Manual Cisco Systems SMC-127

40 pages 0.49 mb
Download

Go to site of 40

Summary
  • Cisco Systems SMC-127 - page 1

    SMC-127 Cisco IOS XR System Managem ent Configu ration Guide Configuring Secure Domain Routers on Cisco IOS XR Software Secure domain router s (SDRs) are a means of di vid ing a single physical system i nto multiple logically separated routers. SDRs are isolat ed from each other i n terms of th eir resources, performance, and av ai lability . Note ...

  • Cisco Systems SMC-127 - page 2

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Prerequisites for Configuring Sec ure Domain Routers SMC-128 Cisco IOS XR System Management Configuration Guide Prerequisites for Configuring Secure Domain Routers Before conf iguring SDRs, the follo win g conditions must be met: Initial configuration • The router must be running the C ...

  • Cisco Systems SMC-127 - page 3

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-129 Cisco IOS XR System Managem ent Configu ration Guide Information About Configuring Secure Domain Routers Re vie w the follo wing topics before config uring secure domain rout ers: • What Is a Secure Domain Router?, page SMC-1 ...

  • Cisco Systems SMC-127 - page 4

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-130 Cisco IOS XR System Management Configuration Guide See the “SDR Access Privileg es” section on page SMC-130 for more information. Note The Administration modes cannot be u sed to conf igure the features wi thin a non-o wne ...

  • Cisco Systems SMC-127 - page 5

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-131 Cisco IOS XR System Managem ent Configu ration Guide • Ability to assign nodes (RPs, DRPs, and LCs) to SDRs. • Ability to create other users wi th similar or lo wer priv ileges. • Complete authority o ver the chassis. • ...

  • Cisco Systems SMC-127 - page 6

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-132 Cisco IOS XR System Management Configuration Guide Designated Secure Domain Router System Controller (DSDRSC) In a router ru nning the Ci sco IOS XR software, one Rout e Processor is assigned the role of Designated System Cont ...

  • Cisco Systems SMC-127 - page 7

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-133 Cisco IOS XR System Managem ent Configu ration Guide • DRPs are supported in the Cisco CRS-1 only . DRPs are not supported in the Cisco XR 12000 Series Routers. Note DRPs can also be used to provide addi tional proce ssing ca ...

  • Cisco Systems SMC-127 - page 8

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-134 Cisco IOS XR System Management Configuration Guide Designated System Controller (DSC) in a Cisco XR 12000 Series Router • The first RP to be boot ed with t he Cisco IOS XR software in a Cisco XR 12000 Series Router will beco ...

  • Cisco Systems SMC-127 - page 9

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-135 Cisco IOS XR System Managem ent Configu ration Guide Removing a DSDRSC Configuration There are two ways to remo ve a DSDRSC from an SDR: • First remov e all other nodes from the SDR config ur ation, and then remo ve the DSDRS ...

  • Cisco Systems SMC-127 - page 10

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-136 Cisco IOS XR System Management Configuration Guide High Availability Implications Fault Isolation Because the CPU and memory of an SDR are not shared wi th other SDRs, conf iguration problems that cause out-of-resources condi ...

  • Cisco Systems SMC-127 - page 11

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-137 Cisco IOS XR System Managem ent Configu ration Guide another 30 seconds. This causes an inconsistent sy stem view in the name d SDR us ing DRP pai red across the rack in which the DRP loses cont rol Ethernet connectivity , but ...

  • Cisco Systems SMC-127 - page 12

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-138 Cisco IOS XR System Management Configuration Guide • T o access install commands, you must be a member of the root-sy stem user group wi th access to the Administration EXEC m ode. • Most show install commands can be used ...

  • Cisco Systems SMC-127 - page 13

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-139 Cisco IOS XR System Managem ent Configu ration Guide which is also the ne w DSDRSC. This operation take s som e time, during which routi ng protocols such as BGP that use loopback or null interfaces are af f ected. Similarly , ...

  • Cisco Systems SMC-127 - page 14

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-140 Cisco IOS XR System Management Configuration Guide How to Configure Secure Domain Routers T o create an SDR, configure an SDR name and then add nodes to the configuration . In Cisco CRS-1 routers, at least one node in each SDR must be expli ...

  • Cisco Systems SMC-127 - page 15

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-141 Cisco IOS XR System Managem ent Configu ration Guide Complete the follo wing steps to create a non-o wner SDR. Note The procedures in this section can be pe rformed only on a router th at is already running the Cisco IOS XR software. F o r in ...

  • Cisco Systems SMC-127 - page 16

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-142 Cisco IOS XR System Management Configuration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administration EXEC mode. Step 2 configure Example: RP/0/RP0/CPU0:router(admin)# configure ...

  • Cisco Systems SMC-127 - page 17

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-143 Cisco IOS XR System Managem ent Configu ration Guide Step 7 pair pair-name primary or location partially-qualified-nodeid primary Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# pair drp1 primary or RP/0/RP0/CPU0:router(admin-config- ...

  • Cisco Systems SMC-127 - page 18

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-144 Cisco IOS XR System Management Configuration Guide Step 8 location partially-qualified-nodeid or location pair-name Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# location 0/0/* or RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# l ...

  • Cisco Systems SMC-127 - page 19

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-145 Cisco IOS XR System Managem ent Configu ration Guide Creating SDRs in a 12000 Series Router T o create a non-o wner SDR in a Cisco XR 12000 Seri es Router, create an SDR name, add an RP (that can act as DSDRSC) or 2 RP s in adjacent redundanc ...

  • Cisco Systems SMC-127 - page 20

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-146 Cisco IOS XR System Management Configuration Guide Step 3 sdr sdr-name Example: RP/0/0/CPU0:router(admin-config)# sdr rname Enters the Administratio n conf iguration mode for the specif ied SDR. • If this SDR does not yet e xist, it is cr ...

  • Cisco Systems SMC-127 - page 21

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-147 Cisco IOS XR System Managem ent Configu ration Guide Step 6 location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname)# location 0/5/* Assigns additional nod es to the SDR. • Enter the value of the partially-qua ...

  • Cisco Systems SMC-127 - page 22

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-148 Cisco IOS XR System Management Configuration Guide Adding Nodes to a Non-Owner SDR When adding nodes to an e xisting non-owner SDR, t he follo wing rules apply: • By default, all n odes in a ne w system belong to th e o wner SDR. When a n ...

  • Cisco Systems SMC-127 - page 23

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-149 Cisco IOS XR System Managem ent Configu ration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administ ration EXEC mode. Step 2 configure Example: RP/0/RP0/CPU0:router(admin)# configur ...

  • Cisco Systems SMC-127 - page 24

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-150 Cisco IOS XR System Management Configuration Guide Adding Nodes to an SDR in a Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3. sdr sdr-name 4. location partially-qualified-n odeid 5. end or commit DETAILED ST EPS Step 5 ...

  • Cisco Systems SMC-127 - page 25

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-151 Cisco IOS XR System Managem ent Configu ration Guide Removing Nodes and SDRs This section contains the fo llo wing instructions: • Removing No des from a Secure Domain Router in a Cisco CRS-1 Router , page SMC-152 • Removing Nodes from a ...

  • Cisco Systems SMC-127 - page 26

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-152 Cisco IOS XR System Management Configuration Guide • Y ou must f irst remov e a node from a non-owner SDR befo re it can be reassigned to anoth er non-o w ner SDR. • T o remov e a node from the o wner SDR in ventory , assign the node to ...

  • Cisco Systems SMC-127 - page 27

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-153 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid or no location pair-name Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# no location 0/0/* or RP/0/RP0/CPU0:router(admin-config-sdr:rn ...

  • Cisco Systems SMC-127 - page 28

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-154 Cisco IOS XR System Management Configuration Guide Removing Nodes from a Secure Domain Router: Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3. sdr sdr-name 4. no location partially-quali fied -nodeid 5. end or commit DE ...

  • Cisco Systems SMC-127 - page 29

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-155 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname2 )# no location 0/0/* Remov es a node from a non-owner SDR. • When a node is remo ved fr o ...

  • Cisco Systems SMC-127 - page 30

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-156 Cisco IOS XR System Management Configuration Guide Removing a Secure Domain Router This section pr ovides instruction s to remove a se cure domain router from either a Cisco CRS-1 or a Cisco XR 12000 Series Router. T o remove an SDR, you ca ...

  • Cisco Systems SMC-127 - page 31

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-157 Cisco IOS XR System Managem ent Configu ration Guide Configuring a Username and Pa ssword for a Non-Owner SDR After you create an SDR, you can create a username and password on that SDR. When you assign root-lr pri vileges to t hat username, ...

  • Cisco Systems SMC-127 - page 32

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-158 Cisco IOS XR System Management Configuration Guide 5. end or commit 6. Connect a terminal to t he console port of the non-o wner SDR DSDRSC. 7. Log in to the non-o wner SDR using admin plane authenti cation: Username: userna me @admin Passw ...

  • Cisco Systems SMC-127 - page 33

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-159 Cisco IOS XR System Managem ent Configu ration Guide Step 4 aaa authentication login remote local Example: RP/0/RP0/CPU0:router(admin-config)# aaa authentication login remote local Enables admin plane authentication. • The remote k eywo rd ...

  • Cisco Systems SMC-127 - page 34

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-160 Cisco IOS XR System Management Configuration Guide Step 7 Log in to the non-o wner SDR using admin plane authentication: Username: xxxx @admin Password: xxxx Example: Username: xxxx@admin Password: xxxx Logs a root-system user into the SDR ...

  • Cisco Systems SMC-127 - page 35

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-161 Cisco IOS XR System Managem ent Configu ration Guide Disabling Remote Login for SDRs When you disable admin plan e authentica tion, the admin username cannot be used to log in to non-o wner SDRs. Only local SDR usernames can be used to log i ...

  • Cisco Systems SMC-127 - page 36

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Configuration Examples for Secure Domain Router s SMC-162 Cisco IOS XR System Management Configuration Guide Configuration Examples for Secure Domain Routers Creating a New SDR on a Cisco CRS-1 Router RP/0/RP0/CPU0:router# admin RP/0/RP0/CPU0:router(admin)# configure RP/0/RP0/CPU0:router ...

  • Cisco Systems SMC-127 - page 37

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Configuration Examp les for Secure Domain Rou ters SMC-163 Cisco IOS XR System Managem ent Configu ration Guide Adding nodes to an SDR: Cisco CRS-1 Router RP/0/RP0/CPU0:router# admin RP/0/RP0/CPU0:router(admin)# configure RP/0/RP0/CPU0:router(admin-config)# sdr rname2 RP/0/RP0/CPU0:router( ...

  • Cisco Systems SMC-127 - page 38

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-164 Cisco IOS XR System Management Configuration Guide Additional References The follo wing sections provide ref erences related to SDR config uration. Related Documents Standards MIBs Related T opic Document T itle SDR command reference. Secur e Domain Router C ...

  • Cisco Systems SMC-127 - page 39

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Additional References SMC-165 Cisco IOS XR System Managem ent Configu ration Guide RFCs Technical Assistance RFCs T itle No ne w or modified RFCs are supported b y this feature, and support for e xisting RFCs has not been modified b y this fe ature. — Description Link The Cisco T echnica ...

  • Cisco Systems SMC-127 - page 40

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-166 Cisco IOS XR System Management Configuration Guide ...

Manufacturer Cisco Systems Category Network Router

Documents that we receive from a manufacturer of a Cisco Systems SMC-127 can be divided into several groups. They are, among others:
- Cisco Systems technical drawings
- SMC-127 manuals
- Cisco Systems product data sheets
- information booklets
- or energy labels Cisco Systems SMC-127
All of them are important, but the most important information from the point of view of use of the device are in the user manual Cisco Systems SMC-127.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals Cisco Systems SMC-127, service manual, brief instructions and user manuals Cisco Systems SMC-127. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product Cisco Systems SMC-127.

A complete manual for the device Cisco Systems SMC-127, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use Cisco Systems SMC-127 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of Cisco Systems SMC-127.

A complete Cisco Systems manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual Cisco Systems SMC-127 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the Cisco Systems SMC-127, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the Cisco Systems SMC-127, that we can find in the current document
3. Tips how to use the basic functions of the device Cisco Systems SMC-127 - which should help us in our first steps of using Cisco Systems SMC-127
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with Cisco Systems SMC-127
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of Cisco Systems SMC-127 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning Cisco Systems SMC-127?

Use the form below

If you did not solve your problem by using a manual Cisco Systems SMC-127, ask a question using the form below. If a user had a similar problem with Cisco Systems SMC-127 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Comments (0)