7.1 Module Interfaces 237

5.0 Physical Security

The board is designed to detect tampering attempts and will zeroize critical security parameters under a variety of prescribed circumstances. These circumstances include penetration of the module’s cryptographic envelope. The cryptographic envelope consists of an opaque tamper resistant lid and circuit board, and will provide clear visual evidence of tampering. The lid and circuit board are joined to form a contiguous perimeter. This perimeter encloses module components responsible for the creation, storage and processing of critical security parameters. The boundary contains intricate serpentine patterns that are used to detect tamper attempts associated with a breach of the cryptographic envelope by drilling, sawing or removal of the tamper lid.

7.1Module Interfaces

6.1USB (Universal Serial Bus) Interface

This is the trusted interface of the HSM. It is used for communicating with iKey1000 tokens. Four tokens are shipped with each HSM. One will contain a pin used to authenticate the Security Officer. One will contain a pin used to authenticate the User. One will contain a key-part to be controlled by the Security Officer.

One will contain a key-part to be controlled by the user. No secrets, key-parts or critical security parameters are contained within any of the tokens or within the HSM when these items are shipped from Rainbow Technologies.

6.2 Status LED (Light Emitting Diode) Interface

The LED can be in four possible states. These are off, green, orange and red. The meaning associated with each LED state is as follows:

LED State

Meaning

Off

Power off

 

 

Green

Board is on but idle

 

 

Orange

Board is in the self-test state or performing a

 

crypto function

 

 

Red

Board is in the error state

 

 

The true state of the HSM will be obtainable from the status register which is read by the host over the PCI interface.

6.3 Serial Interface

The serial interface is disabled in the production version of the HSM board.

6.4 PCI Interface

This interface is used to provide data and commands to the HSM board. It is also used to read data and status from the HSM.

Nortel VPN Gateway

User Guide

NN46120-104 02.01 Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

Page 236 Page 238
Page 237
Image 237
Nortel Networks NN46120-104 manual Physical Security, Module Interfaces
Page 236 Page 238

NN46120-104 specifications

Nortel Networks NN46120-104 is a versatile and efficient telecommunications hardware platform designed to meet the demands of modern networking environments. As a part of Nortel’s extensive portfolio, this device showcases the company’s commitment to innovation and reliability in the telecom sector.

One of the main features of the NN46120-104 is its robust performance capabilities. This platform is capable of handling high traffic volumes, making it suitable for medium to large enterprises. With its advanced routing capabilities and support for various protocols, the device ensures seamless communication across multiple network segments, providing efficient data transfer and connectivity.

The NN46120-104 is built upon the foundation of Nortel's renowned Layer 3 switching technology. This allows it to intelligently direct data packets based on their IP addresses, optimizing both speed and reliability. The inclusion of Virtual LAN (VLAN) support enhances network segmentation, improving security and management while reducing broadcast domains.

In terms of interface options, the NN46120-104 supports an array of Ethernet configurations, including Gigabit and Fast Ethernet ports. This flexibility allows organizations to tailor their networking solutions to their specific needs while enabling easy upgrades as technology evolves. The device also supports Power over Ethernet (PoE), facilitating the deployment of powered devices like IP phones and wireless access points without the need for additional power sources.

Another significant characteristic of the NN46120-104 is its robustness in terms of security features. With support for advanced security protocols and features such as Access Control Lists (ACLs), the device helps safeguard sensitive data by controlling traffic flow and restricting unauthorized access.

Additionally, the NN46120-104 is designed for ease of management. It offers an intuitive interface and supports various management protocols, including Simple Network Management Protocol (SNMP), enabling administrators to monitor and configure the device efficiently.

In summary, the Nortel Networks NN46120-104 combines high performance, extensive connectivity options, advanced security features, and ease of management, making it a formidable choice for enterprises looking to enhance their network infrastructure. Its capabilities align well with the rigorous demands of today’s digital communication landscape, ensuring reliability and efficiency in organizational operations.
Top Page Image Contents