Cisco 7606 Podręcznik użytkownika - Strona 10

Przeglądaj online lub pobierz pdf Podręcznik użytkownika dla Sprzęt sieciowy Cisco 7606. Cisco 7606 28 stron. User guide
Również dla Cisco 7606: Broszura (8 strony)

Cisco 7606 Podręcznik użytkownika

Roles and Services

Table 2
Switch and Router Physical Interfaces
Ethernet ports
Network and service module interfaces
STATUS LED (Supervisor Engine 2)
SYSTEM LED
ACTIVE LED
PWR MGMT LED
PCMCIA LED
Switch Load LED
Network Port LINK LEDs
STATUS LED (VPN Services module)
CONSOLE Port
Backplane
Roles and Services
Authentication is role-based. There are two main roles in the router that operators may assume: the
crypto officer role and the user role. The administrator of the router assumes the crypto officer role in
order to configure and maintain the router using crypto officer services, while the users only use the basic
user services. Both roles are authenticated by providing a valid username and password. The
configuration of the encryption and decryption functionality is performed only by the crypto officer after
authentication to the crypto officer role by providing a valid crypto officer username and password. After
the crypto officer configures the encryption and decryption functionality, the user can use this
functionality after authentication to the user role by providing a valid user username and password. The
crypto officer can also use the encryption and decryption functionality after authentication to the crypto
officer role.
The module supports RADIUS and TACACS+ for authentication and they are used in the FIPS mode. A
complete description of all the management and configuration capabilities of the Catalyst 6509 switch
and the Cisco 7606 and Cisco 7609 routers can be found in the Performing Basic System Management
manual and in the online help for the switch or the router.
The user and crypto officer passwords and the RADIUS/TACACS+ shared secrets must each be at least
eight alphanumeric characters in length. If only the integers 0 to 9 are used without repetition for an
8-digit PIN, the probability of randomly guessing the correct sequence is 1 in 1,814,400. If you include
the rest of the alphanumeric characters, the probability of guessing the correct sequence is decreased
drastically. See the
Routers" section on page 26
Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note
10
FIPS 140-2 Logical Interfaces (continued)
"Secure Operation of the Catalyst 6509 Switch and the Cisco 7606 and Cisco 7609
for more information.
FIPS 140-2 Logical Interface
Status output interface
Power interface
OL-6334-01