Secure Node Locked And Unlocked Behavior - Cisco ONS 15454 Reference Manual

Chapter 13 Management Network Connectivity
Figure 13-17
Backplane - 10.10.10.100/24
Backplane - 192.168.10.250/24

13.2.9.2 Secure Node Locked and Unlocked Behavior

Secure mode can be locked or unlocked on a node operating in secure mode. The default status is
unlocked, and only a Superuser can issue a lock. When secure mode is locked, the node's configuration
(including Ethernet port status) and lock status cannot be changed by any network user. To have a secure
node's lock removed, contact Cisco Technical Support to arrange a Return Material Authorization
(RMA) for the shelf assembly. See the
section on page l
erasable programmable read-only memory (EEPROM).
A node's lock status in secure mode is different from external switching command locks (lock-on and
Note
lockout). For more information about port protection locks, see
A node's configuration lock is maintained if the active TCC2P card's database is reloaded. For example,
if you attempt to load an unlocked node database onto a locked node's standby TCC2P card for transfer
to the active TCC2P card (an action that is not recommended), the unlocked node's status (through the
uploaded database) will not override the node's lock status. If you attempt to load a locked database onto
the standby TCC2P card of an unlocked secure node, the active TCC2P card will upload the database. If
OL-9217-01
IP Scenario 9: ONS 15454 GNE and ENEs on Different Subnets with Secure Mode
Enabled
ONS 15454
GNE
TCC2P - 176.20.20.40/24
ONS 15454
ENE
TCC2P - 176.20.20.30/24
as needed. Enabling a lock makes a permanent change to the shelf's electrically
13.2 13.2.9 IP Scenario 9: IP Addressing with Secure Mode Enabled
Remote CTC
10.10.20.10
10.10.20.0/24
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
10.10.10.0/24
ONS 15454
ENE
192.168.10.150/24 - Backplane
176.20.20.10/24 - TCC2P
ONS 15454
ENE
192.168.10.200/24 - Backplane
176.20.20.20/24 - TCC2P
Local/Craft CTC
176.20.20.50
"Obtaining Documentation and Submitting a Service Request"
Chapter 7, "Card Protection."
Cisco ONS 15454 Reference Manual, R7.0.1
Ethernet
SONET
13-23