Cisco ISR 4000 series User Manual

Cisco ISR 4000 Family Routers Administrator Guidance
Page 45 of 66
Requirement
Auditable Events
Additional
Audit Record
Contents
Sample Record
AuditSessionID
000000000000000D001C2D92, CKN
24AA15376050334AE1EA9BE8A
1D0894B000000000000000000000
00000000000
FCS_MACSEC_EX
T.3.1
Creation and
update of Secure
Association Key
Creation and
update times
 For SAK (Security Association
Key) creation-
Mar 15 2016 12:54:49.937 IST: MKA-
EVENT 80e0.1dc6.3e7f/0016
C7000003:
Generation of new Latest SAK
succeeded (Latest AN=0, KN=1)...
 For SAK (Security Association
Key) update –
Mar 15 2016 <tel:2016> 14:38:53.326
IST: %MKA-6-SAK_REKEY: (Gi0/1/0
: 10) MKA Session is beginning a SAK
Rekey (current Latest AN/KN 0/1, Old
AN/KN
0/1) for RxSCI f4cf.e298.ccb8/000a,
AuditSessionID CKN
10000000000000000000000000000000
00000000000000000000000000000000
FCS_IPSEC_EXT.1
Failure to
establish an IPsec
SA.
Session
establishment with
peer
Reason for
failure.
Entire packet
contents of
packets
transmitted/rec
eived during
session
establishment
Initiation of IPSEC session (outbound):
Jun 20 07:42:26.823: ISAKMP (0):
received packet from 100.1.1.5 dport 500
sport 500 Global (N) NEW SA
Jun 20 07:42:26.823: ISAKMP: Created
a peer struct for 100.1.1.5, peer port 500
Jun 20 07:42:26.823: ISAKMP: New
peer created peer = 0x89C3879C
peer_handle = 0x8000000C
Jun 20 07:42:26.823: ISAKMP: Locking
peer struct 0x89C3879C, refcount 1 for
crypto_isakmp_process_block
Jun 20 07:42:26.823: ISAKMP: local
port 500, remote port 500
Jun 20 07:42:26.823: ISAKMP:(0):insert
sa successfully sa = 8C1C1FD4

Cisco ISR 4000 series Specifications

General

Routing Performance	Up to 2 Gbps
Switching Capacity	Varies by model
Operating System	Cisco IOS XE
Dimensions	Varies by model
Weight	Varies by model
Series	ISR 4000
WAN Ports	Varies by model
LAN Ports	Varies by model
Redundancy	Yes
Type	Modular
Routing Throughput	Up to 2 Gbps
Memory	Up to 16 GB
Modular Slots	Varies by model
Power Supply	AC or DC options
Product Family	ISR (Integrated Services Router)
Models	ISR 4321, ISR 4331, ISR 4351, ISR 4431, ISR 4451-X
Storage	SSD options
Network Interfaces	Gigabit Ethernet, SFP
Security Features	Firewall, VPN
Virtualization Support	Yes
Modularity	Yes
Operating Temperature	0 to 40°C
Humidity	5% to 95% noncondensing