Nortel 4500 FIPS инструкция обслуживания

© Copyright 2000 Nortel Networks. This document may be freely reproduced and distributed whole and intact including this Copyright Notice. Contivity™ Extranet Switch 4500 FIPS 140-1 Non-Proprietary Cryptographic Module Security Policy Level 2 Validation February 2000[...]

© Copyright 2000 Nortel Networks. 2 Table of Contents 1 Introduction .................................................................................................................. 3 1.1 Purpose ................................................................................................................... 3 1.2 References ..................[...]

© Copyright 2000 Nortel Networks. 3 1 Introduction 1.1 Purpose This is a non-proprietary Cryptographic Module Security Policy for the Contivity™ Extranet Switch 4500. This security policy describes how the Contivity™ Extranet Switch 4500 meets the security requirements of FIPS 140-1, and how to operate the Contivity™ Extranet Switch 4500 in [...]

© Copyright 2000 Nortel Networks. 4 This document provides an overview of the Contivity™ Switch and explains the secure configuration and operation of the module. This introduction section is followed by Section 2, which details the general features and functionality of the Contivity™ Switch. Section 3 specifically addresses the required confi[...]

© Copyright 2000 Nortel Networks. 5 2 The Contivity Extranet 4500 Switch The Nortel Networks Contivity Extranet Switch 4500 provides a scalable, secure, manageable remote access server that meets FIPS 140-1 level 2 requirements. This section will describe the general features and functionality provided by the Contivity Extranet Switch. Section 3 w[...]

© Copyright 2000 Nortel Networks. 6 . Figure 2 – Physical Interfaces The physical interfaces include the dual power plugs for the redundant power supplies, the power and reset buttons, the serial port, the LAN Port RJ-45 connector, and up to six slots containing additional network connectors. The power and reset buttons light up to indicate powe[...]

© Copyright 2000 Nortel Networks. 7 Figure 4 – 10/100BASE-TX LAN LEDs These physical interfaces are separated into the logical interfaces from FIPS as described in the following table: Switch physical interface FIPS 140-1 Logical Interface 10/100BASE-TX LAN Port, LAN Port, Serial Port Data Input Interface 10/100BASE-TX LAN Port, LAN Port, Serial[...]

© Copyright 2000 Nortel Networks. 8 front bezel allows access to the dual power supplies, hard drives, and floppy drive. Removing the top cover or the I/O panel allows access to the motherboard, memory, and expansion slots. Figure 5 – The Steel Cover of the Extranet Switch 4500 Once the Extranet Switch 4500 has been configured in its FIPS 140-1 [...]

© Copyright 2000 Nortel Networks. 9 (2) Top Cover Labels (2) Front Bezel Labels Figure 6 – Tamper-Evident Labels Applied to Switch Front Bezel and Top Cover (2) AC Filter Input Labels (1) Air Hole Label (1) I/O Panel Label (1) Keyboard Connector Label Figure 7 – Tamper Evident Labels Applied to Rear Panel The tamper-evident seals are produced [...]

© Copyright 2000 Nortel Networks. 10 Attempting to remove a label breaks it or continually tears off small fragments as depicted in Figure 9 . Other signs of tamper-evidence include a strong smell of organic solvents, warped or bent cover metal, and scratches in the paint on the module. FIPS 140-1 Level 2 Tamper Evident Label Serial Number: 567342[...]

© Copyright 2000 Nortel Networks. 11 • IPSec Protocol Tunnels • PPTP Protocol Tunnels • L2TP Protocol Tunnels • L2F Protocol Tunnels • Change Password 2.4.1 Crypto Officer Services There is a factory default login ID and password, which allows access to the Crypto Officer role. This initial account is the primary administrator's acc[...]

© Copyright 2000 Nortel Networks. 12 • Status Functions : to view the switch configuration, routing tables, active sessions, use Gets to view SNMP { XE "SNMP" } MIB II { XE "SNMP:MIB II" } statistics, usage graphs, health, temperature, memory status, voltage, packet statistics, and review accounting logs. • Manage the Switc[...]

© Copyright 2000 Nortel Networks. 13 2.5 Key Management The switch securely administers both cryptographic keys and other critical security parameters such as User passwords. Ephemeral sessions keys are created during the negotiation of secure tunnels on behalf of Users who have successfully authenticated themselves to the switch with their user I[...]

© Copyright 2000 Nortel Networks. 14 Recommended • Change the default administrator password on the switch. • Disable all management protocols over private non- tunnelled interfaces Required • Select the “FIPS Enabled” button on the Service Available Management screens and restart the module. • Apply the tamper evident labels as descri[...]