Cisco 2821 Series Operazioni - Pagina 23

Sfoglia online o scarica il pdf Operazioni per Router di rete Cisco 2821 Series. Cisco 2821 Series 31. 2800 series integrated services routers
Anche per Cisco 2821 Series: Installazione e aggiornamenti (21 pagine), Scheda tecnica (20 pagine), Operazioni (31 pagine), Manuale di avvio rapido (47 pagine)

Stampa la pagina

1. Initial Setup

•

IPSec Requirements and Cryptographic Algorithms

•

Protocols

•

Remote Access

•

Related Documentation

For more information about the Cisco 2811 and Cisco 2821 Integrated Services Routers, refer to the

following documents:

•

OL-8663-01

RADIUS and TACACS+ shared secret key sizes must be at least 8 characters long, and must include

at least one number and one letter.

The only type of key management that is allowed in FIPS mode is Internet Key Exchange (IKE).

Although the IOS implementation of IKE allows a number of algorithms, only the following

algorithms are allowed in a FIPS 140-2 configuration:

ah-sha-hmac

–

esp-des

–

esp-sha-hmac

–

esp-3des

–

esp-aes

–

The following algorithms are not FIPS approved and should not be used during FIPS-approved

mode:

RSA

–

MD-5 for signing

–

MD-5 HMAC

–

SNMP v3 over a secure IPSec tunnel may be employed for authenticated, secure SNMP gets and

sets. Since SNMP v2C uses community strings for authentication, only gets are allowed under

SNMP v2C.

SSL is not an Approved protocol, and shall not be used in FIPS mode.

Telnet access to the module is only allowed via a secure IPSec tunnel between the remote system

and the module. The Crypto officer must configure the module so that any remote connections via

telnet are secured through IPSec, using FIPS-approved algorithms. Note that all users must still

authenticate after remote access is granted.

SSH access to the module is only allowed if SSH is configured to use a FIPS-approved algorithm.

The Crypto officer must configure the module so that SSH uses only FIPS-approved algorithms.

Note that all users must still authenticate after remote access is granted.

Cisco 2800 Series Integrated Services Routers Quick Start Guides

Cisco 2800 Series Hardware Installation documents

Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy