Cisco Systems 7206 VXR Guia do Utilizador descarregar pdf (Página 1)

Corporate Headquarters:

Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA

Cisco 7206 VXR Router with ISA Security Policy

Introduction

This nonproprietary Cryptographic Module Security Policy describes how the 7206 VXR NPE-400

routers meet the security requirements of Federal Information Processing Standards (FIPS) 140-1, and

how they operate in a secure FIPS 140-1 mode. The policy was prepared as part of the Level 2 FIPS

140-1 certification of the 7206 VXR NPE-400 router.

Note This document may be copied in its entirety and without modification. All copies must include the

The FIPS 140-1 publication, "Security Requirements for Cryptographic Modules" details the U.S.

Government requirements for cryptographic modules. More information about the FIPS 140-1 standard

and validation program is available at the following National Institute of Standards and Technology

(NIST) website:

http://csrc.nist.gov/cryptval/

This document contains the following sections:

• Introduction, page 1

• The 7206 VXR NPE-400 Router, page 2

• Secure Operation of the Cisco 7206 VXR NPE-400 Router, page 11

• Obtaining Documentation, page 13

• Obtaining Technical Assistance, page 14

1 2 3 4 5 6 ... 15 16

Resumo do Conteúdo

Página 1 - Introduction

Página 2 - The 7206 VXR NPE-400 Router

10Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterFigure 4 shows the tamper evidence label placements.Figure 4 Tamper Evidenc

Página 3 - Cisco 7200

11Cisco 7206 VXR Router with ISA Security PolicySecure Operation of the Cisco 7206 VXR NPE-400 RouterCryptographic Key ManagementThe router securely a

Página 4 - Module Interfaces

12Cisco 7206 VXR Router with ISA Security PolicySecure Operation of the Cisco 7206 VXR NPE-400 Router• The crypto officer must create the “enable” pas

Página 5 - Integrated Service Adapter

13Cisco 7206 VXR Router with ISA Security PolicyObtaining Documentation• Telnet access to the module is only allowed via a secure IPSec tunnel between

Página 6 - ENCRYPT/COMP

14Cisco 7206 VXR Router with ISA Security PolicyObtaining Technical AssistanceTo submit your comments by mail, use the response card behind the front

Página 7 - Roles and Services

15Cisco 7206 VXR Router with ISA Security PolicyObtaining Technical AssistanceP3 and P4 level problems are defined as follows:• P3—Your network perfor

Página 8 - Physical Security

16Cisco 7206 VXR Router with ISA Security PolicyObtaining Technical Assistance

Página 9

2Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterReferencesThis document deals with operations and capabilities of the 7206 V

Página 10 - ORK PROCESSING ENGINE-150

3Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterCisco 7200 VXR routers accommodate a variety of network interface port adapt

Página 11 - Initial Setup

4Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterThe NPE-400 has three levels of cache: a primary and a secondary cache that

Página 12 - Remote Access

5Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 Router.All of these physical interfaces are separated into the logical interfaces

Página 13 - Obtaining Documentation

6Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterFigure 3 LEDs for ISA Crypto CardRefer to Table 2 for further description of

Página 14 - Cisco.com

7Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 Router* Disabled in FIPS mode. See the “Secure Operation of the Cisco 7206 VXR NPE

Página 15 - Contacting TAC by Telephone

8Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterCryptographic Officer ServicesDuring initial configuration of the router, a

Página 16

9Cisco 7206 VXR Router with ISA Security PolicyThe 7206 VXR NPE-400 RouterOnce the router has been configured to meet FIPS 140-1 Level 2 requirements,