Cisco 2811 User Manual

11
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
OL-8663-01
Cisco 2811 and Cisco 2821 Routers
There are two USB ports but they are not supported currently. The ports will be supported in the future
for smartcard or token reader.
The CF card that stored the IOS image is considered an internal memory module. The reason is the IOS
image stored in the card cannot be modified or upgraded. The card itself must never be removed from
the drive. Tamper evident seal will be placed over the card in the drive.
Roles and Services
Authentication in Cisco 2811 and Cisco 2821 is role-based. There are two main roles in the router that
operators can assume: the Crypto Officer role and the User role. The administrator of the router assumes
the Crypto Officer role in order to configure and maintain the router using Crypto Officer services, while
the Users exercise only the basic User services. The module supports RADIUS and TACACS+ for
authentication. A complete description of all the management and configuration capabilities of the router
can be found in the Performing Basic System Management manual and in the online help for the router.
User Services
Users enter the system by accessing the console port with a terminal program or via IPSec protected
telnet or SSH session to a LAN port. The IOS prompts the User for username and password. If the
password is correct, the User is allowed entry to the IOS executive program.
The services available to the User role consist of the following:
• Status Functions—View state of interfaces and protocols, version of IOS currently running.
• Network Functions—Connect to other network devices through outgoing telnet, PPP, etc. and
initiate diagnostic network services (i.e., ping, mtrace).
• Terminal Functions—Adjust the terminal session (e.g., lock the terminal, adjust flow control).
• Directory Services—Display directory of files kept in flash memory.
10/100 Ethernet LAN Port LEDs
AIM LEDs
PVDM LEDs
Power LED
Activity LEDs
Auxiliary LED
Compact Flash LED
Console Port
Auxiliary Port
Status Output Interface
Main Power Plug
Redundant Power Supply Plug
Power Interface
Table 8 Cisco 2821 FIPS 140-2 Logical Interfaces (Continued)

Cisco 2811 Specifications

General

Full duplex	Yes
Networking standards	-
Ethernet LAN data rates	10, 100 Mbit/s
Supports ISDN connection	No
Safety	UL 60950, CAN/CSA C22.2 No. 60950, IEC 60950, EN 60950-1, AS/NZS 60950
Flash memory	128 MB
Internal memory	256 MB
I/O ports	2 x USB\\r 2 x 10/100 Base-T
Ethernet LAN (RJ-45) ports	2
Storage temperature (T-T)	-40 - 70 °C
Firewall security	Cisco IOS
Security algorithms	128-bit AES, 192-bit AES, 256-bit AES, 3DES, DES
Product color	Blue, Stainless steel
Rack capacity	1U

Weight and Dimensions

Depth	416.6 mm
Width	438.2 mm
Height	44.5 mm
Weight	6400 g