Cisco CRS-1 - Carrier Routing System Router Configuration Guide

Implementing Secure Socket Layer on Cisco IOS XR Software
Contents
SC-212
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Contents
• Prerequisites for Implementing Secure Socket Layer, page SC-212
• Information About Implementing Secure Socket Layer, page SC-212
• How to Implement Secure Socket Layer, page SC-213
• Configuration Examples for Implementing Secure Socket Layer, page SC-216
• Additional References, page SC-217
Prerequisites for Implementing Secure Socket Layer
The following prerequisites are required to implement SSL:
• You must be in a user group associated with a task group that includes the proper task IDs for
security commands. The command reference guides include the task IDs required for each
command.
• If you suspect user group assignment is preventing you from using a command, contact your AAA
administrator for assistance.
• You must install and activate the Package Installation Envelope (PIE) for the security software.
For detailed information about optional PIE installation, refer to the Cisco IOS XR Getting Started
Guide.
• Before you can begin using SSL, you must generate either Rivest, Shamir, and Adelman (RSA) or
Digital Signature Algorithm (DSA) key pairs, enroll with a CA, and obtain the CA certificate for the
router key.
• SSL servers support Advanced Encryption Standard (AES), which has key sizes of 128, 192, and
256 bits.
For more information on the commands required to perform these tasks, see the crypto key
generate rsa, crypto key generate dsa, crypto ca enroll, and crypto ca authenticate commands
in the Public Key Infrastructure Commands on Cisco
IOS XR Software module of the Cisco IOS XR
System Security Command Reference.
Information About Implementing Secure Socket Layer
To implement SSL you need to understand the following concept:
• Purpose of Certification Authorities, page SC-213
Release 3.8.0 Advanced Encryption Standard (AES) encryption support was added on the
SSL server.
Release 3.9.0 No modification.

Cisco CRS-1 - Carrier Routing System Router Specifications

General

Brand	Cisco
Model	CRS-1 - Carrier Routing System Router
Category	Network Router
Language	English