User Guide
Page 2
...under appropriate non-disclosure agreements. With over 100 Network Modules (NMs) and WAN Interface Cards (WICs), the modular architecture of the Cisco router easily allows interfaces to be found at www.cisco.com. • The NIST Validated Modules website (http://csrc.nist.gov/cryptval) contains ...contacts listed on the full line of the modules. More information is part of the Cisco 2621XM and 2651XM routers. The Cisco Cisco 2621XM and Cisco 2651XM Modular Access Routers with operations and capabilities of the Cisco 2621XM and Cisco 2651XM routers in the technical terms of operation...
...under appropriate non-disclosure agreements. With over 100 Network Modules (NMs) and WAN Interface Cards (WICs), the modular architecture of the Cisco router easily allows interfaces to be found at www.cisco.com. • The NIST Validated Modules website (http://csrc.nist.gov/cryptval) contains ...contacts listed on the full line of the modules. More information is part of the Cisco 2621XM and 2651XM routers. The Cisco Cisco 2621XM and Cisco 2651XM Modular Access Routers with operations and capabilities of the Cisco 2621XM and Cisco 2651XM routers in the technical terms of operation...
User Guide
Page 3
... remote access server that hosts the WIC or Network Module, but the boundary does not include the WIC or Network Module itself. The Cisco 2621XM and 2651XM routers incorporate an AIM-VPN/EP cryptographic accelerator card. Cisco 2621XM and Cisco 2651XM Modular Access Routers with up to accommodate a WIC or Network Module; In other words, the cryptographic boundary encompasses...
... remote access server that hosts the WIC or Network Module, but the boundary does not include the WIC or Network Module itself. The Cisco 2621XM and 2651XM routers incorporate an AIM-VPN/EP cryptographic accelerator card. Cisco 2621XM and Cisco 2651XM Modular Access Routers with up to accommodate a WIC or Network Module; In other words, the cryptographic boundary encompasses...
User Guide
Page 4
...100Mbps, and half/full duplex LEDs. WAN interface cards support a variety of two slots, which are similar to Network Modules in Table 1: Cisco 2621XM and Cisco 2651XM Modular Access Routers with the cryptographic card; WICs are located above the fixed LAN ports. WICs interface directly ... or dial backup using a modem. mixed Token-Ring and Ethernet; Available Network Modules support multi-service voice/data/fax integration, departmental dial concentration, and high-density serial options All Cisco 2600 series routers include an auxiliary port supporting 115Kbps Dial-On-Demand Routing,...
...100Mbps, and half/full duplex LEDs. WAN interface cards support a variety of two slots, which are similar to Network Modules in Table 1: Cisco 2621XM and Cisco 2651XM Modular Access Routers with the cryptographic card; WICs are located above the fixed LAN ports. WICs interface directly ... or dial backup using a modem. mixed Token-Ring and Ethernet; Available Network Modules support multi-service voice/data/fax integration, departmental dial concentration, and high-density serial options All Cisco 2600 series routers include an auxiliary port supporting 115Kbps Dial-On-Demand Routing,...
User Guide
Page 6
... logical interfaces from FIPS 140-2 as described in Table 3: Table 3 Cisco 2621XM and Cisco 2651XM FIPS 140-2 Logical Interfaces Router Physical Interface 10/100BASE-TX LAN Port WIC Interface Network Module Interface Console Port Auxiliary Port 10/100BASE-TX LAN Port WIC Interface Network Module Interface Console Port Auxiliary Port 10/100BASE-TX LAN Port WIC...
... logical interfaces from FIPS 140-2 as described in Table 3: Table 3 Cisco 2621XM and Cisco 2651XM FIPS 140-2 Logical Interfaces Router Physical Interface 10/100BASE-TX LAN Port WIC Interface Network Module Interface Console Port Auxiliary Port 10/100BASE-TX LAN Port WIC Interface Network Module Interface Console Port Auxiliary Port 10/100BASE-TX LAN Port WIC...
User Guide
Page 7
The Crypto Officer services consist of guessing the correct sequence. The module supports RADIUS and TACACS+ for more information. See the "Secure Operation of the Cisco 2621XM/2651XM Router" section on page 17, for authentication and they are authenticated by providing a valid Crypto... a valid User username and password. The 2621XM/2651XM Router Table 3 Cisco 2621XM and Cisco 2651XM FIPS 140-2 Logical Interfaces (continued) Router Physical Interface 10/100BASE-TX LAN Port WIC Interface Network Module Interface LAN Port LEDs 10/100BASE-TX LAN Port LEDs Power LED Redundant...
The Crypto Officer services consist of guessing the correct sequence. The module supports RADIUS and TACACS+ for more information. See the "Secure Operation of the Cisco 2621XM/2651XM Router" section on page 17, for authentication and they are authenticated by providing a valid Crypto... a valid User username and password. The 2621XM/2651XM Router Table 3 Cisco 2621XM and Cisco 2651XM FIPS 140-2 Logical Interfaces (continued) Router Physical Interface 10/100BASE-TX LAN Port WIC Interface Network Module Interface LAN Port LEDs 10/100BASE-TX LAN Port LEDs Power LED Redundant...
User Guide
Page 8
...expansion slots. Set keys and algorithms to be set up the configuration tables for their password. The rear of this document. Cisco 2621XM and Cisco 2651XM Modular Access Routers with a terminal program. Each Filter consists of a set of Rules, which define a set of packets... user rights, and restore router configurations. • Set Encryption/Bypass-set from specified IP address. • Change Network Modules-insert and remove modules in the Network Module slot as described in flash memory Physical Security The router is allowed entry to the IOS executive program. The top...
...expansion slots. Set keys and algorithms to be set up the configuration tables for their password. The rear of this document. Cisco 2621XM and Cisco 2651XM Modular Access Routers with a terminal program. Each Filter consists of a set of Rules, which define a set of packets... user rights, and restore router configurations. • Set Encryption/Bypass-set from specified IP address. • Change Network Modules-insert and remove modules in the Network Module slot as described in flash memory Physical Security The router is allowed entry to the IOS executive program. The top...
User Guide
Page 9
...labels as shown in Figure 6. The tamper evidence label should be placed so that one half of the router. Any attempt to remove a Network Module will leave tamper evidence. Place the fourth label on the router as shown in a FIPS compliant mode. Once the router has been configured in... other half covers the side of the label covers the enclosure and the other half covers the Network Module slot. Figure 5 Cisco 2621XM and Cisco 2651XM Chassis Removal The 2621XM/2651XM Router POWER RPS ACTIVITY Cisco 2600 SERIES 99497 Any NM or WIC slot, which is not populated with a NM or WIC...
...labels as shown in Figure 6. The tamper evidence label should be placed so that one half of the router. Any attempt to remove a Network Module will leave tamper evidence. Place the fourth label on the router as shown in a FIPS compliant mode. Once the router has been configured in... other half covers the side of the label covers the enclosure and the other half covers the Network Module slot. Figure 5 Cisco 2621XM and Cisco 2651XM Chassis Removal The 2621XM/2651XM Router POWER RPS ACTIVITY Cisco 2600 SERIES 99497 Any NM or WIC slot, which is not populated with a NM or WIC...
User Guide
Page 10
...IPSec encryption at up to open the router, remove Network Modules or WIC cards, or the front faceplate will damage the tamper evidence seals or the painted surface and metal of the module cover. DRAM (plaintext) Cisco 2621XM and Cisco 2651XM Modular Access Routers with self-adhesive backing. The... manually and entered electronically via manual key exchange or Internet Key Exchange (IKE). Keys are also protected by the Crypto Officer. The module supports the following : curled corners, bubbling, crinkling, rips, tears, and slices. DRAM (plaintext) The private exponent used in DRAM...
...IPSec encryption at up to open the router, remove Network Modules or WIC cards, or the front faceplate will damage the tamper evidence seals or the painted surface and metal of the module cover. DRAM (plaintext) Cisco 2621XM and Cisco 2651XM Modular Access Routers with self-adhesive backing. The... manually and entered electronically via manual key exchange or Internet Key Exchange (IKE). Keys are also protected by the Crypto Officer. The module supports the following : curled corners, bubbling, crinkling, rips, tears, and slices. DRAM (plaintext) The private exponent used in DRAM...
User Guide
Page 17
.... • Only a Crypto Officer may add and remove Network Modules. This document may add and remove WAN Interface Cards. The Crypto Officer must apply tamper evidence labels as described in Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers for FIPS 140-2. When removing the tamper ... of any grease, dirt, or oil with an alcohol-based cleaning pad. Follow the setting instructions provided below to the Cisco publication Installing Advanced Integration Modules in the "Physical Security" section of this document. • Only a Crypto Officer may be accessed on the web ...
.... • Only a Crypto Officer may add and remove Network Modules. This document may add and remove WAN Interface Cards. The Crypto Officer must apply tamper evidence labels as described in Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers for FIPS 140-2. When removing the tamper ... of any grease, dirt, or oil with an alcohol-based cleaning pad. Follow the setting instructions provided below to the Cisco publication Installing Advanced Integration Modules in the "Physical Security" section of this document. • Only a Crypto Officer may be accessed on the web ...
Software Configuration Guide
Page 5
...Name and Password 3-2 Configuring 1-Port and 2-Port Ethernet Interfaces 3-3 Configuring Fast Ethernet Interfaces 3-4 Configuring Asynchronous/Synchronous Serial Network Modules or WAN Interface Cards 3-5 Configuring 16-Port and 32-Port Asynchronous Network Modules 3-9 Configuring ISDN BRI WAN Interface Cards 3-10 Configuring ISDN BRI Lines 3-12 ISDN BRI Provisioning by Switch Type ... Tasks 3-31 Configuring the ADSL Port on the ADSL WAN Interface Card 3-31 Verifying ATM Configuration 3-32 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers v
...Name and Password 3-2 Configuring 1-Port and 2-Port Ethernet Interfaces 3-3 Configuring Fast Ethernet Interfaces 3-4 Configuring Asynchronous/Synchronous Serial Network Modules or WAN Interface Cards 3-5 Configuring 16-Port and 32-Port Asynchronous Network Modules 3-9 Configuring ISDN BRI WAN Interface Cards 3-10 Configuring ISDN BRI Lines 3-12 ISDN BRI Provisioning by Switch Type ... Tasks 3-31 Configuring the ADSL Port on the ADSL WAN Interface Card 3-31 Verifying ATM Configuration 3-32 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers v
Software Configuration Guide
Page 6
... Disable Fair Queueing 3-48 Configuration Examples 3-48 Configuring the Compression Network Module for the Cisco 3600 Series Routers 3-49 Configuration Task 3-49 Configuration Example 3-50 Configuring the Digital Modem Network Module for the Cisco 3640 Router 3-50 Prerequisites 3-50 Configuration Tasks 3-51 Configure the E1/T1 Network Module for ISDN PRI 3-51 Configure Channelized E1 ISDN PRI 3-51...
... Disable Fair Queueing 3-48 Configuration Examples 3-48 Configuring the Compression Network Module for the Cisco 3600 Series Routers 3-49 Configuration Task 3-49 Configuration Example 3-50 Configuring the Digital Modem Network Module for the Cisco 3640 Router 3-50 Prerequisites 3-50 Configuration Tasks 3-51 Configure the E1/T1 Network Module for ISDN PRI 3-51 Configure Channelized E1 ISDN PRI 3-51...
Software Configuration Guide
Page 12
... characters, for your router. Default responses to system prompts appear in the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers. Using the Setup Command Describes how to use the Cisco IOS software command-line interface (CLI) to configure voice network modules with the Command-Line Interface Describes how to use the setup command...
... characters, for your router. Default responses to system prompts appear in the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers. Using the Setup Command Describes how to use the Cisco IOS software command-line interface (CLI) to configure voice network modules with the Command-Line Interface Describes how to use the setup command...
Software Configuration Guide
Page 14
... the top of each page. Table 1 Related and Referenced Documents Cisco Product Cisco 2600 series routers Cisco 3600 series routers Document Title • Cisco 2600 Series Routers Hardware Installation Guide • Cisco 2600 Series Modular Routers Quick Access Guide • Cisco Network Modules Hardware Installation Guide • Cisco WAN Interface Cards Hardware Installation Guide • Regulatory Compliance and Safety...
... the top of each page. Table 1 Related and Referenced Documents Cisco Product Cisco 2600 series routers Cisco 3600 series routers Document Title • Cisco 2600 Series Routers Hardware Installation Guide • Cisco 2600 Series Modular Routers Quick Access Guide • Cisco Network Modules Hardware Installation Guide • Cisco WAN Interface Cards Hardware Installation Guide • Regulatory Compliance and Safety...
Software Configuration Guide
Page 15
... Referenced Documents Table 1 Related and Referenced Documents (continued) Cisco Product Document Title Cisco 3700 series routers • Cisco 3700 Series Routers Hardware Installation Guide • Cisco 3725 and Cisco 3745 Modular Access Routers Quick Start Guide • Cisco Network Modules Hardware Installation Guide • Cisco WAN Interface Cards Hardware Installation Guide Cisco IOS software Note Refer to the modular reference...
... Referenced Documents Table 1 Related and Referenced Documents (continued) Cisco Product Document Title Cisco 3700 series routers • Cisco 3700 Series Routers Hardware Installation Guide • Cisco 3725 and Cisco 3745 Modular Access Routers Quick Start Guide • Cisco Network Modules Hardware Installation Guide • Cisco WAN Interface Cards Hardware Installation Guide Cisco IOS software Note Refer to the modular reference...
Software Configuration Guide
Page 16
..., Issue 5, November 1996. Obtaining Documentation Preface Table 1 Related and Referenced Documents (continued) Cisco Product Document Title Other documents • Information about the PRI network module, refer to the Configuration Guide for voice traffic, refer to the Voice over IP Configuration... • Information about TL1 commands can access the most current Cisco documentation on how to correctly install and configure the Digital Network module and the PRI module, refer to the Digital Modem Network Module Configuration Note. • To configure the router for DSLAs with ...
..., Issue 5, November 1996. Obtaining Documentation Preface Table 1 Related and Referenced Documents (continued) Cisco Product Document Title Other documents • Information about the PRI network module, refer to the Configuration Guide for voice traffic, refer to the Voice over IP Configuration... • Information about TL1 commands can access the most current Cisco documentation on how to correctly install and configure the Digital Network module and the PRI module, refer to the Digital Modem Network Module Configuration Note. • To configure the router for DSLAs with ...
Software Configuration Guide
Page 22
... IOS Software Basics Table 1-1 Router Models Model Cisco 2610 Cisco 2610XM Cisco 2611 Cisco 2611XM Cisco 2612 Cisco 2613 Cisco 2620 Cisco 2620XM Cisco 2621 Cisco 2621XM Cisco 2650 Cisco 2650XM Cisco 2651 Cisco 2651XM Cisco 2691 Ethernet (10BASE-T) 1 2 1 Token-Ring (RJ-45) 1 1 WAN Fast Ethernet Network Interface (10/100) Module Slot Card Slots 1 2 1 1 2 1 2 2 1 2 1 2 1 2 1 1 2 1 1 2 2 1 2 2 1 2 1 1 2 1 1 2 2 1 2 2 1 2 2 1 3 Advanced Integration Module Slots 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 Note The number and type of interfaces vary depending...
... IOS Software Basics Table 1-1 Router Models Model Cisco 2610 Cisco 2610XM Cisco 2611 Cisco 2611XM Cisco 2612 Cisco 2613 Cisco 2620 Cisco 2620XM Cisco 2621 Cisco 2621XM Cisco 2650 Cisco 2650XM Cisco 2651 Cisco 2651XM Cisco 2691 Ethernet (10BASE-T) 1 2 1 Token-Ring (RJ-45) 1 1 WAN Fast Ethernet Network Interface (10/100) Module Slot Card Slots 1 2 1 1 2 1 2 2 1 2 1 2 1 2 1 1 2 1 1 2 2 1 2 2 1 2 1 1 2 1 1 2 2 1 2 2 1 2 2 1 3 Advanced Integration Module Slots 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 Note The number and type of interfaces vary depending...
Software Configuration Guide
Page 23
...0/1 in physical slot W0, interface Serial 0/2 in physical slot W1, and interface BRI 0/0 in physical slot W2) • A 2-port T1 network module in slot 1 (containing the following ports: Serial 1/0, Serial 1/1, Serial 1/2, and Serial 1/3) • First built-in Ethernet interface-Ethernet 0/0 •...; Second built-in Ethernet interface-Ethernet 0/1, or optionally in Cisco 2612 and Cisco 2613 only: Token Ring interface 0/0 Figure 1-1 Example of 1RU Router Figure 1-2 below shows a router of 2 RU height with 0/0 ...
...0/1 in physical slot W0, interface Serial 0/2 in physical slot W1, and interface BRI 0/0 in physical slot W2) • A 2-port T1 network module in slot 1 (containing the following ports: Serial 1/0, Serial 1/1, Serial 1/2, and Serial 1/3) • First built-in Ethernet interface-Ethernet 0/0 •...; Second built-in Ethernet interface-Ethernet 0/1, or optionally in Cisco 2612 and Cisco 2613 only: Token Ring interface 0/0 Figure 1-1 Example of 1RU Router Figure 1-2 below shows a router of 2 RU height with 0/0 ...
Software Configuration Guide
Page 24
... slot W0 are numbered differently from the WAN interfaces described in the chassis. The Cisco 3660 has six network module slots, the Cisco 3640 has four slots, the Cisco 3620 has two slots, and the Cisco 3631 (see Figure 1-5). Voice Interface Numbering in Cisco 2600 Series Routers Voice interfaces are numbered Serial 0/0 and Serial 0/1, and the interface...
... slot W0 are numbered differently from the WAN interfaces described in the chassis. The Cisco 3660 has six network module slots, the Cisco 3640 has four slots, the Cisco 3620 has two slots, and the Cisco 3631 (see Figure 1-5). Voice Interface Numbering in Cisco 2600 Series Routers Voice interfaces are numbered Serial 0/0 and Serial 0/1, and the interface...
Software Configuration Guide
Page 26
... WAN interface card (WIC) interfaces • Slot 1 for network module interfaces at the bottom left. • Slot 2 for network module interfaces at the top left, above slot 1. Understanding Interface Numbering Chapter 1 Understanding Interface Numbering and Cisco IOS Software Basics Figure 1-6 Cisco 3631 Router Rear View For the Cisco 3660 router (see Figure 1-3), the slots are numbered as...
... WAN interface card (WIC) interfaces • Slot 1 for network module interfaces at the bottom left. • Slot 2 for network module interfaces at the top left, above slot 1. Understanding Interface Numbering Chapter 1 Understanding Interface Numbering and Cisco IOS Software Basics Figure 1-6 Cisco 3631 Router Rear View For the Cisco 3660 router (see Figure 1-3), the slots are numbered as...
Software Configuration Guide
Page 27
... 1-7 Example of the Cisco 3631 Router Interface Numbering Figure 1-7 shows an example of the interface numbering where the following interfaces are installed: • A WIC in each WIC slot (containing interfaces serial 0/0 and serial 0/1 in physical slot W0, and interface serial 0/2 in physical slot W1) • A 32-port asynchronous network module in slot 1 (containing...
... 1-7 Example of the Cisco 3631 Router Interface Numbering Figure 1-7 shows an example of the interface numbering where the following interfaces are installed: • A WIC in each WIC slot (containing interfaces serial 0/0 and serial 0/1 in physical slot W0, and interface serial 0/2 in physical slot W1) • A 32-port asynchronous network module in slot 1 (containing...