Instruction/ maintenance manual of the product Router 7206 VXR Cisco
Go to page of 16
Corporate Headquarters: Copyright © 20 0 1 . Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA Cisco 7206 VXR Router with ISA Security P.
2 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router References This docume nt deals with operations an d capabiliti es of the 7206 VXR NPE- 400 router in the technical terms of a FIPS 140-1 cryptographic module secu rity policy .
3 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Cisco 7200 VXR ro uters accommodate a variety of netw ork interface port adapters and an I/O controller .
4 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router The NPE-400 has three lev els of cache: a primary and a se condary cache that are internal to the microprocessor , and a tertiary 4-MB e xternal cache th at provides additional hi gh-speed storage for data and instructions.
5 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router . All of these physical interf aces are sepa rated into the logi cal interfaces from FIP S as described in Ta b l e 3 . Integrated Service Adapter The ISA is a single-width service adapter .
6 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Fi gu r e 3 L ED s for ISA Cry pto Card Refer to Ta b l e 2 for further description of the ISA LEDs All of these physical interf aces are sepa rated into the logi cal interfaces from FIP S as described in Ta b l e 3 .
7 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router * Disabled in FIPS mode. See the “Secure Operatio n of the Ci sco 7206 VXR NPE-400 Router” section in this document for mor e information.
8 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Cryptographic Officer Services During initial conf iguration of the rout er , a cryptographic of ficer (cryp to off icer) password (t he “enable” password) is def ined and all management services are a vailable fro m this role.
9 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Once the router has been conf igured to meet FIPS 140-1 Le vel 2 r equirements, the router cannot b e accessed without signs of tamperi ng.
10 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Figure 4 sho ws the tamper evidence label placements. Figure 4 T amper Evidence Label Placement The tamper e vidence seals are prod uced from a special thin gauge vin yl with self- adhesi ve backing.
11 Cisco 7206 VXR Router with ISA Security Policy Secure Operation of the Cisco 7206 VXR NPE-400 Router Cryptographic Key Management The router securely administers both crypto graphic ke ys and ot her critical security parameters such as passwords. The tamper e vidence seal s provide physical protec tion for all ke ys.
12 Cisco 7206 VXR Router with ISA Security Policy Secure Operation of the Cisco 7206 VXR NPE-400 Router • The crypto off icer must create the “enable” pas sw ord for the crypto off icer role. The pas sw ord must be at least 8 characters and is entered when the crypto of ficer f irst engages the enable command.
13 Cisco 7206 VXR Router with ISA Security Policy Obtaining Documentation • T elnet access to the module is only allo wed via a secure IPSec tunnel between the remote syste m and the module. The cry pto off icer must conf igure the module so that any remote connection s via telnet are secured through IPSec.
14 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technica l Assistance T o submit your comments b y mail, use the response card behind t he front cove r of your document, or write to the follo wing address: Attn Document Resource Connection Cisco Systems, Inc.
15 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technical Assistance P3 and P4 le vel problems are def ined as follo ws: • P3—Y our network performance is de graded. Network f unctionality is noticeably impaired, b ut most busine ss operations continue.
16 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technica l Assistance.
An important point after buying a device Cisco Router Cisco 7206 VXR (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Router Cisco 7206 VXR yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Router Cisco 7206 VXR - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Router Cisco 7206 VXR you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Router Cisco 7206 VXR will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Router Cisco 7206 VXR, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Router Cisco 7206 VXR.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Router Cisco 7206 VXR. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Router Cisco 7206 VXR along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
