15-22
Cisco ONS 15454 DWDM Reference Manual, R8.5
78-18343-02
Chapter 15 Management Network Connectivity
15.2.9 Scenario 9: IP Addressing with Secure Mode Enabled
Figure 15-16 Scenario 9: ONS 15454 GNE and ENEs on Different Subnets with Secure Mode
Enabled
15.2.9.2 Secure Node Locked and Unlocked Behavior
Secure mode can be locked or unlocked on a node operating in secure mode. The default status is
unlocked, and only a Superuser can issue a lock. When secure mode is locked, the node’s configuration
(including Ethernet port status) and lock status cannot be changed by any network user. To have a secure
node’s lock removed, contact Cisco Technical Support to arrange a Return Material Authorization
(RMA) for the shelf assembly. See the “Obtaining Documentation and Submitting a Service Request”
section on page lxiv as needed. Enabling a lock makes a permanent change to the shelf’s EEPROM.
A node’s configuration lock is maintained if the active TCC2P card’s database is reloaded. For example,
if you attempt to load an unlocked node database onto a locked node’s standby TCC2P card for transfer
to the active TCC2P card (an action that is not recommended), the unlocked node’s status (via the
uploaded database) will not override the node’s lock status. If you attempt to load a locked database onto
the standby TCC2P card of an unlocked secure node, the active TCC2P card will upload the database. If
the uploaded defaults indicate a locked status, this will cause the node to become locked. If a software
load has been customized before a lock is enabled, all lockable provisioning features are permanently
set to the customized NE defaults provided in the load and cannot be changed by any user.
71674
Remote CTC
10.10.20.10
10.10.20.0/24
10.10.10.0/24
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
ONS 15454
GNE
Backplane - 10.10.10.100/24
TCC2P - 176.20.20.40/24
ONS 15454
ENE
Backplane - 192.168.10.250/24
TCC2P - 176.20.20.30/24
ONS 15454
ENE
192.168.10.150/24 - Backplane
176.20.20.10/24 - TCC2P
ONS 15454
ENE
192.168.10.200/24 - Backplane
176.20.20.20/24 - TCC2P
Local/Craft CTC
176.20.20.50
Ethernet
SONET