Cisco Systems Cisco 7206 VXR - page 9

9

Cisco7206 VXR Router with ISA Security Policy

The 7206 VXR NPE-400 Router

Once the router has been configured to meet FIPS 140-1 Level 2 requirements, the router cannot be

accessed without signs of tampering. To seal the system, apply serialized tamper-evidence labels as

follows:

•Clean the cover of any grease, dirt, or oil before applying the tamper evidence labels. Alcohol-based

cleaning pads are recommended for this purpose. The ambient air must be above 10C, otherwise the

labels may not properly cure.

•The tamper evidence label should be placed so that the one half of the label covers the enclosure and

the other half covers the 7206 VXR NPE-400 Input/Output Controller.

•The tamper evidence label should be placed over the Flash PC Card slots on the Input/Output

Controller.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the port adapter slot 1.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the port adapter slot 2.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the port adapter slot 3.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the port adapter slot 4.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the port adapter slot 5.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the port adapter slot 6.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the network processing engine.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the power supply plate.

•The tamper evidence label should be placed so that one half of the label covers the enclosure and

the other half covers the redundant power supply plate.

The labels completely cure within five minutes.

Contents

Main Cisco 7206 VXR Router with ISA Security Policy Introduction References Terminology Document Organization The 7206 VXR NPE-400 Router 3 Cisco7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router 4 The 7206 VXR NPE-400 Cryptographic Module Figure 1 The 7206 VXR NPE-400 Router ETHERNET 10BT FAST SERIAL FAST ETHERNET Module Interfaces Input/Output Controller Integrated Service Adapter Page Roles and Services Cryptographic Officer Services User Services Physical Security Page 10 Cisco7206 VXR Router with ISA Security Policy The 7206 VXR NPE-400 Router Power switch NETWORK PROCESSING ENGINE-150 Secure Operation of the Cisco 7206 VXR NPE-400 Router Initial Setup System Initialization and Configuration Non FIPS-Approved Algorithms Protocols Remote Access Obtaining Documentation World Wide Web Documentation CD-ROM Ordering Documentation Documentation Feedback Obtaining Technical Assistance Cisco.com Technical Assistance Center Contacting TAC by Using the Cisco TAC Website Contacting TAC by Telephone