Cisco 2621XM User Manual

Corporate Headquarters:
Copyright © 2001. Cisco Systems, Inc. All rights reserved.
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Cisco 2621XM and Cisco 2651XM Modular
Access Routers with AIM-VPN/EP FIPS 140-2
Non-Proprietary Security Policy
Level 2 Validation
Version 1.3
June 2, 2004
Introduction
This is the non-proprietary Cryptographic Module Security Policy for the 2621XM and 2651XM
Modular Access Routers with AIM-VPN/EP. This security policy describes how the 2621XM and
2651XM routers (Hardware Version: 2621XM, 2651XM; AIM-VPN/EP: Hardware Version 1.0, Board
Version B0; Firmware Version: IOS 12.3(3d)) meet the security requirements of FIPS 140-2, and how to
operate the 2621XM and 2651XM routers in a secure FIPS 140-2 mode. This policy was prepared as
part of the Level 2 FIPS 140-2 validation of the 2621XM and 2651XM routers.
FIPS 140-2 (Federal Information Processing Standards Publication 140-2—Security Requirements for
Cryptographic Modules) details the U.S. Government requirements for cryptographic modules. More
information about the FIPS 140-2 standard and validation program is available on the NIST website at
http://csrc.nist.gov/cryptval/.
This document contains the following sections:
• Introduction, page 1
• The 2621XM/2651XM Router, page 2
• Secure Operation of the Cisco 2621XM/2651XM Router, page 17
• Related Documentation, page 19
• Obtaining Documentation, page 19
• Documentation Feedback, page 20
• Obtaining Technical Assistance, page 20
• Obtaining Additional Publications and Information, page 22

Cisco 2621XM Specifications

General

Brand	Cisco
Model	2621XM
Category	Network Router
Language	English

Summary

Introduction

Router Overview and Interfaces

The 2621XM/2651XM Router

Details the general features and functionality of the Cisco 2621XM and 2651XM routers.

Physical and Cryptographic Module Details

Describes the cryptographic module, its boundary, and physical interfaces.

Security Features and Management

Roles and Services

Details the responsibilities and tasks of Crypto Officer and User roles.

Physical Security

Describes the physical security measures and chassis construction of the router.

Cryptographic Key Management

Explains how the router manages cryptographic keys and CSPs.

Self-Tests

Describes the self-tests performed by the router's software and hardware.

Secure Operation and Configuration

Initial Setup and FIPS Mode

Steps for initial setup and configuring the module for FIPS mode.

System Configuration and IPSec

Details system initialization, configuration, and FIPS-approved IPSec requirements.

Protocols, Access, and Support

Protocols and Remote Access

Details allowed/disallowed protocols and secure remote access methods.

Documentation and Technical Assistance

Lists related documents, how to obtain them, and how to get technical support.