Manuals / Motorola / Computer Equipment / Network Router

Motorola S2500 manual SHOW -CRYPTO CONFiguration

Models: S2500

1 18

Download 18 pages 22.72 Kb

Page 7

Image 7

MNR S2500 Security Policy

Version 1.3, Revision Date: 1/13/2009

SHOW –CRYPTO CONFiguration

This command shows a detailed summary of the cryptographic configuration and allows a user to verify that encryption is enabled on user-determined ports and that only FIPS-Approved algorithms are used for encryption and authentication.

Page 7

Image 7

Motorola manual SHOW -CRYPTO CONFiguration, MNR S2500 Security Policy Version 1.3, Revision Date 1/13/2009

Contents

Document Version Revision Date 1/13/2009 Motorola Network Router MNR S2500 Security PolicyVersion 1.3, Revision Date 1/13/2009 TABLE OF CONTENTSPage MNR S2500 Security PolicyOptional Interface Cards 1. Module Overviewnot included in cryptographic module boundary Level 2. Security Level3. Modes of Operation Security Requirements SectionAllowed Algorithms Firmware ImplementationsNon-FIPS approved algorithms Step Entering FIPS ModeSETDefault !portlist -CRYPTO CONTrol = Enabled Table 3 - FIPS Approved mode configurationMNR S2500 Security Policy Version 1.3, Revision Date 1/13/2009 SHOW -CRYPTO CONFiguration4. Ports and Interfaces 5. Identification and Authentication PolicyAssumption of roles The definition of all supported roles is shown in Table 5 below Authenticated Services 6. Access Control PolicyUnauthenticated Services Maintenance Roles and ServicesService AdminTable 8 - Critical Security Parameters CSPs Definition of Critical Security Parameters CSPsThe following CSPs are contained within the module Description/UsageDefinition of Public Keys Definition of CSPs Modes of AccessAccess Control Table 10 - Services to CSP Access mappingReboot Enable Ports8. Security Rules 7. Operational Environment9. Crypto Officer Guidance Physical Security Mechanisms 10. Physical Security Policy11. Mitigation of Other Attacks Policy 12. Definitions and AcronymsPage PFS - Perfect Forward Secrecy RNG - Random Number GeneratorSHA - Secure Hash Algorithm SSH - Secure Shell SNMP - Simple Network Management Protocol