Manuale d’uso / di manutenzione del prodotto 7206VXR NPE-400 del fabbricante Cisco
Vai alla pagina of 22
Corporate Headquarters: Copyright © 2004 Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA FIPS 140-2 Nonproprietary Security Policy for Cisco 7206VXR NPE-400 Router with VAM Introduction This is a non-propriet ary Cryptographic Module Secu rity Polic y for Cisco Systems.
2 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 FIPS 140-2 Submission Package • Documentation Feedback , page 18 • Obtaining T echnical Assistance.
3 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Module Cryptographic Module The Cisco 7206VXR NPE-400 router wi th V AM is a multiple-chip standalone cryptographic module.
4 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Module Interfaces Ta b l e 1 shows the front panel LEDs, w hich provide overall status of the router operation.
5 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Module Interfaces The VPN Acceleration Module (V AM) is a single -width acceleration module that pro v.
6 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Roles and Servic es In addition to th e b uilt-in interf aces, the router also has addition al port adapters that can optio nally be placed in an av ailable slot.
7 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Roles and Services The User and Crypto Of ficer passw ords and the RADI US/T ACA CS+ shared sec rets must each be at least 8 alphanumeric characters in length.
8 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Physical Security Physical Security The router is encased in a steel chassis.
9 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Key M anagement Figure 4 T amper Evidence La bel Placement (Fr ont View) Figure 5 T ampe.
10 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Cryptographic Key Management The module supports the fol lo wing critical security parameters (CSPs) : T able 2 Cr itical Secur ity Par amet ers # CSP Name Description Storage 1 CSP 1 This is the seed key for X9.
11 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Key M anagement 14 CSP14 The IPSec encryption key . Zeroized when IPSec session is terminat ed. DRAM (plainte xt) 15 CSP1 5 The IPSec authentication k ey .
12 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Cryptographic Key Management The services accessing the CSPs, the type of access and which role accesses the CSPs a re listed in th e Figure 6 . 25 CSP2 5 This ke y is used by th e router to authenticate itself to the peer .
13 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Cryptographic Key M anagement Figure 6 Role and Service Access t o CSPs.
14 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Cryptographic Key Management The module supports DE S (only for le gac y system s), 3DES, DES-MA C, T.
15 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Self-Tests Key Zeroization All of the ke ys and CSPs of the module can be zer oized. Please refer to the Description column of Ta b l e 2 for information on methods to zeroi ze each ke y and CSP .
16 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Secure Oper ation – Continuous random num ber generator test Secure Operation The Cisco 7206VXR NPE-400 ro uter with a single VPN Acceler ation Module (V AM) meets all the Le vel 2 requirements for FIPS 140-2.
17 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Obtaining Documentation • If the Crypto Of f icer loads an y IOS image onto the router , this will put the router into a non -FIPS mode of operation.
18 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Documentation Fe edback Y ou can access the Cisco website at this URL: http://www .cisco.com Y ou can access international Cisco w ebsites at this URL: http://www .
19 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Obtaining Technical Assista nce Cisco Technical Support Website The Cisco T echnical Su pport W ebsite provides online documen ts and tools for trou bleshooting an d resolving technical issues with Cisc o pro ducts and technologies.
20 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Obtaining Additional Pub lications and Information Obtaining Additional Publications and Information Information about Cisco products, techno logies, and netw ork solutions is a v ailable from various online and printed sources.
21 FIPS 140-2 Nonproprietary Security Policy fo r Cisco 7206VXR NPE-400 Router with VAM OL-3959-01 Obtaining Additional Publ ications and Information This document is to be used in conjunction with the docu ments that sh ipped with your hardware .
22 FIPS 140-2 Nonproprietary Security Policy for Cisco 7206V XR NPE-400 Router with VAM OL-3959-01 Obtaining Additional Pub lications and Information.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco 7206VXR NPE-400 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco 7206VXR NPE-400 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco 7206VXR NPE-400 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco 7206VXR NPE-400 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco 7206VXR NPE-400, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco 7206VXR NPE-400.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco 7206VXR NPE-400. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco 7206VXR NPE-400 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
