Cisco ASR 5500 - Secure System Configuration File; Feature Summary and Revision History

To Next Page

To Previous Page

CHAPTER 9

Secure System Configuration File

•

Feature Summary and Revision History, page 81

•

Feature Description, page 82

•

How System Configuration Files are Secured, page 82

•

Configuring Signature Verification, page 83

Feature Summary and Revision History

Summary Data

AllApplicable Product(s) or Functional

Area

ASR 5500

VPC-DI

VPC-SI

Applicable Platform(s)

DisabledFeature Default

Not ApplicableRelated Changes in This Release

•

ASR 5500 System Administration Guide

•

VPC-DI System Administration Guide

•

VPC-SI System Administration Guide

Related Documentation

ASR 5500 System Administration Guide, StarOS Release 21.5

Main Page

Default Chapter3
- Table of Contents3
About this Guide25
- Conventions Used25
- Terminology27
  - Logical Interfaces28
    - AAA Servers29
- Trusted Builds30
  - Context Selection for Context-Level Administrative User Sessions31
  - Context Selection for Subscriber Sessions34
- IP Address Notation35
Getting Started39
- Configuring System Administrative Users39
  - Limiting the Number of Concurrent CLI Sessions39
  - Automatic Logout of CLI Sessions40
- Configuring SSH Options40
System Settings51
- Configuring System Timing51
- Configuring SF Boot Configuration Pause55
- Configuring CLI Confirmation Prompts56
- Enabling CLI Timestamping56
- Configuring System Administrative Users58
- Configuring TACACS+ for System Administrative Users66
- Separating Authentication Methods70
Config Mode Lock Mechanisms77
- Overview of Config Mode Locking77
- Requesting an Exclusive-Lock78
- Effect of Config Lock on URL Scripts79
- Saving a Configuration File80
- Reload and Shutdown Commands80
- Show Administrators Command81
Management Settings83
- Orbem83
- SNMP MIB Browser85
- SNMP Support88
Verifying and Saving Your Configuration91
- Verifying the Configuration91
- Synchronizing File Systems93
- Saving the Configuration93
- Chapter93
System Interfaces and Ports95
- Contexts95
  - Creating Contexts95
  - Viewing and Verifying Contexts96
- Ethernet Interfaces and Ports96
- Vlans98
  - Hypervisors99
  - Vlans and Management Ports99
System Security101
- Protection of Passwords101
  - Secure Password Encryption101
  - Support for Non-Current Encryptions and Decryptions102
- Support for ICSR Configurations102
- Encrypted SNMP Community Strings103
- Lawful Intercept Restrictions103
  - LI Server Addresses103
  - Modifying Intercepts104
- Adding, Modifying and Removing Users104
- Test-Commands105
Secure System Configuration File107
- Feature Summary and Revision History107
- Feature Description108
- How System Configuration Files Are Secured108
- Software Management Operations111
Smart Licensing129
- Feature Summary and Revision History129
- Smart Software Licensing130
- Configuring Smart Licensing133
- Monitoring and Troubleshooting Smart Licensing134
  - Smart Licensing Bulk Statistics134
C H a P T E137
Monitoring the System137
- SNMP Notifications137
- Monitoring System Status and Performance137
- Clearing Statistics and Counters139
C H a P T E141
Bulk Statistics141
- Feature Summary and Revision History141
- Configuring Communication with the Collection Server142
- Viewing Collected Bulk Statistics Data146
- Collecting Bulk Statistics Samples in SSD146
- Manually Gathering and Transferring Bulk Statistics146
- Clearing Bulk Statistics Counters and Information147
- Bulkstats Schema Nomenclature147
- Bulk Statistics Event Log Messages150
C H a P T E151
- Feature Summary and Revision History151
System Logs151
- System Log Types152
- Configuring Event Logging Parameters153
  - Configuring Event Log Filters154
    - Exec Mode Filtering154
    - Global Configuration Mode Filtering156
  - Configuring Syslog Servers157
- Configuring Active Logs157
- Specifying Facilities158
- Configuring Monitor Logs167
  - Enabling Monitor Logs167
  - Disabling Monitor Logs167
- Configuring Trace Logging167
- Viewing Event Logs Using the CLI168
- Viewing Logging Configuration and Statistics168
- Configuring and Viewing Crash Logs169
- Reducing Excessive Event Logging172
  - Configuring Log Source Thresholds173
- Checkpointing Logs173
- Event ID Overview174
  - Event Severities183
  - Understanding Event ID Information in Logged Output183
- Saving Log Files174
Chapter 1 5 Troubleshooting185
- Verifying Network Connectivity185
Packet Capture (PCAP) Trace193
- Feature Information193
- Feature Description194
- Configuring PCAP Trace194
- Monitoring and Troubleshooting PCAP Trace201
  - Show Command(S) And/Or Outputs201
System Recovery207
- Prerequisites207
  - Console Access207
  - Boot Image207
- Accessing the Boot CLI208
  - Initiate a Reboot208
Chapter 1 8 Access Control Lists209
- Overview209
- Understanding Acls210
  - Rule(S)210
    - Actions210
    - Criteria210
  - Rule Order212
- Configuring Acls on the System212
- Applying IP Acls214
Congestion Control227
- Overview227
- Configuring Congestion Control228
- Enabling Congestion Control Redirect Overload Policy230
Chapter 2 0 Routing233
- Routing Policies233
- Static Routing235
  - Adding Static Routes to a Context236
  - Deleting Static Routes from a Context236
- OSPF Routing236
  - OSPF Version 2 Overview237
  - Basic Ospfv2 Configuration238
- Ospfv3 Routing239
- Equal Cost Multiple Path (ECMP)240
- BGP-4 Routing241
- Bidirectional Forwarding Detection248
Vlans261
- Overview261
- Creating VLAN Tags262
- Verifying the Port Configuration263
- Configuring Subscriber VLAN Associations264
- VLAN-Related CLI Commands265
BGP MPLS Vpns267
- Introduction267
- MPLS-CE Connected to PE268
- As a PE268
  - Overview268
  - Sample Configuration269
- Ipv6 Support for BGP MPLS Vpns270
  - Overview270
  - Sample Configuration270
- VPN-Related CLI Commands272
Content Service Steering279
- Overview279
- Configuring Internal Content Service Steering280
Session Recovery283
- How Session Recovery Works283
- Configuring the System to Support Session Recovery285
- Recovery Control Task Statistics289
  - Show Rct Stats Command289
  - Sample Output for Show Rct Stats Verbose290
Interchassis Session Recovery293
- Overview293
- ICSR Operation297
  - Chassis Initialization297
  - Chassis Operation297
    - Chassis Communication297
    - Chassis Switchover297
- Configuring ICSR297
Support Data Collector325
- Overview325
- Configuring SDR Collection326
- Displaying the SDR Collection Configuration326
- Collecting and Storing the SDR Information327
- Managing Record Collection327
- Using Sdrs to Diagnose Problems329
- SDR CLI Commands329
  - Configuration Commands (Global Configuration Mode)330
    - Support Record330
    - Support Collection330
  - Exec Mode Commands331
Appendix A Engineering Rules333
- CLI Session Rules333
- Context Rules333
- Subscriber Rules336
- Service Rules336
- Access Control List (ACL) Engineering Rules337
- ECMP Groups337
Appendix B Staros Tasks339
- Overview339
- Primary Task Subsystems340
- Controllers and Managers341
- Subsystem Tasks342
Appendix C363
- Feature Summary and Revision History363
- Overview364
- Configuring Confd366
- Verifying the Configuration371
- YANG Models379
- Show Support Details (SSD)379
- Confd Examples380
- CLI Based YANG Model for ECS Commands384
NETCONF and Confd363
Appendix D389
- Overview of Checkpointing389
- Macro-Checkpoints389
- Micro-Checkpoints391
- NAT Category402
- P-GW Category405
- Rf Interface Category407
- S6B Interface Category409
  - Sess_Uchkpt_Cmd_S6B_Info409
- Samog Category409
ICSR Checkpointing389
ASR 5500 SDR CLI Command Strings415
APPENDIX E Appendix F Cisco Secure Boot429
- Fundamental Concepts429
- Secure Boot Overview430
- MIO2 Support for Secure Boot430
- Image Naming Conventions430
- Verifying Authenticity430

Cisco ASR 5500 - Secure System Configuration File; Feature Summary and Revision History

Table of Contents

Other manuals for Cisco ASR 5500

Related product manuals