Nortel Networks Contivity Secure IP Services Gateway 4600 Uživatelský manuál Strana 1

©Copyright2001NortelNetworks.ThisdocumentmaybefreelyreproducedanddistributedwholeandintactincludingthisCopyrightNotice.Contiv

 102.4 RolesandServicesTheswitchsupportsupto5000simultaneoususersessionsusingInternetProtocolSecurity(IPSec),Point-to-PointTunnel

 11• IPSecProtocolTunnels• PPTPProtocolTunnels• L2TPProtocolTunnels• L2FProtocolTunnels• ChangePassword2.4.1 CryptoOfficerSer

 12direction.Theadministratormayuseanyofthepre-definedRulesorcreatecustomRulestobeincludedineachFilter.• StatusFunctions:to

 13AuthenticationProtocol(PAP).MS-CHAPcanusenoencryption,40-bitRC4,128-bitRC4encryption.WhenoperatedinaFIPS140-1compliantmanne

 14containedonthefloppydiskviathemodule’smanagementinterface.Theformatutilitythencausesthefirmwareofthemoduletobeerased• RS

 153 SecureOperationoftheContivitySwitchTheContivitySwitchisaversatilemachine;itcanberuninaNormalOperatingModeoraFIPSOper

 16hasthecapabilitytosubmitshellcommands)thentheCryptoOfficershouldreinstalltheNortelfirmwarefromatrustedmediasuchastheinstal

 2TableofContents1 Introduction ...

 31 Introduction1.1 PurposeThisisanon-proprietarycryptographicmodulesecuritypolicyfortheContivity™ExtranetSwitch4600.Thissecuri

 4proprietarysecuritypolicy,theFIPS140-1certificationsubmissiondocumentationisNortel-proprietaryandisreleasableonlyunderappropriate

 52 TheContivityExtranet4600SwitchTheNortelNetworksContivityExtranetSwitch4600(referredtoasthemodule,orSwitchinthisdocument)

 6Figure2–PhysicalInterfacesThephysicalinterfacesincludeapowerplug,powerandresetswitches,aserialport,aLANPortRJ-45connector

 72.3 PhysicalSecurityAthicksteelcaseprotectstheContivity™ExtranetSwitch4600.TheswitchmeetsFCCrequirementsin47CFRPart15forp

 8Figure4–FrontviewwithoutfrontbezelOncetheExtranetSwitchhasbeenconfiguredinitsFIPS140-1level2mode,thecovermaynotberemov

 9Figure5–Tamper-EvidentLabelsAppliedtoSwitchThetamper-evidentsealsareproducedfromaspecialthingaugewhitevinylwithself-adhesiv