Manuals / Motorola / Computer Equipment / Network Router

Motorola S2500 Roles and Services, Crypto Officer SuperUser, Network Manager, Admin, Maintenance

Models: S2500

1 18

Download 18 pages 22.72 Kb

Page 11

Image 11

MNR S2500 Security Policy

Version 1.3, Revision Date: 1/13/2009

Roles and Services

Service	Crypto Officer (SuperUser)	Network Manager	User	Admin	Maintenance

Firmware Update	X	X

Key Entry	X	X

User Management	X	X

IKE	X	X

IPsec Tunnel Establishment	X	X

FRF.17 Tunnel Establishment	X	X

SSHv2	X	X

Reboot	X	X

Zeroization	X	X

Crypto Configuration	X	X

Network Configuration	X	X

Enable Ports	X	X

File System	X	X

Authenticated Show Status	X	X	X	X

Unauthenticated Show Status	X	X	X	X	X

Power-up Self-Tests	X	X	X	X

Monitor	X				X

Access Control	X	X

Table 7 – Services to Roles mapping

Page 11

Image 11

Motorola S2500 manual Roles and Services, Crypto Officer SuperUser, Network Manager, Admin, Maintenance

Contents

Document Version Revision Date 1/13/2009 Motorola Network Router MNR S2500 Security PolicyVersion 1.3, Revision Date 1/13/2009 TABLE OF CONTENTSPage MNR S2500 Security Policynot included in cryptographic module boundary 1. Module OverviewOptional Interface Cards Level 2. Security Level3. Modes of Operation Security Requirements SectionNon-FIPS approved algorithms Firmware ImplementationsAllowed Algorithms Step Entering FIPS ModeSETDefault !portlist -CRYPTO CONTrol = Enabled Table 3 - FIPS Approved mode configurationMNR S2500 Security Policy Version 1.3, Revision Date 1/13/2009 SHOW -CRYPTO CONFigurationAssumption of roles 5. Identification and Authentication Policy4. Ports and Interfaces The definition of all supported roles is shown in Table 5 below Unauthenticated Services 6. Access Control PolicyAuthenticated Services Maintenance Roles and ServicesService AdminTable 8 - Critical Security Parameters CSPs Definition of Critical Security Parameters CSPsThe following CSPs are contained within the module Description/UsageDefinition of Public Keys Definition of CSPs Modes of AccessAccess Control Table 10 - Services to CSP Access mappingReboot Enable Ports8. Security Rules 7. Operational Environment9. Crypto Officer Guidance Physical Security Mechanisms 10. Physical Security Policy11. Mitigation of Other Attacks Policy 12. Definitions and AcronymsPage PFS - Perfect Forward Secrecy RNG - Random Number GeneratorSHA - Secure Hash Algorithm SSH - Secure Shell SNMP - Simple Network Management Protocol

Roles and Services

Service

Crypto Officer (SuperUser)

Network Manager

User

Admin

Maintenance

Table 7 – Services to Roles mapping