Cisco 2851 - Integrated Services Router Руководство пользователя - Страница 13

Просмотреть онлайн или скачать pdf Руководство пользователя для Сетевой маршрутизатор Cisco 2851 - Integrated Services Router. Cisco 2851 - Integrated Services Router 25 страниц. Power up and initial configuration procedures
Также для Cisco 2851 - Integrated Services Router: Установка и модернизация (21 страниц), Информационный лист (20 страниц), Краткое руководство по эксплуатации (47 страниц), Конфигурация (10 страниц)

Печатать страницу

Cisco 2851 - Integrated Services Router Руководство пользователя

Table 5

Cryptographic Keys and CSPs (Continued)

Enable secret

Shared

Secret

RADIUS secret Shared

Secret

TACACS+

Shared

secret

Secret

All RSA operations are prohibited by policy, and commands that can be executed by Officer are shown

Note

"# command".

Table 6

Note: An empty entry indicates that a particular SRDI is not accessible by the corresponding service

SRDI/Role/Service Access Policy

Security Relevant Data Item

PRNG Seed

DH private exponent

DH public key

OL-8717-01

The ciphertext password of the CO role. However,

the algorithm used to encrypt this password is not

FIPS approved. Therefore, this password is

considered plaintext for FIPS purposes. This

password is zeroized by overwriting it with a new

password.

The RADIUS shared secret. This shared secret is

zeroized by executing the "no radius-server key"

command.

The TACACS+ shared secret. This shared secret is

zeroized by executing the "no tacacs-server key"

command.

Role and Service Access to CSP

Cisco 2851 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy

NVRAM

Overwrite with new

(plaintext)

password

NVRAM

"# no radius-server key"

(plaintext),

DRAM

(plaintext)

NVRAM

"# no tacacs-server key"

(plaintext),

DRAM

(plaintext)

Cisco 2851 Routers