Cisco IOS XR System Administration (IOSXR200)

The Cisco IOS XR System Administration (IOSXR200) v1.1 course covers the fundamental concepts on which the Cisco® Internetwork Operating System (IOS) XR operating system is based, as well as the knowledge and skills you need to perform system administration tasks using Cisco IOS® XR Software. You will also learn how to interpret log messages, configure exception reporting and logging, perform software installations, configure authentication, authorization, and accounting (AAA) authentication, configure secure domain routers, configure the Network Time Protocol, monitor system processes, perform packet filtering, and configure Management Plane Protection.

How you’ll benefit

This course will help you:

  • Understand the fundamentals of the highly available and highly secure Cisco IOS XR operating system
  • Prepare to perform system administration tasks using Cisco IOS XR in a service provider network

Who should enroll

This course is designed for network professionals, Network Operations Center (NOC) personnel, and support staff who are involved with the system administration of Cisco routers that run the Cisco IOS XR software operating system.


After taking this course, you should be able to describe:

  • The Cisco IOS XR configuration file system
  • How to install Cisco IOS XR software
  • Secure domain routers
  • AAA security
  • Network time synchronization


Before attending this course, you should have the following knowledge and skills:

  • Completion of the Introduction to Cisco IOS XR (IOSXR100) course, or equivalent hands-on experience configuring and supporting Cisco IOS XR–based routers
  • Experience working with CLI-based network devices
  • Basic knowledge of the architecture and operations of Cisco IOS XR–based routers
  • Fundamental knowledge of Cisco IOS XR configuration and operation

Course duration

3 days – Instructor-led training



  • Configuration File System Overview
    • Configuration File System
  • Cisco IOS XR Software Installation
    • Examining the Software Packaging
    • Installing the Software
    • Recovering from a Software Installation
  • Secure Domain Routers
    • Examining a Secure Domain Router (SDR)
    • Physical Router
    • SDR Creation
  • AAA Security
    • AAA Fundamentals
    • Task-Based Security
    • Configuring a User Security Policy
    • Authentication with Remote Servers
    • AAA and the Terminal Access Controller Access Control System Plus (TACACS+) Server
    • Configuring AAA in Cisco IOS XR Software
    • Configuring the AAA Server
    • Configuring Virtual Teletype (VTY) User Authentication
    • TACACS+ Command Authorization
    • TACACS+ Command Accounting
    • AAA Troubleshooting
    • TACACS+ Troubleshooting
    • Remote Authentication Dial-In User Service (RADIUS) Troubleshooting
  • Network Time Synchronization
    • Network Time Synchronization Overview
    • Network Time Protocol

Lab outline

  • Configuration File System
    • Navigating the Cisco Fabric Services (CFS)
    • Exploring the System Database (SysDB)
    • Exploring the Binary Files
    • Comparing ASCII and Binary Files on the Active and Standby Rendezvous Points (RPs)
  • Software Installation – Pre-Installation Checks
    • Perform Pre-installation Checks
  • Activating/Deactivating Software Packages
    • Deactivate Feature Packages
  • Configuring Non-Owner Secure Domain Router
    • Secure Domain Router Configuration
    • Reviewing the Configuration
  • Configuring User Security Policies
    • Configuring User Security Policies
  • Configuring TACACS+ AAA Authentication on the Router
    • Creating a TACACS+ AAA Configuration on the Router
  • Accessing and Configuring the TACACS+ Server
    • Access and Configure the TACACS+ Server
  • Configuring TACACS+ Authentication for VTY Users
    • Configure TACACS+ Authentication for VTY Users
  • Enabling Command Accounting through the TACACS+ Server
    • Enable Command Accounting Through the TACACS+ Server
  • Network Time Synchronization
    • Configuring and Verifying a Network Time Protocol Server Association
    • Configure and Verify an Authenticated NTP Server Association
  • Monitoring Processes
    • Monitor Processes
  • Monitoring a Routing Protocol Process Restart
    • Monitor a Routing Protocol Process Restart
  • Monitoring Memory
    • Monitor Memory
  • Configuring SNMP
    • Configure SNMP
  • Configuring Logging
    • Configure Logging
  • Configuring IPv4 Filtering
    • Configure IPv4 Filtering
    • Configure Anti spoofing Access Control Lists (ACLs)
  • Using ACLs for Troubleshooting
    • Use ACLs for Troubleshooting
  • Implementing and Verifying Unicast Reverse Path Forwarding (uPRF)
    • Implement and Verify uRPF
  • Configuring Management Plane Protection (MPP)
    • Configure Management Plane Protection