.

Avez-vous une question à propos de Cisco Systems SMC-127?

Utiliser le formulaire ci-dessous

Si vous n’avez pas résolu votre problème avec Cisco Systems SMC-127, avec l'aide du manuel que vous avez trouvé, posez une question en utilisant le formulaire ci-dessous. Si un utilisateur a eu un problème similaire avec Cisco Systems SMC-127 il est probable qu’il a envie de partager la façon de le résoudre.

Réécrire le texte de l'image

Commentaires (0)