User Guide
Page 2
... technical or sales-related questions for the FIPS-mode of the Cisco 2621XM and 2651XM routers. With over 100 Network Modules (NMs) and WAN Interface Cards (WICs), the modular architecture of the Cisco router easily allows interfaces to be found at: http://www.cisco.com/en/US/products/hw/routers/ps221/index.html • For answers to technical or sales...
... technical or sales-related questions for the FIPS-mode of the Cisco 2621XM and 2651XM routers. With over 100 Network Modules (NMs) and WAN Interface Cards (WICs), the modular architecture of the Cisco router easily allows interfaces to be found at: http://www.cisco.com/en/US/products/hw/routers/ps221/index.html • For answers to technical or sales...
User Guide
Page 4
..., and high-density serial options All Cisco 2600 series routers include an auxiliary port supporting 115Kbps Dial-On-Demand Routing, ideal for the power supply and a power switch. WICs are located above the fixed LAN ports. The physical interfaces include a power plug for back-up WAN connectivity. WAN interface cards support a variety of two slots...
..., and high-density serial options All Cisco 2600 series routers include an auxiliary port supporting 115Kbps Dial-On-Demand Routing, ideal for the power supply and a power switch. WICs are located above the fixed LAN ports. The physical interfaces include a power plug for back-up WAN connectivity. WAN interface cards support a variety of two slots...
User Guide
Page 8
...; Network Functions-connect to the IOS executive program. Cisco 2621XM and Cisco 2651XM Modular Access Routers with a terminal program. The services available to the User role consist of the following: • Status Functions-view state of interfaces, state of layer 2 protocols, version of this ...and view physical interface status • Manage the router-log off users, shutdown or reload the outer, manually back up the configuration tables for their password. The rear of this document. • Change WAN Interface Cards-insert and remove WICs in the WAN interface slot as described...
...; Network Functions-connect to the IOS executive program. Cisco 2621XM and Cisco 2651XM Modular Access Routers with a terminal program. The services available to the User role consist of the following: • Status Functions-view state of interfaces, state of layer 2 protocols, version of this ...and view physical interface status • Manage the router-log off users, shutdown or reload the outer, manually back up the configuration tables for their password. The rear of this document. • Change WAN Interface Cards-insert and remove WICs in the WAN interface slot as described...
User Guide
Page 9
... slot covers. Any attempt to remove a WAN interface card will leave tamper evidence. Place the fifth label on the router as shown in Figure 6. Place the second label on the router as shown in Figure 6. Figure 5 Cisco 2621XM and Cisco 2651XM Chassis Removal The 2621XM/2651XM Router POWER RPS ACTIVITY Cisco 2600 SERIES 99497 Any NM or WIC...
... slot covers. Any attempt to remove a WAN interface card will leave tamper evidence. Place the fifth label on the router as shown in Figure 6. Place the second label on the router as shown in Figure 6. Figure 5 Cisco 2621XM and Cisco 2651XM Chassis Removal The 2621XM/2651XM Router POWER RPS ACTIVITY Cisco 2600 SERIES 99497 Any NM or WIC...
User Guide
Page 13
... Rules and Filters Status Functions Manage the Router Set Encryptions/Bypass Change WAN Interface Cards SRDI/Role/Service Access Policy Security Relevant Data Item CSP 1 r CSP 2 r CSP 3 r CSP 4 r CSP 5 r CSP 6 r CSP 7 r CSP 8 r CSP 9 r CSP 10 r CSP 11 r dr w d r w d r w d r w d r w d r w d r w d r w d r w d r w d r w d Cisco 2621XM and Cisco 2651XM Modular Access Routers with AIM-VPN/EP FIPS 140-2 Non-Proprietary Security Policy...
... Rules and Filters Status Functions Manage the Router Set Encryptions/Bypass Change WAN Interface Cards SRDI/Role/Service Access Policy Security Relevant Data Item CSP 1 r CSP 2 r CSP 3 r CSP 4 r CSP 5 r CSP 6 r CSP 7 r CSP 8 r CSP 9 r CSP 10 r CSP 11 r dr w d r w d r w d r w d r w d r w d r w d r w d r w d r w d r w d Cisco 2621XM and Cisco 2651XM Modular Access Routers with AIM-VPN/EP FIPS 140-2 Non-Proprietary Security Policy...
User Guide
Page 14
... Functions Directory Services Crypto-Officer Role Configure the Router Define Rules and Filters Status Functions Manage the Router Set Encryptions/Bypass Change WAN Interface Cards SRDI/Role/Service Access Policy CSP 12 CSP ...13 CSP 14 CSP 15 CSP 16 CSP 17 CSP 18 CSP 19 CSP 20 CSP 21 CSP 22 CSP 23 r r w d r r w d r r w d r r w d r r w r r w d r r w d r r w d r r w d r r w w d d r r w d r r w d Cisco 2621XM and Cisco 2651XM Modular Access Routers...
... Functions Directory Services Crypto-Officer Role Configure the Router Define Rules and Filters Status Functions Manage the Router Set Encryptions/Bypass Change WAN Interface Cards SRDI/Role/Service Access Policy CSP 12 CSP ...13 CSP 14 CSP 15 CSP 16 CSP 17 CSP 18 CSP 19 CSP 20 CSP 21 CSP 22 CSP 23 r r w d r r w d r r w d r r w d r r w r r w d r r w d r r w d r r w d r r w w d d r r w d r r w d Cisco 2621XM and Cisco 2651XM Modular Access Routers...
User Guide
Page 15
...Cisco 2621XM and Cisco 2651XM Modular Access Routers with AIM-VPN/EP FIPS 140-2 Non-Proprietary Security Policy OL-6262-01 15 Table 5 Role and Service Access to CSPs (continued) The 2621XM/2651XM Router Role/Service User Role Status Functions Network Functions Terminal Functions Directory Services Crypto-Officer Role Configure the Router... Define Rules and Filters Status Functions Manage the Router Set Encryptions/Bypass Change WAN Interface Cards SRDI/Role/Service Access Policy CSP 24 CSP 25 CSP ...
...Cisco 2621XM and Cisco 2651XM Modular Access Routers with AIM-VPN/EP FIPS 140-2 Non-Proprietary Security Policy OL-6262-01 15 Table 5 Role and Service Access to CSPs (continued) The 2621XM/2651XM Router Role/Service User Role Status Functions Network Functions Terminal Functions Directory Services Crypto-Officer Role Configure the Router... Define Rules and Filters Status Functions Manage the Router Set Encryptions/Bypass Change WAN Interface Cards SRDI/Role/Service Access Policy CSP 24 CSP 25 CSP ...
User Guide
Page 17
.... Secure Operation of this document. • Only a Crypto Officer may add and remove WAN Interface Cards. Operating this document. Cisco 2621XM and Cisco 2651XM Modular Access Routers with AIM-VPN/EP meet all the Level 2 requirements for detailed instructions on the web at:...Conditional bypass test - DES KAT - Follow the setting instructions provided below to the Cisco publication Installing Advanced Integration Modules in Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers for FIPS 140-2. This document may add and remove Network Modules. The Crypto Officer ...
.... Secure Operation of this document. • Only a Crypto Officer may add and remove WAN Interface Cards. Operating this document. Cisco 2621XM and Cisco 2651XM Modular Access Routers with AIM-VPN/EP meet all the Level 2 requirements for detailed instructions on the web at:...Conditional bypass test - DES KAT - Follow the setting instructions provided below to the Cisco publication Installing Advanced Integration Modules in Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers for FIPS 140-2. This document may add and remove Network Modules. The Crypto Officer ...
User Guide
Page 9
... functionality, but differ in this publication and provides a summary of the LAN interfaces supported on each model. Table 1-1 Model Cisco 2610 Cisco 2611 Cisco 2612 Cisco 2613 Cisco 2620 Cisco 2621 Summary of Cisco 2600 Series Routers 1-1 Fast Token Ring Ethernet (RJ-45) (10/100) - - - - 1 - 1 - - 1 - 2 Network Module Slot 1 1 1 1 1 1 WAN Interface Card Slots 2 2 2 2 2 2 Advanced Integration Module (AIM) Slots 1 1 1 1 1 1 Hardware Features In addition to...
... functionality, but differ in this publication and provides a summary of the LAN interfaces supported on each model. Table 1-1 Model Cisco 2610 Cisco 2611 Cisco 2612 Cisco 2613 Cisco 2620 Cisco 2621 Summary of Cisco 2600 Series Routers 1-1 Fast Token Ring Ethernet (RJ-45) (10/100) - - - - 1 - 1 - - 1 - 2 Network Module Slot 1 1 1 1 1 1 WAN Interface Card Slots 2 2 2 2 2 2 Advanced Integration Module (AIM) Slots 1 1 1 1 1 1 Hardware Features In addition to...
User Guide
Page 12
... W0 Cisco 2611 LINK ETHERNET 1 ACT LINK ETHERNET 0 ACT CONSOLE AUX 100-240V- 1A 50/60 Hz 47 W 10/100BaseT Ethernet 0/0 (RJ-45) Auxiliary port (RJ-45) Console port (RJ-45) Module Interface Specifications In an effort to provide the latest information on network module and WAN interface cards for Cisco 2600 series routers, this...
... W0 Cisco 2611 LINK ETHERNET 1 ACT LINK ETHERNET 0 ACT CONSOLE AUX 100-240V- 1A 50/60 Hz 47 W 10/100BaseT Ethernet 0/0 (RJ-45) Auxiliary port (RJ-45) Console port (RJ-45) Module Interface Specifications In an effort to provide the latest information on network module and WAN interface cards for Cisco 2600 series routers, this...
User Guide
Page 28
... DCE Devices A device that paces the communications between the device and the router. The WAN interface cards can be configured as DTE or DCE, depending on network modules, see the publication Cisco WAN Interface Cards Hardware Installation Guide. For more information on WAN interface cards, see the publication Network Modules Hardware Installation Guide. The documentation that...
... DCE Devices A device that paces the communications between the device and the router. The WAN interface cards can be configured as DTE or DCE, depending on network modules, see the publication Cisco WAN Interface Cards Hardware Installation Guide. For more information on WAN interface cards, see the publication Network Modules Hardware Installation Guide. The documentation that...
User Guide
Page 29
...that has the appropriate connector for the standard you specify. The synchronous serial port can order a Cisco DB-60 shielded serial transition cable that device. The other DCE device. The router end of the shielded serial transition cable has a DB-60 connector, which is DTE only). ...DB-60 port on the attached cable (except EIA-530, which connects to Install the Router 2-15 Note All serial ports configured as DTE or DCE depending on a serial WAN interface card. Serial Connections Table 2-1 Typical DTE and DCE Devices Device type DTE Gender Male1 Typical...
...that has the appropriate connector for the standard you specify. The synchronous serial port can order a Cisco DB-60 shielded serial transition cable that device. The other DCE device. The router end of the shielded serial transition cable has a DB-60 connector, which is DTE only). ...DB-60 port on the attached cable (except EIA-530, which connects to Install the Router 2-15 Note All serial ports configured as DTE or DCE depending on a serial WAN interface card. Serial Connections Table 2-1 Typical DTE and DCE Devices Device type DTE Gender Male1 Typical...
User Guide
Page 30
... Distance Feet Meters 200 60 100 30 50 15 25 7.6 12 3.7 8.6 2.6 - - Note Only the serial WAN interface card supports bit rates above 128 kbps. All serial signals are provided in the online document Cisco Modular Access Router Cabling Specifications on the Documentation CD-ROM that might get good results at any given...
... Distance Feet Meters 200 60 100 30 50 15 25 7.6 12 3.7 8.6 2.6 - - Note Only the serial WAN interface card supports bit rates above 128 kbps. All serial signals are provided in the online document Cisco Modular Access Router Cabling Specifications on the Documentation CD-ROM that might get good results at any given...
User Guide
Page 35
Serial Connections Figure 2-13 shows the serial transition cables you can connect to Install the Router 2-21 Figure 2-13 Serial Interface Adapter Cables Router connections H2485 EIA/TIA-232 EIA/TIA-449 V.35 X.21 Network connections at the modem or CSU/DSU EIA-530 Preparing to the DB-60 port on the asynchronous/synchronous serial modules and serial WAN interface card.
Serial Connections Figure 2-13 shows the serial transition cables you can connect to Install the Router 2-21 Figure 2-13 Serial Interface Adapter Cables Router connections H2485 EIA/TIA-232 EIA/TIA-449 V.35 X.21 Network connections at the modem or CSU/DSU EIA-530 Preparing to the DB-60 port on the asynchronous/synchronous serial modules and serial WAN interface card.
User Guide
Page 36
.... If you detach the BRI cable, detach the end away from the router first to user contact. The BRI modules and BRI WAN interface cards are present on both the Documentation CD-ROM that accompanied your router package, and Cisco Connection Online. 2-22 Cisco 2600 Series Hardware Installation Guide Any hardwired connection (other than by...
.... If you detach the BRI cable, detach the end away from the router first to user contact. The BRI modules and BRI WAN interface cards are present on both the Documentation CD-ROM that accompanied your router package, and Cisco Connection Online. 2-22 Cisco 2600 Series Hardware Installation Guide Any hardwired connection (other than by...
User Guide
Page 37
... ohms 0.024" (0.6 mm) 32.8' (10 m) For more information on BRI WAN interface cards, see the publication Cisco WAN Interface Cards Hardware Installation Guide included in your router package. Preparing to Install the Router 2-23 For more information on Switched-56-kbps WAN interface cards, see the publication Cisco WAN Interface Cards Hardware Installation Guide. 56K/Switched-56-kbps DSU/CSU Connections Switched...
... ohms 0.024" (0.6 mm) 32.8' (10 m) For more information on BRI WAN interface cards, see the publication Cisco WAN Interface Cards Hardware Installation Guide included in your router package. Preparing to Install the Router 2-23 For more information on Switched-56-kbps WAN interface cards, see the publication Cisco WAN Interface Cards Hardware Installation Guide. 56K/Switched-56-kbps DSU/CSU Connections Switched...
User Guide
Page 40
... and Support" section on page ix. • Ethernet 10BaseT hub or PC with the router. A terminal is required unless you are not provided as standard equipment with a network interface card for connection to the Ethernet (LAN) port(s). • Console terminal (an ASCII terminal ...or a PC running terminal emulation software) configured for connection to an Ethernet port (included). - For cable ordering information, see the document Cisco Modular Access Router Cabling...
... and Support" section on page ix. • Ethernet 10BaseT hub or PC with the router. A terminal is required unless you are not provided as standard equipment with a network interface card for connection to the Ethernet (LAN) port(s). • Console terminal (an ASCII terminal ...or a PC running terminal emulation software) configured for connection to an Ethernet port (included). - For cable ordering information, see the document Cisco Modular Access Router Cabling...
User Guide
Page 62
... is used for data transmitted or received by network modules and WAN interface cards, and primary or main memory, which is reserved for the CPU. For further information about this example, 28672K/4096K). B-2 Cisco 2600 Series Hardware Installation Guide Near the middle of the resulting output,...processor (revision 0x200) with a 100-pin DRAM DIMM. To see the Cisco IOS configuration guides and command references. Cisco 2600 DRAM Cisco 2600 series routers contain two 100-pin dual in the router, enter the show version command. The first number represents primary memory ...
... is used for data transmitted or received by network modules and WAN interface cards, and primary or main memory, which is reserved for the CPU. For further information about this example, 28672K/4096K). B-2 Cisco 2600 Series Hardware Installation Guide Near the middle of the resulting output,...processor (revision 0x200) with a 100-pin DRAM DIMM. To see the Cisco IOS configuration guides and command references. Cisco 2600 DRAM Cisco 2600 series routers contain two 100-pin dual in the router, enter the show version command. The first number represents primary memory ...
Software Configuration Guide
Page 5
... the Modem Configuration 3-28 Configuring Wireless Multipoint Interfaces 3-28 Checking the Interface Configuration 3-29 Configuring 1-Port ADSL WAN Interface Card 3-29 Benefits 3-30 Restrictions 3-30 Prerequisites 3-31 Configuration Tasks 3-31 Configuring the ADSL Port on the ADSL WAN Interface Card 3-31 Verifying ATM Configuration 3-32 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers v
... the Modem Configuration 3-28 Configuring Wireless Multipoint Interfaces 3-28 Checking the Interface Configuration 3-29 Configuring 1-Port ADSL WAN Interface Card 3-29 Benefits 3-30 Restrictions 3-30 Prerequisites 3-31 Configuration Tasks 3-31 Configuring the ADSL Port on the ADSL WAN Interface Card 3-31 Verifying ATM Configuration 3-32 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers v
Software Configuration Guide
Page 7
... Modem for Dial-In 3-57 Configure the Modem for Dial-Out 3-57 Configuration Example 3-58 Configuring 1-Port G.SHDSL WAN Interface Card 3-58 Restrictions 3-59 Prerequisites 3-59 Configuration Tasks 3-59 Configuring G.SHDSL on a Cisco Router 3-60 Configuring ILMI on the DSLAM Connected to the ADSL WAN 3-62 Verifying ATM Configuration 3-62 Configuration Examples 3-64 Saving...
... Modem for Dial-In 3-57 Configure the Modem for Dial-Out 3-57 Configuration Example 3-58 Configuring 1-Port G.SHDSL WAN Interface Card 3-58 Restrictions 3-59 Prerequisites 3-59 Configuration Tasks 3-59 Configuring G.SHDSL on a Cisco Router 3-60 Configuring ILMI on the DSLAM Connected to the ADSL WAN 3-62 Verifying ATM Configuration 3-62 Configuration Examples 3-64 Saving...