Cisco Systems SMC-127 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Cisco Systems SMC-127, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Cisco Systems SMC-127 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Cisco Systems SMC-127. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Cisco Systems SMC-127 should contain:
- informations concerning technical data of Cisco Systems SMC-127
- name of the manufacturer and a year of construction of the Cisco Systems SMC-127 item
- rules of operation, control and maintenance of the Cisco Systems SMC-127 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Cisco Systems SMC-127 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Cisco Systems SMC-127, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Cisco Systems service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Cisco Systems SMC-127.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Cisco Systems SMC-127 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    SMC-127 Cisco IOS XR System Managem ent Configu ration Guide Configuring Secure Domain Routers on Cisco IOS XR Software Secure domain router s (SDRs) are a means of di vid ing a single physical system i nto multiple logically separated routers. SDRs are isolat ed from each other i n terms of th eir resources, performance, and av ai lability . Note [...]

  • Page 2

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Prerequisites for Configuring Sec ure Domain Routers SMC-128 Cisco IOS XR System Management Configuration Guide Prerequisites for Configuring Secure Domain Routers Before conf iguring SDRs, the follo win g conditions must be met: Initial configuration • The router must be running the C[...]

  • Page 3

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-129 Cisco IOS XR System Managem ent Configu ration Guide Information About Configuring Secure Domain Routers Re vie w the follo wing topics before config uring secure domain rout ers: • What Is a Secure Domain Router?, page SMC-1[...]

  • Page 4

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-130 Cisco IOS XR System Management Configuration Guide See the “SDR Access Privileg es” section on page SMC-130 for more information. Note The Administration modes cannot be u sed to conf igure the features wi thin a non-o wne[...]

  • Page 5

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-131 Cisco IOS XR System Managem ent Configu ration Guide • Ability to assign nodes (RPs, DRPs, and LCs) to SDRs. • Ability to create other users wi th similar or lo wer priv ileges. • Complete authority o ver the chassis. •[...]

  • Page 6

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-132 Cisco IOS XR System Management Configuration Guide Designated Secure Domain Router System Controller (DSDRSC) In a router ru nning the Ci sco IOS XR software, one Rout e Processor is assigned the role of Designated System Cont[...]

  • Page 7

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-133 Cisco IOS XR System Managem ent Configu ration Guide • DRPs are supported in the Cisco CRS-1 only . DRPs are not supported in the Cisco XR 12000 Series Routers. Note DRPs can also be used to provide addi tional proce ssing ca[...]

  • Page 8

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-134 Cisco IOS XR System Management Configuration Guide Designated System Controller (DSC) in a Cisco XR 12000 Series Router • The first RP to be boot ed with t he Cisco IOS XR software in a Cisco XR 12000 Series Router will beco[...]

  • Page 9

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-135 Cisco IOS XR System Managem ent Configu ration Guide Removing a DSDRSC Configuration There are two ways to remo ve a DSDRSC from an SDR: • First remov e all other nodes from the SDR config ur ation, and then remo ve the DSDRS[...]

  • Page 10

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-136 Cisco IOS XR System Management Configuration Guide High Availability Implications Fault Isolation Because the CPU and memory of an SDR are not shared wi th other SDRs, conf iguration problems that cause out-of-resources condi [...]

  • Page 11

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-137 Cisco IOS XR System Managem ent Configu ration Guide another 30 seconds. This causes an inconsistent sy stem view in the name d SDR us ing DRP pai red across the rack in which the DRP loses cont rol Ethernet connectivity , but [...]

  • Page 12

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Information About Configurin g Secure Do main Routers SMC-138 Cisco IOS XR System Management Configuration Guide • T o access install commands, you must be a member of the root-sy stem user group wi th access to the Administration EXEC m ode. • Most show install commands can be used [...]

  • Page 13

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Information About Configur in g Secu re Domain Routers SMC-139 Cisco IOS XR System Managem ent Configu ration Guide which is also the ne w DSDRSC. This operation take s som e time, during which routi ng protocols such as BGP that use loopback or null interfaces are af f ected. Similarly , [...]

  • Page 14

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-140 Cisco IOS XR System Management Configuration Guide How to Configure Secure Domain Routers T o create an SDR, configure an SDR name and then add nodes to the configuration . In Cisco CRS-1 routers, at least one node in each SDR must be expli[...]

  • Page 15

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-141 Cisco IOS XR System Managem ent Configu ration Guide Complete the follo wing steps to create a non-o wner SDR. Note The procedures in this section can be pe rformed only on a router th at is already running the Cisco IOS XR software. F o r in[...]

  • Page 16

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-142 Cisco IOS XR System Management Configuration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administration EXEC mode. Step 2 configure Example: RP/0/RP0/CPU0:router(admin)# configure[...]

  • Page 17

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-143 Cisco IOS XR System Managem ent Configu ration Guide Step 7 pair pair-name primary or location partially-qualified-nodeid primary Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# pair drp1 primary or RP/0/RP0/CPU0:router(admin-config-[...]

  • Page 18

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-144 Cisco IOS XR System Management Configuration Guide Step 8 location partially-qualified-nodeid or location pair-name Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# location 0/0/* or RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# l[...]

  • Page 19

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-145 Cisco IOS XR System Managem ent Configu ration Guide Creating SDRs in a 12000 Series Router T o create a non-o wner SDR in a Cisco XR 12000 Seri es Router, create an SDR name, add an RP (that can act as DSDRSC) or 2 RP s in adjacent redundanc[...]

  • Page 20

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-146 Cisco IOS XR System Management Configuration Guide Step 3 sdr sdr-name Example: RP/0/0/CPU0:router(admin-config)# sdr rname Enters the Administratio n conf iguration mode for the specif ied SDR. • If this SDR does not yet e xist, it is cr[...]

  • Page 21

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-147 Cisco IOS XR System Managem ent Configu ration Guide Step 6 location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname)# location 0/5/* Assigns additional nod es to the SDR. • Enter the value of the partially-qua[...]

  • Page 22

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-148 Cisco IOS XR System Management Configuration Guide Adding Nodes to a Non-Owner SDR When adding nodes to an e xisting non-owner SDR, t he follo wing rules apply: • By default, all n odes in a ne w system belong to th e o wner SDR. When a n[...]

  • Page 23

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-149 Cisco IOS XR System Managem ent Configu ration Guide DETAILED ST EPS Command or Action Purpose Step 1 admin Example: RP/0/RP0/CPU0:router# admin Enters Administ ration EXEC mode. Step 2 configure Example: RP/0/RP0/CPU0:router(admin)# configur[...]

  • Page 24

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-150 Cisco IOS XR System Management Configuration Guide Adding Nodes to an SDR in a Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3. sdr sdr-name 4. location partially-qualified-n odeid 5. end or commit DETAILED ST EPS Step 5[...]

  • Page 25

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-151 Cisco IOS XR System Managem ent Configu ration Guide Removing Nodes and SDRs This section contains the fo llo wing instructions: • Removing No des from a Secure Domain Router in a Cisco CRS-1 Router , page SMC-152 • Removing Nodes from a [...]

  • Page 26

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-152 Cisco IOS XR System Management Configuration Guide • Y ou must f irst remov e a node from a non-owner SDR befo re it can be reassigned to anoth er non-o w ner SDR. • T o remov e a node from the o wner SDR in ventory , assign the node to[...]

  • Page 27

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-153 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid or no location pair-name Example: RP/0/RP0/CPU0:router(admin-config-sdr:rname 2)# no location 0/0/* or RP/0/RP0/CPU0:router(admin-config-sdr:rn[...]

  • Page 28

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-154 Cisco IOS XR System Management Configuration Guide Removing Nodes from a Secure Domain Router: Cisco XR 12000 Series Router SUMMARY STEPS 1. admin 2. conf igure 3. sdr sdr-name 4. no location partially-quali fied -nodeid 5. end or commit DE[...]

  • Page 29

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-155 Cisco IOS XR System Managem ent Configu ration Guide Step 4 no location partially-qualified-nodeid Example: RP/0/0/CPU0:router(admin-config-sdr:rname2 )# no location 0/0/* Remov es a node from a non-owner SDR. • When a node is remo ved fr o[...]

  • Page 30

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-156 Cisco IOS XR System Management Configuration Guide Removing a Secure Domain Router This section pr ovides instruction s to remove a se cure domain router from either a Cisco CRS-1 or a Cisco XR 12000 Series Router. T o remove an SDR, you ca[...]

  • Page 31

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-157 Cisco IOS XR System Managem ent Configu ration Guide Configuring a Username and Pa ssword for a Non-Owner SDR After you create an SDR, you can create a username and password on that SDR. When you assign root-lr pri vileges to t hat username, [...]

  • Page 32

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-158 Cisco IOS XR System Management Configuration Guide 5. end or commit 6. Connect a terminal to t he console port of the non-o wner SDR DSDRSC. 7. Log in to the non-o wner SDR using admin plane authenti cation: Username: userna me @admin Passw[...]

  • Page 33

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-159 Cisco IOS XR System Managem ent Configu ration Guide Step 4 aaa authentication login remote local Example: RP/0/RP0/CPU0:router(admin-config)# aaa authentication login remote local Enables admin plane authentication. • The remote k eywo rd [...]

  • Page 34

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e How to Configure Secure Domain Rout ers SMC-160 Cisco IOS XR System Management Configuration Guide Step 7 Log in to the non-o wner SDR using admin plane authentication: Username: xxxx @admin Password: xxxx Example: Username: xxxx@admin Password: xxxx Logs a root-system user into the SDR [...]

  • Page 35

    Configuring Secure Domain Ro uters on Cisco IOS XR Software How to Configure Secure Domain Rou ters SMC-161 Cisco IOS XR System Managem ent Configu ration Guide Disabling Remote Login for SDRs When you disable admin plan e authentica tion, the admin username cannot be used to log in to non-o wner SDRs. Only local SDR usernames can be used to log i [...]

  • Page 36

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Configuration Examples for Secure Domain Router s SMC-162 Cisco IOS XR System Management Configuration Guide Configuration Examples for Secure Domain Routers Creating a New SDR on a Cisco CRS-1 Router RP/0/RP0/CPU0:router# admin RP/0/RP0/CPU0:router(admin)# configure RP/0/RP0/CPU0:router[...]

  • Page 37

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Configuration Examp les for Secure Domain Rou ters SMC-163 Cisco IOS XR System Managem ent Configu ration Guide Adding nodes to an SDR: Cisco CRS-1 Router RP/0/RP0/CPU0:router# admin RP/0/RP0/CPU0:router(admin)# configure RP/0/RP0/CPU0:router(admin-config)# sdr rname2 RP/0/RP0/CPU0:router([...]

  • Page 38

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-164 Cisco IOS XR System Management Configuration Guide Additional References The follo wing sections provide ref erences related to SDR config uration. Related Documents Standards MIBs Related T opic Document T itle SDR command reference. Secur e Domain Router C[...]

  • Page 39

    Configuring Secure Domain Ro uters on Cisco IOS XR Software Additional References SMC-165 Cisco IOS XR System Managem ent Configu ration Guide RFCs Technical Assistance RFCs T itle No ne w or modified RFCs are supported b y this feature, and support for e xisting RFCs has not been modified b y this fe ature. — Description Link The Cisco T echnica[...]

  • Page 40

    Configuri ng Secure Domain Routers on Cisc o IOS XR Softwar e Additional References SMC-166 Cisco IOS XR System Management Configuration Guide[...]