Cryptographic Module
Cryptographic Module
The Cisco 7206VXR NPE-400 router with VAM is a multiple-chip standalone cryptographic module. The Cisco 7206VXR supports multi-protocol routing and bridging with a wide variety of protocols and port adapter combinations available for Cisco 7200 series routers. The metal casing that fully encloses the module establishes the cryptographic boundary for the router, all the functionality discussed in this document is provided by components within the casing. The Cisco 7206VXR has six slots for port adapters, one slot for an input/output (I/O) controller, and one slot for a network processing engine or network services engine.
Figure 1 Cisco 7206VXR NPE-400 Router (Front View)
Port adapters
| | | | | | | | | | | | | | | | | | | | | | | | | | 6 |
| 5 | | | | | | | | | | | | | | | | | | | | | | | | | |
| | | | | | | | ETHERNET 10BT | | | | | | | | | | | | | | FAST ETHERNET | | |
| | | | | | | | ENABLED | | | | | | | | K | | | 5 | | | | | | |
| | | | | | | | | | | | M | II | | IN | R | J 4 | | | | | | 4 |
| | | | | | | | | | | | L | | | | | | | |
| 3 | | | | | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | 0 | | | | | | | | | | | | | |
| | | | | | | | FAST SERIAL | | | | | | | | | | | | | | ETHERNET-10BFL | | | |
| | | | | | | | | EN | TX | RX | TX | RX | | | | TX | | | RX | TX | R | X | TX | | 2 |
| | | | | | | | | RX | | | | | | 4 | |
| 1 | | | | | | | | 0 | | | 1 | 2 | | | | | | | | 3 | | | | | |
| | | | | | | | | | | | | | | | | | | | | | | | | |
Port adapter | Cisco 7200 | | | | SLOT | 1 | | MII | | | | | FAST ETHERNET INPUT/OUTPUT CONTROLLER | | | |
| | | | FE | | | | | | | | | | | | | | | | | | H5997 |
Series | ENABLED | | | | | | | | | | | | | | | | | | | | | 0 |
lever | | | | | | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | | | | | |
| PCMCIA | EJECT | SLOT | 0 | | | MII | RJ45 | RJ45 | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | |
| | | | | EN | EN | LINK | | | | | | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | | | | | | | |
I/O controller | | | | | | | | | | | | | | | | | | | | | | | | | | |
PC card slots | Auxiliary | Console |
Optional Fast Ethernet port | port | port |
(MII receptacle and RJ-45 receptacle) | |
The Cisco 7206VXR NPE-400 uses an RM7000 microprocessor that operates at an internal clock speed of 350 MHz. The NPE-400 uses SDRAM for storing all packets received or sent from network interfaces. The SDRAM memory array in the system allows concurrent access by port adapters and the processor. The NPE-400 has three levels of cache: a primary and a secondary cache that are internal to the microprocessor, and a tertiary 4-MB external cache that provides additional high-speed storage for data and instructions.
The Cisco 7206VXR router comes equipped with one 280W AC-input power supply. (A 280W DC-input power supply option is available.) A power supply filler plate is installed over the second power supply bay. A fully configured Cisco 7206VXR router operates with only one installed power supply; however,
asecond, optional power supply of the same type provides hot-swappable, load-sharing, redundant power.
Module Interfaces
The interfaces for the router are located on the front panel Input/Output (I/O) Controller, with the exception of the power switch and power plug. The module has two Fast Ethernet (10/100 RJ-45) connectors for data transfers in and out. The module also has two other RJ-45 connectors for a console terminal for local system access and an auxiliary port for remote system access or dial backup using a modem.
FIPS 140-2 Nonproprietary Security Policy for Cisco 7206VXR NPE-400 Router with VAM
