Gebruiksaanwijzing /service van het product 7206VXR NPE-400 van de fabrikant Cisco
Ga naar pagina of 22
Corporate Headquarters: Copyright © 2004 Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA FIPS 140-2 Nonproprietary Security Policy for Cisco 7206VXR NPE-400 Router with VAM Introduction This is a non-propriet ary Cryptographic Module Secu rity Polic y for Cisco Systems.
2 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 FIPS 140-2 Submission Package • Documentation Feedback , page 18 • Obtaining T echnical Assistance.
3 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Module Cryptographic Module The Cisco 7206VXR NPE-400 router wi th V AM is a multiple-chip standalone cryptographic module.
4 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Module Interfaces Ta b l e 1 shows the front panel LEDs, w hich provide overall status of the router operation.
5 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Module Interfaces The VPN Acceleration Module (V AM) is a single -width acceleration module that pro v.
6 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Roles and Servic es In addition to th e b uilt-in interf aces, the router also has addition al port adapters that can optio nally be placed in an av ailable slot.
7 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Roles and Services The User and Crypto Of ficer passw ords and the RADI US/T ACA CS+ shared sec rets must each be at least 8 alphanumeric characters in length.
8 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Physical Security Physical Security The router is encased in a steel chassis.
9 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Key M anagement Figure 4 T amper Evidence La bel Placement (Fr ont View) Figure 5 T ampe.
10 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Cryptographic Key Management The module supports the fol lo wing critical security parameters (CSPs) : T able 2 Cr itical Secur ity Par amet ers # CSP Name Description Storage 1 CSP 1 This is the seed key for X9.
11 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Key M anagement 14 CSP14 The IPSec encryption key . Zeroized when IPSec session is terminat ed. DRAM (plainte xt) 15 CSP1 5 The IPSec authentication k ey .
12 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Cryptographic Key Management The services accessing the CSPs, the type of access and which role accesses the CSPs a re listed in th e Figure 6 . 25 CSP2 5 This ke y is used by th e router to authenticate itself to the peer .
13 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Key M anagement Figure 6 Role and Service Access t o CSPs.
14 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Cryptographic Key Management The module supports DE S (only for le gac y system s), 3DES, DES-MA C, T.
15 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Self-Tests Key Zeroization All of the ke ys and CSPs of the module can be zer oized. Please refer to the Description column of Ta b l e 2 for information on methods to zeroi ze each ke y and CSP .
16 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Secure Oper ation – Continuous random num ber generator test Secure Operation The Cisco 7206VXR NPE-400 ro uter with a single VPN Acceler ation Module (V AM) meets all the Le vel 2 requirements for FIPS 140-2.
17 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Obtaining Documentation • If the Crypto Of f icer loads an y IOS image onto the router , this will put the router into a non -FIPS mode of operation.
18 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Documentation Fe edback Y ou can access the Cisco website at this URL: http://www .cisco.com Y ou can access international Cisco w ebsites at this URL: http://www .
19 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Obtaining Technical Assista nce Cisco Technical Support Website The Cisco T echnical Su pport W ebsite provides online documen ts and tools for trou bleshooting an d resolving technical issues with Cisc o pro ducts and technologies.
20 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Obtaining Additional Pub lications and Information Obtaining Additional Publications and Information Information about Cisco products, techno logies, and netw ork solutions is a v ailable from various online and printed sources.
21 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Obtaining Additional Publ ications and Information This document is to be used in conjunction with the docu ments that sh ipped with your hardware .
22 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Obtaining Additional Pub lications and Information.
Een belangrijk punt na aankoop van elk apparaat Cisco 7206VXR NPE-400 (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Cisco 7206VXR NPE-400 heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Cisco 7206VXR NPE-400 vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Cisco 7206VXR NPE-400 leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Cisco 7206VXR NPE-400 krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Cisco 7206VXR NPE-400 bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Cisco 7206VXR NPE-400 kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Cisco 7206VXR NPE-400 . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
