Dell AP-135, AP-134 Logical Interfaces, Fips 140-2 Logical Interface Module Physical Interface

Page 21

3.5 Logical Interfaces

The physical interfaces are divided into logical interfaces defined by FIPS 140-2 as described in the following table.

FIPS 140-2 Logical Interface

Module Physical Interface

 

 

Data Input Interface

10/100/1000 Ethernet Ports

 

802.11a/b/g/n Radio Transceiver

 

 

Data Output Interface

10/100/1000 Ethernet Ports

 

802.11a/b/g/n Radio Transceiver

 

 

Control Input Interface

10/100/1000 Ethernet Ports (PoE)

 

 

Status Output Interface

10/100/1000 Ethernet Ports

 

802.11a/b/g/n Radio Transceiver

 

LEDs

 

 

Power Interface

Power Supply

 

 

Data input and output, control input, status output, and power interfaces are defined as follows:

Data input and output are the packets that use the networking functionality of the module.

Control input consists of manual control inputs for power and reset through the power interfaces (5V DC or PoE). It also consists of all of the data that is entered into the access point while using the management interfaces.

Status output consists of the status indicators displayed through the LEDs, the status data that is output from the module while using the management interfaces, and the log file.

oLEDs indicate the physical state of the module, such as power-up (or rebooting), utilization level, and activation state. The log file records the results of self-tests, configuration errors, and monitoring data.

A power supply may be used to connect the electric power cable. Operating power may also be provided via Power Over Ethernet (POE) device when connected. The power is provided through the connected Ethernet cable.

Console port is disabled when operating in each of FIPS modes.

The module distinguishes between different forms of data, control, and status traffic over the network ports by analyzing the packet headers and contents.

21

Image 21
Contents Fips 140-2 Non-Proprietary Security Policy Page Security Levels Physical Security Aruba Dell Relationship Acronyms and AbbreviationsModes of Operation Operational Environment Logical InterfacesServices Aruba Dell Relationship IntroductionAcronyms and Abbreviations CPSecSHA AP-134 Product OverviewPhysical Description Aruba Part Number Dell Corresponding Part NumberPWR AP-134 Indicator LEDs Label Function Action StatusENET0 ENET1AP-135 AP-135 Indicator LEDs Label Function Action Status Security Levels Module ObjectivesPhysical Security Applying TELsAP-134 Front view 2 AP-134 TEL PlacementAP-134 Top View 3 AP-135 TEL PlacementAP-135 Front view AP-135 Top view Inspection/Testing of Physical Security MechanismsModes of Operation Configuring Remote AP Fips ModeEnable Fips mode on the AP. This accomplished by going to Configuring Remote Mesh Portal Fips Mode Configuring Remote Mesh Point Fips Mode Operational Environment Verify that the module is in Fips modeFips 140-2 Logical Interface Module Physical Interface Logical InterfacesRoles, Authentication and Services Crypto Officer AuthenticationRoles Wireless Client Authentication User AuthenticationStrength of Authentication Mechanisms Authentication Mechanism StrengthWPA2-PSK Crypto Officer Services ServicesWPA2 PSK KEKPMK User ServicesPTK Eapol MICUnauthenticated Services Wireless Client Services∙ FTP ∙ Tftp ∙ NTP Non-FIPS Approved Algorithms Cryptographic AlgorithmsHmac Critical Security ParametersRNG AES-CCM PSKGTK GMKSelf Tests For an AES Atheros hardware Post failure