Aruba Networks FIPS 140-2 manual Logical Interfaces

Page 22

Linux implementation is not provided directly. Only Aruba-provided Crypto Officer interfaces are used. There is no user interface provided.

3.5 Logical Interfaces

The physical interfaces are divided into logical interfaces defined by FIPS 140-2 as described in the following table.

Table 2 - FIPS 140-2 Logical Interfaces

FIPS 140-2 Logical Interface

Module Physical Interface

 

 

Data Input Interface

10/100/1000 Ethernet Ports

 

802.11a/b/g/n Radio Transceiver

 

 

Data Output Interface

10/100/1000 Ethernet Ports

 

802.11a/b/g/n Radio Transceiver

 

 

Control Input Interface

10/100/1000 Ethernet Ports (PoE)

 

 

Status Output Interface

10/100/1000 Ethernet Ports

 

802.11a/b/g/n Radio Transceiver

 

LEDs

 

 

Power Interface

Power Supply

 

PoE

 

 

Data input and output, control input, status output, and power interfaces are defined as follows:

∙Data input and output are the packets that use the networking functionality of the module.

∙Control input consists of manual control inputs for power and reset through the power interfaces (5V DC or PoE). It also consists of all of the data that is entered into the access point while using the management interfaces.

∙Status output consists of the status indicators displayed through the LEDs, the status data that is output from the module while using the management interfaces, and the log file.

oLEDs indicate the physical state of the module, such as power-up (or rebooting), utilization level, and activation state. The log file records the results of self-tests, configuration errors, and monitoring data.

∙A power supply may be used to connect the electric power cable. Operating power may also be provided via Power Over Ethernet (POE) device when connected. The power is provided through the connected Ethernet cable.

∙Console port is disabled by covering TEL when operating in each of FIPS modes.

The module distinguishes between different forms of data, control, and status traffic over the network ports by analyzing the packet headers and contents.

22

Page 21 Page 23
Image 22
Page 21 Page 23
Contents Fips 140-2 Non-Proprietary Security Policy Page Aruba AP-120 Series ServicesAruba Dell Relationship Acronyms and Abbreviations Security Levels Physical SecurityPage Acronyms and Abbreviations IntroductionAruba Dell Relationship GHzLAN Physical Description Product OverviewAruba AP-120 Series Aruba Part Number Dell Corresponding Part NumberPWR Indicator LEDs Label Function Action StatusEnet Label Function Action Status Physical Security Module ObjectivesSecurity Levels Applying TELsAruba AP-124 TEL Placement AP-124 Front viewAP-124 Back view Aruba AP-125 TEL Placement AP-124 Bottom viewAP-125 Front view AP-125 Right view Inspection/Testing of Physical Security Mechanisms AP-125 Bottom viewConfiguring Remote AP Fips Mode Modes of OperationEnable Fips mode on the AP. This accomplished by going to Configuring Remote Mesh Portal Fips Mode Configuring Remote Mesh Point Fips Mode Verify that the module is in Fips mode Operational EnvironmentLogical Interfaces Fips 140-2 Logical Interfaces Module Physical InterfaceCrypto Officer Authentication Roles, Authentication and ServicesRoles Strength of Authentication Mechanisms User AuthenticationWireless Client Authentication Authentication Mechanism StrengthWPA2-PSK Service Description CSPs Accessed see section ServicesCrypto Officer Services WPA2 PSKService Description CSPs User ServicesService Wireless Client Services Unauthenticated Services ∙ FTP ∙ Tftp ∙ NTPCryptographic Algorithms Non-FIPS Approved AlgorithmsCritical Security Parameters HmacRNG PTK PSKAES-CCM GMK GTKSelf Tests For an AES Cavium hardware Post failure
Top Page Image Contents