Instruction/ maintenance manual of the product 4500 FIPS Nortel
Go to page of 14
© Copyright 2000 Nortel Networks. This document may be freely reproduced and distributed whole and intact including this Copyright Notice. Contivity™ Extranet Switch 4500 FIPS 140-1 Non-Proprietary.
© Copyright 2000 Nortel Networks. 2 Table of Contents 1 Introduction .................................................................................................................. 3 1.1 Purpose ....................................................
© Copyright 2000 Nortel Networks. 3 1 Introduction 1.1 Purpose This is a non-proprietary Cryptographic Module Security Policy for the Contivity™ Extranet Switch 4500.
© Copyright 2000 Nortel Networks. 4 This document provides an overview of the Contivity™ Switch and explains the secure configuration and operation of the module. This introduction section is followed by Section 2, which details the general features and functionality of the Contivity™ Switch.
© Copyright 2000 Nortel Networks. 5 2 The Contivity Extranet 4500 Switch The Nortel Networks Contivity Extranet Switch 4500 provides a scalable, secure, manageable remote access server that meets FIPS 140-1 level 2 requirements. This section will describe the general features and functionality provided by the Contivity Extranet Switch.
© Copyright 2000 Nortel Networks. 6 . Figure 2 – Physical Interfaces The physical interfaces include the dual power plugs for the redundant power supplies, the power and reset buttons, the serial port, the LAN Port RJ-45 connector, and up to six slots containing additional network connectors.
© Copyright 2000 Nortel Networks. 7 Figure 4 – 10/100BASE-TX LAN LEDs These physical interfaces are separated into the logical interfaces from FIPS as described in the following table: Switch physi.
© Copyright 2000 Nortel Networks. 8 front bezel allows access to the dual power supplies, hard drives, and floppy drive. Removing the top cover or the I/O panel allows access to the motherboard, memory, and expansion slots.
© Copyright 2000 Nortel Networks. 9 (2) Top Cover Labels (2) Front Bezel Labels Figure 6 – Tamper-Evident Labels Applied to Switch Front Bezel and Top Cover (2) AC Filter Input Labels (1) Air Hole .
© Copyright 2000 Nortel Networks. 10 Attempting to remove a label breaks it or continually tears off small fragments as depicted in Figure 9 . Other signs of tamper-evidence include a strong smell of organic solvents, warped or bent cover metal, and scratches in the paint on the module.
© Copyright 2000 Nortel Networks. 11 • IPSec Protocol Tunnels • PPTP Protocol Tunnels • L2TP Protocol Tunnels • L2F Protocol Tunnels • Change Password 2.4.1 Crypto Officer Services There is a factory default login ID and password, which allows access to the Crypto Officer role.
© Copyright 2000 Nortel Networks. 12 • Status Functions : to view the switch configuration, routing tables, active sessions, use Gets to view SNMP { XE "SNMP" } MIB II { XE "SNMP:MIB II" } statistics, usage graphs, health, temperature, memory status, voltage, packet statistics, and review accounting logs.
© Copyright 2000 Nortel Networks. 13 2.5 Key Management The switch securely administers both cryptographic keys and other critical security parameters such as User passwords.
© Copyright 2000 Nortel Networks. 14 Recommended • Change the default administrator password on the switch. • Disable all management protocols over private non- tunnelled interfaces Required • Select the “FIPS Enabled” button on the Service Available Management screens and restart the module.
An important point after buying a device Nortel 4500 FIPS (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Nortel 4500 FIPS yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Nortel 4500 FIPS - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Nortel 4500 FIPS you will learn all the available features of the product, as well as information on its operation. The information that you get Nortel 4500 FIPS will certainly help you make a decision on the purchase.
If you already are a holder of Nortel 4500 FIPS, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Nortel 4500 FIPS.
However, one of the most important roles played by the user manual is to help in solving problems with Nortel 4500 FIPS. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Nortel 4500 FIPS along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center