Cisco IOS XR User Manual

Implementing Secure Socket Layer on Cisco IOS XR Software
Configuration Examples for Implementing Secure Socket Layer
SC-164
Cisco IOS XR System Security Configuration Guide
Configuration Examples for Implementing Secure Socket Layer
This section provides the following configuration example:
• Configuring Secure Socket Layer: Example, page SC-164
Configuring Secure Socket Layer: Example
The following example shows how to generate the RSA keys for the router, configure a trust point,
authenticate the CA server, obtain a certificate from the CA for the key, and display information about
the certificate:
crypto key generate rsa general-keys
commit
configure
domain ipv4 host xyz-ultra5 10.0.0.5
crypto ca trustpoint myca
enrollment url http://xyz-ultra5
end
crypto ca authenticate myca
crypto ca enroll myca
show crypto ca certificates
Additional References
The following sections provide references related to implementing SSL.
Related Documents
Related Topic Document Title
PKI commands: complete command syntax, command
modes, command history, defaults, usage guidelines,
and examples
Public Key Infrastructure Commands on Cisco IOS XR Software
module in the Cisco IOS XR System Security Command Reference,
Release 3.5
SSL commands: complete command syntax, command
modes, command history, defaults, usage guidelines,
and examples
Secure Socket Layer Protocol Commands on Cisco IOS XR Software
module in the Cisco IOS XR System Security Command Reference,
Release 3.5
Certification authority information Implementing Certification Authority Interoperability on
Cisco IOS XR Software module in the Cisco IOS XR System Security
Configuration Guide, Release 3.5

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.