Nortel Networks 4500 FIPS Contivity Extranet 4500 Switch, Cryptographic Module, Module Interfaces

Page 5

2 The Contivity Extranet 4500 Switch

The Nortel Networks Contivity Extranet Switch 4500 provides a scalable, secure, manageable remote access server that meets FIPS 140-1 level 2 requirements. This section will describe the general features and functionality provided by the Contivity Extranet Switch. Section 3 will provide further details on how the Contivity Switch addresses FIPS 140-1 requirements.

2.1Cryptographic Module

The Contivity Extranet Switch combines remote access protocols, security, authentication, authorization, and encryption technologies into a single solution.

Figure 1 – The Contivity Extranet 4500 Switch

The Switch can support up to 5,000 simultaneous user sessions, allowing each user to exercise a variety of secure connections and services. The Switch supports a number of secure network-layer and data-link-layer protocols including Internet Protocol Security (IPSec), Point- to-Point Tunneling Protocol (PPTP), Layer Two Tunneling Protocol (L2TP), and Layer Two Forwarding (L2F). The architecture for the Switch is user-centric, where an individual user or group of users can be associated with a set of attributes that provide custom access to the Extranet. In effect, you can create a personal Extranet based on the special needs of a user or group.

2.2Module Interfaces

The interfaces for the Switch are located on the rear panel as shown in Figure 2.

© Copyright 2000 Nortel Networks.

5

Image 5
Contents Copyright 2000 Nortel Networks Level 2 Validation FebruarySecure Operation of the Contivity Switch Table of Contents IntroductionContivity Extranet 4500 Switch Purpose IntroductionReferences TerminologyCopyright 2000 Nortel Networks Module Interfaces Contivity Extranet 4500 SwitchCryptographic Module Physical Interfaces Redundancy and Physical Security Switch physical interface Fips 140-1 Logical InterfaceSteel Cover of the Extranet Switch Contivity Extranet Switch Damaged Tamper-Evident Label Roles and ServicesCrypto Officer Services User Services Self Tests Secure Operation of the Contivity SwitchKey Management Required Recommended