Manuale d’uso / di manutenzione del prodotto Cisco 7206 VXR del fabbricante Cisco Systems
Vai alla pagina of 16
Corporate Headquarters: Copyright © 20 0 1 . Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA Cisco 7206 VXR Router with ISA Security P.
2 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router References This docume nt deals with operations an d capabiliti es of the 7206 VXR NPE- 400 router in the technical terms of a FIPS 140-1 cryptographic module secu rity policy .
3 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Cisco 7200 VXR ro uters accommodate a variety of netw ork interface port adapters and an I/O controller .
4 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router The NPE-400 has three lev els of cache: a primary and a se condary cache that are internal to the microprocessor , and a tertiary 4-MB e xternal cache th at provides additional hi gh-speed storage for data and instructions.
5 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router . All of these physical interf aces are sepa rated into the logi cal interfaces from FIP S as described in Ta b l e 3 . Integrated Service Adapter The ISA is a single-width service adapter .
6 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Fi gu r e 3 L ED s for ISA Cry pto Card Refer to Ta b l e 2 for further description of the ISA LEDs All of these physical interf aces are sepa rated into the logi cal interfaces from FIP S as described in Ta b l e 3 .
7 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router * Disabled in FIPS mode. See the “Secure Operatio n of the Ci sco 7206 VXR NPE-400 Router” section in this document for mor e information.
8 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Cryptographic Officer Services During initial conf iguration of the rout er , a cryptographic of ficer (cryp to off icer) password (t he “enable” password) is def ined and all management services are a vailable fro m this role.
9 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Once the router has been conf igured to meet FIPS 140-1 Le vel 2 r equirements, the router cannot b e accessed without signs of tamperi ng.
10 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Figure 4 sho ws the tamper evidence label placements. Figure 4 T amper Evidence Label Placement The tamper e vidence seals are prod uced from a special thin gauge vin yl with self- adhesi ve backing.
11 Cisco 7206 VXR Router with ISA Security Policy Secure Operation of the Cisco 7206 VXR NPE-400 Router Cryptographic Key Management The router securely administers both crypto graphic ke ys and ot her critical security parameters such as passwords. The tamper e vidence seal s provide physical protec tion for all ke ys.
12 Cisco 7206 VXR Router with ISA Security Policy Secure Operation of the Cisco 7206 VXR NPE-400 Router • The crypto off icer must create the “enable” pas sw ord for the crypto off icer role. The pas sw ord must be at least 8 characters and is entered when the crypto of ficer f irst engages the enable command.
13 Cisco 7206 VXR Router with ISA Security Policy Obtaining Documentation • T elnet access to the module is only allo wed via a secure IPSec tunnel between the remote syste m and the module. The cry pto off icer must conf igure the module so that any remote connection s via telnet are secured through IPSec.
14 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technica l Assistance T o submit your comments b y mail, use the response card behind t he front cove r of your document, or write to the follo wing address: Attn Document Resource Connection Cisco Systems, Inc.
15 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technical Assistance P3 and P4 le vel problems are def ined as follo ws: • P3—Y our network performance is de graded. Network f unctionality is noticeably impaired, b ut most busine ss operations continue.
16 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technica l Assistance.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco Systems Cisco 7206 VXR è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco Systems Cisco 7206 VXR - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco Systems Cisco 7206 VXR imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco Systems Cisco 7206 VXR ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco Systems Cisco 7206 VXR, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco Systems Cisco 7206 VXR.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco Systems Cisco 7206 VXR. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco Systems Cisco 7206 VXR insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
