Cisco SystemsメーカーCisco 7206 VXRの使用説明書/サービス説明書
ページ先へ移動 of 16
Corporate Headquarters: Copyright © 20 0 1 . Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA Cisco 7206 VXR Router with ISA Security P.
2 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router References This docume nt deals with operations an d capabiliti es of the 7206 VXR NPE- 400 router in the technical terms of a FIPS 140-1 cryptographic module secu rity policy .
3 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Cisco 7200 VXR ro uters accommodate a variety of netw ork interface port adapters and an I/O controller .
4 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router The NPE-400 has three lev els of cache: a primary and a se condary cache that are internal to the microprocessor , and a tertiary 4-MB e xternal cache th at provides additional hi gh-speed storage for data and instructions.
5 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router . All of these physical interf aces are sepa rated into the logi cal interfaces from FIP S as described in Ta b l e 3 . Integrated Service Adapter The ISA is a single-width service adapter .
6 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Fi gu r e 3 L ED s for ISA Cry pto Card Refer to Ta b l e 2 for further description of the ISA LEDs All of these physical interf aces are sepa rated into the logi cal interfaces from FIP S as described in Ta b l e 3 .
7 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router * Disabled in FIPS mode. See the “Secure Operatio n of the Ci sco 7206 VXR NPE-400 Router” section in this document for mor e information.
8 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Cryptographic Officer Services During initial conf iguration of the rout er , a cryptographic of ficer (cryp to off icer) password (t he “enable” password) is def ined and all management services are a vailable fro m this role.
9 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Once the router has been conf igured to meet FIPS 140-1 Le vel 2 r equirements, the router cannot b e accessed without signs of tamperi ng.
10 Cisco 7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Figure 4 sho ws the tamper evidence label placements. Figure 4 T amper Evidence Label Placement The tamper e vidence seals are prod uced from a special thin gauge vin yl with self- adhesi ve backing.
11 Cisco 7206 VXR Router with ISA Security Policy Secure Operation of the Cisco 7206 VXR NPE-400 Router Cryptographic Key Management The router securely administers both crypto graphic ke ys and ot her critical security parameters such as passwords. The tamper e vidence seal s provide physical protec tion for all ke ys.
12 Cisco 7206 VXR Router with ISA Security Policy Secure Operation of the Cisco 7206 VXR NPE-400 Router • The crypto off icer must create the “enable” pas sw ord for the crypto off icer role. The pas sw ord must be at least 8 characters and is entered when the crypto of ficer f irst engages the enable command.
13 Cisco 7206 VXR Router with ISA Security Policy Obtaining Documentation • T elnet access to the module is only allo wed via a secure IPSec tunnel between the remote syste m and the module. The cry pto off icer must conf igure the module so that any remote connection s via telnet are secured through IPSec.
14 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technica l Assistance T o submit your comments b y mail, use the response card behind t he front cove r of your document, or write to the follo wing address: Attn Document Resource Connection Cisco Systems, Inc.
15 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technical Assistance P3 and P4 le vel problems are def ined as follo ws: • P3—Y our network performance is de graded. Network f unctionality is noticeably impaired, b ut most busine ss operations continue.
16 Cisco 7206 VXR Router with ISA Security Policy Obtaining Technica l Assistance.
デバイスCisco Systems Cisco 7206 VXRの購入後に（又は購入する前であっても）重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります：
Cisco Systems Cisco 7206 VXRをまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはCisco Systems Cisco 7206 VXRの技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。Cisco Systems Cisco 7206 VXRの取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。Cisco Systems Cisco 7206 VXRで得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
Cisco Systems Cisco 7206 VXRを既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はCisco Systems Cisco 7206 VXRの不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、Cisco Systems Cisco 7206 VXRに関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちCisco Systems Cisco 7206 VXRデバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。
