Enterasys Networks XSR-1850の取扱説明書

デバイスEnterasys Networks XSR-1850の取扱説明書

デバイス: Enterasys Networks XSR-1850
カテゴリ: ネットワークルーター
メーカー: Enterasys Networks
サイズ: 0.6 MB
追加した日付: 6/9/2014
ページ数: 25
説明書を印刷

ダウンロード

使い方は?

私たちの目的は、皆様方にデバイスEnterasys Networks XSR-1850の取扱説明書に含まれたコンテンツを可能な限り早く提供することです。オンラインプレビューを使用すると、Enterasys Networks XSR-1850に関してあなたが抱えている問題に対する解決策の内容が素早く表示されます。

便宜上

説明書Enterasys Networks XSR-1850をこちらのサイトで閲覧するのに不都合がある場合は、2つの解決策があります:

  • フルスクリーン表示 – 説明書を(お使いのコンピュータにダウンロードすることなく)便利に表示させるには、フルスクリーン表示モードをご使用ください。説明書Enterasys Networks XSR-1850のフルスクリーン表示を起動するには、全画面表示ボタンを押してください。
  • コンピュータにダウンロード - Enterasys Networks XSR-1850の説明書をお使いのコンピュータにダウンロードし、ご自身のコレクションに加えることもできます。デバイス上のスペースを無駄にしたくない場合は、いつでもManualsBaseサイトでダウンロードすることもできます。
Enterasys Networks XSR-1850 取扱説明書 - Online PDF
Advertisement
« Page 1 of 25 »
Advertisement
印刷版

多くの人々は画面表示ではなく印刷された説明書を読むほうを好みます。説明書を印刷するオプションも提供されており、上記のリンクをクリックすることによりそれを利用できます - 説明書を印刷。説明書Enterasys Networks XSR-1850を全部印刷する必要はなく、選択したページだけを印刷できます。紙を節約しましょう。

要旨

次のページにある説明書Enterasys Networks XSR-1850の内容のプレビューは、以下にあります。次のページにある説明書の内容をすぐに表示したい場合は、こちらをご利用ください。

内容要旨
ページ1に含まれる内容の要旨







XSR-1805, XSR-1850, and XSR-3250
(Hardware Version: REV 0A-G, Software Version: REL 6.3, Firmware Version: REL 6.3)







FIPS 140-2 Non-Proprietary
Security Policy



Level 2 Validation
Version 1.00



September 2003

© Copyright 2003 Enterasys Networks
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

ページ2に含まれる内容の要旨

Table of Contents INTRODUCTION............................................................................................................. 3 PURPOSE....................................................................................................................... 3 REFERENCES ................................................................................................................. 3 DOCUMENT ORGANIZATION ..........................................................................

ページ3に含まれる内容の要旨

Introduction Purpose This document is a nonproprietary Cryptographic Module Security Policy for the Enterasys Networks XSR-1805, XSR-1850, and XSR-3250 appliances. This security policy describes how the XSR-1805, XSR-1850, and XSR-3250 meet the security requirements of FIPS 140-2 and how to run the modules in a secure FIPS 140-2 mode. This policy was prepared as part of the Level 2 FIPS 140-2 validation of the module. FIPS 140-2 (Federal Information Processing Standards Publication 1

ページ4に含まれる内容の要旨

This Security Policy and the other validation submission documentation were produced by Corsec Security, Inc. under contract to Enterasys Networks. With the exception of this Non-Proprietary Security Policy, the FIPS 140-2 Validation Documentation is proprietary to Enterasys Networks and can be released only under appropriate non-disclosure agreements. For access to these documents, please contact Enterasys Networks. © Copyright 2003 Enterasys Networks Page 4 of 25 This document may b

ページ5に含まれる内容の要旨

ENTERASYS NETWORKS XSR-1805, XSR-1850, AND XSR-3250 Overview Part of the Enterasys Networks X-Pedition Security Router (XSR) series, the XSR-1805, XSR-1850, and XSR-3250 modules are networking devices that combine a broad range of IP routing features, a broad range of WAN interfaces and a rich suite of network security functions, including site-to-site and remote access VPN connectivity and policy managed, stateful-inspection firewall functionality. The XSR-18xx modules were designed to

ページ6に含まれる内容の要旨

ideal to support mission- critical applications extending to the branch office. The XSR-3250 offers nearly ten times the performance speed of the XSR- 1850 and approximately 15 times more VPN tunnels. Coupling these features with the six network interface module (NIM) slots makes the XSR- 3250 ideally suited to a regional office required to terminate up to six T3/E3 or 24 T1/E1 connections. A redundant power supply is included. The features of each XSR module are summarized in Table 1. XS

ページ7に含まれる内容の要旨

The hardware components for the XSR-18xx modules vary slightly to meet the performance level for each module. The XSR-1850 is an enhancement of the XSR-1805 consisting of the following additional features: • Two fans • External power source connector • One PMC slot for PPMC card • 19” 1.5 U rack-mount chassis • 64 MB of DRAM Due to the large difference in performance levels, the XSR-3250 hardware components vary quite significantly, when compared to the XSR-18xx modules. The main d

ページ8に含まれる内容の要旨

The software image is contained in a single file with the power-up diagnostics. It is based on the Nortel Open IP design model and runs on top of the VxWorks operating system. The modules are intended to meet overall FIPS 140-2 Level 2 requirements (see Table 2). Section Section Title Level 1 Cryptographic Module Specification 2 2 Cryptographic Module Ports and Interfaces 2 3 Roles, Services, and Authentication 2 4 Finite State Model 2 5 Physical Security 2 6 Operational Environment

ページ9に含まれる内容の要旨

• Ten status LEDs • One power connector • One power switch • One default configuration button The XSR-1850 implements the same physical ports as the XSR-1805 and the following additional ones: • External power source connector • PPMC slot for Processor The XSR-3250 varies to the XSR-1805 modules as follows: • One additional power source connector © Copyright 2003 Enterasys Networks Page 9 of 25 This document may be freely reproduced and distributed whole and intact including this C

ページ10に含まれる内容の要旨

• Three 10/100/1000BaseT GigabitEthernet LAN ports with two LEDs on each port, instead of the two 10/100BaseT FastEthernet LAN ports • Mini-Gigabit Interface Converter (MGBIC) fiberoptic port plus two LEDs • Two NCC slots with two NIM slots on each card • No power switch • No default configuration button All of these physical ports are separated into logical interfaces defined by FIPS 140-2, as described in Table 3: Module Physical Ports FIPS 140-2 Logical Interface Network ports Data

ページ11に含まれる内容の要旨

Roles and Services 1 The module supports role-based and identity-based authentication . There are two main roles in the module (as required by FIPS 140-2) that operators may assume: a Crypto Officer role and User role. Crypto Officer Role The Crypto Officer role has the ability to configure, manage, and monitor the module. Three management interfaces can be used for this purpose: • CLI – The Crypto Officer can use the CLI to perform non-security- sensitive and security-sensitive monitor

ページ12に含まれる内容の要旨

• Read-only Crypto Officer – Management users with privilege level zero assume the Read-only Crypto Officer role. The Read-only Crypto Officer can only issue monitoring commands with low security level. Examples of commands are: show version and show clock. Descriptions of the services available to the Crypto Officer role are provided in the table below. Service Description Input Output Critical Security Parameter (CSP) Access SSH Provide SSH key SSH outputs and DSA (SSHv2) host aut

ページ13に含まれる内容の要旨

Management key; create DSA configuration data access), DSA host host key for key pair (read/write SSHv2; create access), Crypto management users Officer’s password and set their for CLI and SNMP password and (read/write access) privilege level; configure the SNMP agent Configuring the Define the T1/E1 Commands and Status of None T1/E1 Subsystem subsystem configuration data commands and Interfaces functionality configuration data Configuring the Define the platform Commands and Status

ページ14に含まれる内容の要旨

Firewall authorization configuration data. commands and information for configuration data. network traffic that flows through the box. Table 4 – Crypto Officer Services, Descriptions, Inputs and Outputs, and CSPs User Role The User role accesses the module’s IPSec and IKE services. Service descriptions, inputs and outputs, and CSPs are listed in the following table: Service Description Input Output CSP IKE Access the module IKE IKE inputs and data IKE outputs, RSA key pair for funct

ページ15に含まれる内容の要旨

mechanism is as strong as the RSA algorithm using a 1024 bit key pair. Pre-shared key-based User HMAC SHA-1 generation and verification is authentication (IKE) used to authenticate to the module during IKE with preshared keys. This mechanism is as strong as the HMAC with SHA-1 algorithm. Additionally, preshared keys must be at least six characters long. Even if only uppercase letters were used without repetition for a six character preshared key, the probability of randomly guessing th

ページ16に含まれる内容の要旨

Cryptographic Key Management The modules implement the following FIPS-approved algorithms: Type Algorithm Standard Certificate Number Symmetric AES (CBC) FIPS 197 Cert. #48, #106, #107 Triple-DES (CBC and FIPS 46-3 Cert. #158, #218, #219, ECB) #220 DES (CBC) FIPS 46-3 Cert. #204, #238, #239, #240 Asymmetric DSA FIPS 186-2 Change Cert. #97 Notice 1 RSA Digital Signature PKCS #1 Vendor affirmed Hash function SHA-1 FIPS 180-1 Cert. #143, #197, #198, #199 MAC HMAC SHA-1 FIPS 198 Cert.

ページ17に含まれる内容の要旨

the encryption accelerators. The encryption accelerators implement the following FIPS-approved algorithms: • XSR-18xx – Triple-DES, DES, and HMAC SHA-1 • XSR-3250 – AES, Triple-DES, DES, and HMAC SHA-1 Cryptographic processing is performed during SSHv2, SNMPv3, IKE, IPSec, and when accessing and storing database files. The module supports the following critical and non-critical security parameters: CSPs and non- CSPs and non- Generation Storage Use critical SPs critical SPs type Key e

ページ18に含まれる内容の要旨

IPSec session 56-bit DES, 168-bit Established during Stored in plaintext Secure IPSec keys TDES, or the Diffie-Hellman in memory traffic 128/192/256-bit key agreement AES keys; HMAC SHA-1 key Load test HMAC ≥ 80-bit HMAC External Stored encrypted Compute and verify SHA-1 key SHA-1 key in NVRAM of the the HMAC SHA-1 real time clock value for the chip software load test Passwords ≥ 6-character External If stored in Crypto Officer password configuration file, authentication for (SNMPv3 r

ページ19に含まれる内容の要旨

If the master encryption key is generated within the module, the module outputs the key to the console as soon as the key is generated in order for the Crypto Officer to note down and store the key securely outside of the module. This is required, since the Crypto Officer must enter the current key before changing or removing it. The master secret key can only be configured through the serial console or over an SSH tunnel. Key Storage The three-key Triple-DES key encryption key used to en

ページ20に含まれる内容の要旨

Self-Tests The module performs a set of self-tests in order to ensure proper operation in compliance with FIPS 140-2. These self-tests are run during power-up (power-up self-tests) or when certain conditions are met (conditional self-tests). Power-up Self-tests: • Software integrity tests: the modules use an EDC, in the form of an MD5 checksum, to check the integrity of its various components • Cryptographic algorithm tests: o AES-CBC KAT o DES-CBC KAT o Triple-DES-CBC KAT o PR


類似の説明書
# 取扱説明書 カテゴリ ダウンロード
1 Enterasys Networks E1 Series 取扱説明書 ネットワークルーター 10
2 Enterasys Networks FN 100 取扱説明書 ネットワークルーター 0
3 Enterasys Networks 1H582-xx 取扱説明書 ネットワークルーター 5
4 Enterasys Networks Aurorean Network Gateway 3000 取扱説明書 ネットワークルーター 2
5 Enterasys Networks Enterasys Matrix 9034310-01 取扱説明書 ネットワークルーター 11
6 Enterasys Networks BRIM-E6 取扱説明書 ネットワークルーター 0
7 Enterasys Networks ENTERASYS MATRIX X X16-C 取扱説明書 ネットワークルーター 7
8 Enterasys Networks Enterasys Matrix 2G4082-25 取扱説明書 ネットワークルーター 9
9 Enterasys Networks ROAMABOUT 9033900-04 取扱説明書 ネットワークルーター 1
10 Enterasys Networks Cabletron CyberSWITCH CSX5500 取扱説明書 ネットワークルーター 0
11 Enterasys Networks NETWORKS 2000 取扱説明書 ネットワークルーター 0
12 Enterasys Networks ROAMABOUT RBT-1602 取扱説明書 ネットワークルーター 10
13 Enterasys Networks ROAMABOUT RBT-4102 取扱説明書 ネットワークルーター 182
14 Enterasys Networks Security Router X-PeditionTM 取扱説明書 ネットワークルーター 1
15 Enterasys Networks X-PEDITION E9.1.7.0 取扱説明書 ネットワークルーター 8
16 Sony BKS-R3202/R3210/R3220 取扱説明書 ネットワークルーター 77
17 Sony DVS-V3232B/V3232M 取扱説明書 ネットワークルーター 3
18 Sony BVS-V3232 取扱説明書 ネットワークルーター 8
19 Sony DMX-WL1 取扱説明書 ネットワークルーター 6
20 Sony BVS-A3232 取扱説明書 ネットワークルーター 6