User Guide
Page 2
... exception of the modules. With over 100 Network Modules (NMs) and WAN Interface Cards (WICs), the modular architecture of the Cisco router easily allows interfaces to be found at: http://www.cisco.com/en/US/products/hw/routers/ps221/index.html • For answers to technical... the general features and functionality of a FIPS 140-2 cryptographic module security policy. This introduction section is part of operation. The Cisco 2621XM and 2651XM routers offer versatility, integration, and security to branch offices. More information is releasable only under appropriate non-disclosure ...
... exception of the modules. With over 100 Network Modules (NMs) and WAN Interface Cards (WICs), the modular architecture of the Cisco router easily allows interfaces to be found at: http://www.cisco.com/en/US/products/hw/routers/ps221/index.html • For answers to technical... the general features and functionality of a FIPS 140-2 cryptographic module security policy. This introduction section is part of operation. The Cisco 2621XM and 2651XM routers offer versatility, integration, and security to branch offices. More information is releasable only under appropriate non-disclosure ...
User Guide
Page 3
... 2 Tunneling Protocols (L2TP) make the Cisco 2600 an ideal platform for the router are multiple-chip standalone cryptographic modules. The cryptographic boundary includes the connection apparatus between the WIC or Network Module and the motherboard/daughterboard ...that meets FIPS 140-2 Level 2 requirements. In other words, the cryptographic boundary encompasses all portions of the "backplane" of the functionality discussed in Figure 2. The Cisco 2621XM and 2651XM routers incorporate an AIM-VPN/EP cryptographic accelerator card...
... 2 Tunneling Protocols (L2TP) make the Cisco 2600 an ideal platform for the router are multiple-chip standalone cryptographic modules. The cryptographic boundary includes the connection apparatus between the WIC or Network Module and the motherboard/daughterboard ...that meets FIPS 140-2 Level 2 requirements. In other words, the cryptographic boundary encompasses all portions of the "backplane" of the functionality discussed in Figure 2. The Cisco 2621XM and 2651XM routers incorporate an AIM-VPN/EP cryptographic accelerator card...
User Guide
Page 4
...is inserted into an adapter called the Network Module expansion bus. WICs cannot perform cryptographic functions; The module also has two other RJ-45 connectors on the rear panel with the cryptographic card; mixed Token-Ring and Ethernet; therefore, no security parameters will ...power switch. The 2621XM/2651XM Router Figure 2 Cisco 2621XM and Cisco 2651XM Physical Interfaces WIC slots Cisco 2650 99494 W1 SERIAL 1 CONN SERIAL 0 SEE MANUAL BEFORE INSTALLATION WIC CONN 2A/S SERIAL 1 CONN SERIAL 0 WIC CONN 2T SEE MANUAL BEFORE INSTALLATION W0 Cisco 2650 100-240V- 1A 50/60 Hz 47...
...is inserted into an adapter called the Network Module expansion bus. WICs cannot perform cryptographic functions; The module also has two other RJ-45 connectors on the rear panel with the cryptographic card; mixed Token-Ring and Ethernet; therefore, no security parameters will ...power switch. The 2621XM/2651XM Router Figure 2 Cisco 2621XM and Cisco 2651XM Physical Interfaces WIC slots Cisco 2650 99494 W1 SERIAL 1 CONN SERIAL 0 SEE MANUAL BEFORE INSTALLATION WIC CONN 2A/S SERIAL 1 CONN SERIAL 0 WIC CONN 2T SEE MANUAL BEFORE INSTALLATION W0 Cisco 2650 100-240V- 1A 50/60 Hz 47...
User Guide
Page 8
... layer 2 protocols, version of files kept in the "Initial Setup" section of the unit provides 1 Network Module slot, 2 WIC slots, on each IP range or allow access to the motherboard, memory, and expansion slots. The rear of this document. • Change... WAN Interface Cards-insert and remove WICs in the WAN interface slot as described in the "Initial Setup" section of this document. Cisco 2621XM and Cisco 2651XM Modular Access Routers with a terminal program. User Services A User enters ...
... layer 2 protocols, version of files kept in the "Initial Setup" section of the unit provides 1 Network Module slot, 2 WIC slots, on each IP range or allow access to the motherboard, memory, and expansion slots. The rear of this document. • Change... WAN Interface Cards-insert and remove WICs in the WAN interface slot as described in the "Initial Setup" section of this document. Cisco 2621XM and Cisco 2651XM Modular Access Routers with a terminal program. User Services A User enters ...
User Guide
Page 9
... slot cover in order to operate in Figure 6. Figure 5 Cisco 2621XM and Cisco 2651XM Chassis Removal The 2621XM/2651XM Router POWER RPS ACTIVITY Cisco 2600 SERIES 99497 Any NM or WIC slot, which is not populated with a NM or WIC, must also be followed to apply tamper evidence labels for the... should be populated with AIM-VPN/EP FIPS 140-2 Non-Proprietary Security Policy OL-6262-01 9 Any attempt to remove a WAN interface card will leave tamper evidence. Any attempt to remove the enclosure will leave tamper evidence. The same procedure mentioned below to remove the enclosure will...
... slot cover in order to operate in Figure 6. Figure 5 Cisco 2621XM and Cisco 2651XM Chassis Removal The 2621XM/2651XM Router POWER RPS ACTIVITY Cisco 2600 SERIES 99497 Any NM or WIC slot, which is not populated with a NM or WIC, must also be followed to apply tamper evidence labels for the... should be populated with AIM-VPN/EP FIPS 140-2 Non-Proprietary Security Policy OL-6262-01 9 Any attempt to remove a WAN interface card will leave tamper evidence. Any attempt to remove the enclosure will leave tamper evidence. The same procedure mentioned below to remove the enclosure will...
User Guide
Page 10
... applied serial numbers to zeroize this key. All keys are also protected by the Crypto Officer. hence, it is terminated. DRAM (plaintext) Cisco 2621XM and Cisco 2651XM Modular Access Routers with self-adhesive backing. Any attempt to 15Mbps, MD5 and SHA-1 hashing, and has hardware support for X9.31 ... DES (56-bit) (only for legacy systems) and 3DES (168-bit) IPSec encryption at up to open the router, remove Network Modules or WIC cards, or the front faceplate will damage the tamper evidence seals or the painted surface and metal of 400 bites; Zeroized when IKE session is zeroized...
... applied serial numbers to zeroize this key. All keys are also protected by the Crypto Officer. hence, it is terminated. DRAM (plaintext) Cisco 2621XM and Cisco 2651XM Modular Access Routers with self-adhesive backing. Any attempt to 15Mbps, MD5 and SHA-1 hashing, and has hardware support for X9.31 ... DES (56-bit) (only for legacy systems) and 3DES (168-bit) IPSec encryption at up to open the router, remove Network Modules or WIC cards, or the front faceplate will damage the tamper evidence seals or the painted surface and metal of 400 bites; Zeroized when IKE session is zeroized...
Software Configuration Guide
Page 22
... cards (WICs) • One slot in interfaces and 0 for network module interfaces. WAN and LAN Interface Numbering The Cisco ...Understanding Interface Numbering Chapter 1 Understanding Interface Numbering and Cisco IOS Software Basics Table 1-1 Router Models Model Cisco 2610 Cisco 2610XM Cisco 2611 Cisco 2611XM Cisco 2612 Cisco 2613 Cisco 2620 Cisco 2620XM Cisco 2621 Cisco 2621XM Cisco 2650 Cisco 2650XM Cisco 2651 Cisco 2651XM Cisco 2691 Ethernet (10BASE-T) 1 2 1 Token-Ring (RJ-45) 1 1 WAN Fast Ethernet Network Interface (10/100) Module Slot Card Slots 1 2 1 1 2 1 2 ...
... cards (WICs) • One slot in interfaces and 0 for network module interfaces. WAN and LAN Interface Numbering The Cisco ...Understanding Interface Numbering Chapter 1 Understanding Interface Numbering and Cisco IOS Software Basics Table 1-1 Router Models Model Cisco 2610 Cisco 2610XM Cisco 2611 Cisco 2611XM Cisco 2612 Cisco 2613 Cisco 2620 Cisco 2620XM Cisco 2621 Cisco 2621XM Cisco 2650 Cisco 2650XM Cisco 2651 Cisco 2651XM Cisco 2691 Ethernet (10BASE-T) 1 2 1 Token-Ring (RJ-45) 1 1 WAN Fast Ethernet Network Interface (10/100) Module Slot Card Slots 1 2 1 1 2 1 2 ...
Software Configuration Guide
Page 26
... the bottom left. • Slot 2 is at the top right, above slot 0. • Slot 3 is at the left, above slot 4. For the Cisco 3620 and Cisco 3640 routers shown in Figure 1-4 and Figure 1-5, the slots are numbered as follows: • Slot 0 for all built-in Figure 1-6, the slots are numbered... Slot 0 is at the bottom right (as viewed from the rear of the chassis), near the Console/AUX ports • Slot 0 for all WAN interface card (WIC) interfaces • Slot 1 for network module interfaces at the bottom left. • Slot 2 for network module interfaces at the top left , above slot ...
... the bottom left. • Slot 2 is at the top right, above slot 0. • Slot 3 is at the left, above slot 4. For the Cisco 3620 and Cisco 3640 routers shown in Figure 1-4 and Figure 1-5, the slots are numbered as follows: • Slot 0 for all built-in Figure 1-6, the slots are numbered... Slot 0 is at the bottom right (as viewed from the rear of the chassis), near the Console/AUX ports • Slot 0 for all WAN interface card (WIC) interfaces • Slot 1 for network module interfaces at the bottom left. • Slot 2 for network module interfaces at the top left , above slot ...
Software Configuration Guide
Page 27
... and W1). OL-1957-04 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 1-7 You can install WAN interface cards into either slot, W0 or W1. If physical slot W0 contains a 2-port serial WIC and slot W1 contains a 1-port serial WIC, then the logical interfaces in physical slot W0 are...
... and W1). OL-1957-04 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 1-7 You can install WAN interface cards into either slot, W0 or W1. If physical slot W0 contains a 2-port serial WIC and slot W1 contains a 1-port serial WIC, then the logical interfaces in physical slot W0 are...
Software Configuration Guide
Page 29
... FastEthernet LAN interfaces • Three slots in which you can install WAN interface cards (WICs) • One single-width slot (slot 1) in interfaces • 0 for all built-in which you can install one single-width or double-width network module Cisco 3725 Router Slot Numbering The numbering format is identified by a slot number...
... FastEthernet LAN interfaces • Three slots in which you can install WAN interface cards (WICs) • One single-width slot (slot 1) in interfaces • 0 for all built-in which you can install one single-width or double-width network module Cisco 3725 Router Slot Numbering The numbering format is identified by a slot number...
Software Configuration Guide
Page 31
...• Two AC power supplies OL-1957-04 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 1-11 Figure 1-11 shows the rear panel of the Cisco 3745 with: • A WIC in each interface type, and continue from right to left network module slot... slot Interface (port) numbers begin at 0 for all built-in which you can install WAN or voice interface cards • 4 network module slots. Two examples are as follows: • 0 for all WIC interfaces • 1 for the lower right network module slot • 2 for the lower left network module...
...• Two AC power supplies OL-1957-04 Software Configuration Guide For Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 1-11 Figure 1-11 shows the rear panel of the Cisco 3745 with: • A WIC in each interface type, and continue from right to left network module slot... slot Interface (port) numbers begin at 0 for all built-in which you can install WAN or voice interface cards • 4 network module slots. Two examples are as follows: • 0 for all WIC interfaces • 1 for the lower right network module slot • 2 for the lower left network module...
Software Configuration Guide
Page 32
... installed in. If physical slot W0 is empty and physical slot W1 contains a 1-port serial WIC, the interface in the WIC is numbered BRI 0/0. Understanding Interface Numbering Chapter 1 Understanding Interface Numbering and Cisco IOS Software Basics Figure 1-11 Cisco 3745 Rear Panel 1 Interface card slots 2 Network modules 3 Power supply 4 Fast Ethernet 0/0 port 5 Fast Ethernet 0/1 port...
... installed in. If physical slot W0 is empty and physical slot W1 contains a 1-port serial WIC, the interface in the WIC is numbered BRI 0/0. Understanding Interface Numbering Chapter 1 Understanding Interface Numbering and Cisco IOS Software Basics Figure 1-11 Cisco 3745 Rear Panel 1 Interface card slots 2 Network modules 3 Power supply 4 Fast Ethernet 0/0 port 5 Fast Ethernet 0/1 port...
Software Configuration Guide
Page 89
... request to a specified IP address. each signal that is not returned before the timeout is a 1-port WAN interface card (WIC) for the Cisco 2600 series and Cisco 3600 series routers. Figure 3-1 General Topology for ADSL WIC OL-1957-04 Software Configuration Guide for both voice and data service. If necessary, return to configuration mode to...
... request to a specified IP address. each signal that is not returned before the timeout is a 1-port WAN interface card (WIC) for the Cisco 2600 series and Cisco 3600 series routers. Figure 3-1 General Topology for ADSL WIC OL-1957-04 Software Configuration Guide for both voice and data service. If necessary, return to configuration mode to...
Software Configuration Guide
Page 90
...; Aggregates both ADSL and other transport options into onboard WIC slots or 2W, 1FE2W, 2FE2W, or 1FE1R2W network modules. This card does not function properly in older network modules. • For the Cisco 3600 series routers, the ADSL WAN interface card should come through a digital voice card, such as the NM-HDV. • VoATM is...
...; Aggregates both ADSL and other transport options into onboard WIC slots or 2W, 1FE2W, 2FE2W, or 1FE1R2W network modules. This card does not function properly in older network modules. • For the Cisco 3600 series routers, the ADSL WAN interface card should come through a digital voice card, such as the NM-HDV. • VoATM is...
Software Configuration Guide
Page 91
...on the DSLAM. the default encapsulation is UBR; Chapter 3 Configuring with the Command-Line Interface Configuring 1-Port ADSL WAN Interface Card Prerequisites A 1-Port ADSL WIC must also be configured. Router(config-if)# pvc [name] vpi/vci Entes atm-virtual-circuit (interface-atm-vc) configuration ...8226; aal5nlpid-AAL5+NLPID • aal5snap-AAL5+LLC/SNAP (the default) OL-1957-04 Software Configuration Guide for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-31 Router(config-if-vc)# vbr-rt peak-rate average-rate burst (Optional) Configure the PVC...
...on the DSLAM. the default encapsulation is UBR; Chapter 3 Configuring with the Command-Line Interface Configuring 1-Port ADSL WAN Interface Card Prerequisites A 1-Port ADSL WIC must also be configured. Router(config-if)# pvc [name] vpi/vci Entes atm-virtual-circuit (interface-atm-vc) configuration ...8226; aal5nlpid-AAL5+NLPID • aal5snap-AAL5+LLC/SNAP (the default) OL-1957-04 Software Configuration Guide for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-31 Router(config-if-vc)# vbr-rt peak-rate average-rate burst (Optional) Configure the PVC...
Software Configuration Guide
Page 93
...vpi_bits:8 vpvc_sel:3 enabled: 0 throttled:0 WIC Register FPGA Dev ID (LB) FPGA Dev ID (UB) FPGA Revision WIC Config Reg WIC Config Reg2 Int 0 Enable Reg Value Notes 0x44 'D' 0x53 'S' 0x99 0x45 WIC / VIC select = WIC; CTRLE addr bit 8 = 1; ...Cisco 3700 Series Routers 3-33 CD LED on; 0x07 Gen bus error on bad ADSL access 0x03 ADSL normal interrupt enabled ADSL error interrupt enabled Configuration Examples Examples of "show controllers atm 1/0 Interface ATM1/0 is up Hardware is DSLSAR (with the Command-Line Interface Configuring 1-Port ADSL WAN Interface Card...
...vpi_bits:8 vpvc_sel:3 enabled: 0 throttled:0 WIC Register FPGA Dev ID (LB) FPGA Dev ID (UB) FPGA Revision WIC Config Reg WIC Config Reg2 Int 0 Enable Reg Value Notes 0x44 'D' 0x53 'S' 0x99 0x45 WIC / VIC select = WIC; CTRLE addr bit 8 = 1; ...Cisco 3700 Series Routers 3-33 CD LED on; 0x07 Gen bus error on bad ADSL access 0x03 ADSL normal interrupt enabled ADSL error interrupt enabled Configuration Examples Examples of "show controllers atm 1/0 Interface ATM1/0 is up Hardware is DSLSAR (with the Command-Line Interface Configuring 1-Port ADSL WAN Interface Card...
Software Configuration Guide
Page 118
... is compatible with the Cisco 6015, Cisco 6130, Cisco 6160, and Cisco 6260 Digital Subscriber Line Access Multiplexers (DSLAMs). The G.SHDSL WIC supports ATM Adaptation Layer 2 (AAL2), ATM Adaptation Layer 5 (AAL5), and various classes of quality of service (QoS) for Cisco 2600 series and Cisco 3600 series routers. Configuring 1-Port G.SHDSL WAN Interface Card This section describes how...
... is compatible with the Cisco 6015, Cisco 6130, Cisco 6160, and Cisco 6260 Digital Subscriber Line Access Multiplexers (DSLAMs). The G.SHDSL WIC supports ATM Adaptation Layer 2 (AAL2), ATM Adaptation Layer 5 (AAL5), and various classes of quality of service (QoS) for Cisco 2600 series and Cisco 3600 series routers. Configuring 1-Port G.SHDSL WAN Interface Card This section describes how...
Software Configuration Guide
Page 119
...Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-59 Prerequisites A G.SHDSL WIC must be installed in the DSLAM. Configuration Tasks See the following router platforms: • Cisco 2610 • Cisco 2611 • Cisco 2612 • Cisco 2613 • Cisco 2620 • Cisco 2621 • Cisco 2650 • Cisco 2651 • Cisco 3620 • Cisco 3640 • Cisco 3661 • Cisco...is usually present with the Command-Line Interface Configuring 1-Port G.SHDSL WAN Interface Card • Supports AAL2 and AAL5 services and applications (including voice), ATM ...
...Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-59 Prerequisites A G.SHDSL WIC must be installed in the DSLAM. Configuration Tasks See the following router platforms: • Cisco 2610 • Cisco 2611 • Cisco 2612 • Cisco 2613 • Cisco 2620 • Cisco 2621 • Cisco 2650 • Cisco 2651 • Cisco 3620 • Cisco 3640 • Cisco 3661 • Cisco...is usually present with the Command-Line Interface Configuring 1-Port G.SHDSL WAN Interface Card • Supports AAL2 and AAL5 services and applications (including voice), ATM ...
Software Configuration Guide
Page 120
... address for the virtual circuit (VC). (Optional) Configures the PVC for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers OL-1957-04 Configuring 1-Port G.SHDSL WAN Interface Card Chapter 3 Configuring with the Command-Line Interface • Configuring ILMI on ...the DSLAM Connected to the ADSL WAN, page 3-62 (optional) • Verifying ATM Configuration, page 3-62 (optional) Configuring G.SHDSL on a Cisco Router To configure G.SHDSL service on a Cisco router containing a G.SHDSL WIC...
... address for the virtual circuit (VC). (Optional) Configures the PVC for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers OL-1957-04 Configuring 1-Port G.SHDSL WAN Interface Card Chapter 3 Configuring with the Command-Line Interface • Configuring ILMI on ...the DSLAM Connected to the ADSL WAN, page 3-62 (optional) • Verifying ATM Configuration, page 3-62 (optional) Configuring G.SHDSL on a Cisco Router To configure G.SHDSL service on a Cisco router containing a G.SHDSL WIC...
Software Configuration Guide
Page 121
..., 200, 264, 392, 520, 776, 1032, 1160, 1544, 2056, and 2312. • auto-The WIC automatically trains for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-61 Exits from ATM interface configuration mode. Exits from global configuration mode. Configures the DSL interface ... with a DSLAM or with another G.SHDSL WIC configured as co. This value is cpe. OL-1957-04 Software Configuration Guide for an optimal line rate by negotiating with the Command-Line Interface Configuring 1-Port G.SHDSL WAN Interface Card Command Step 7 Router(config-if-vc)# ...
..., 200, 264, 392, 520, 776, 1032, 1160, 1544, 2056, and 2312. • auto-The WIC automatically trains for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers 3-61 Exits from ATM interface configuration mode. Exits from global configuration mode. Configures the DSL interface ... with a DSLAM or with another G.SHDSL WIC configured as co. This value is cpe. OL-1957-04 Software Configuration Guide for an optimal line rate by negotiating with the Command-Line Interface Configuring 1-Port G.SHDSL WAN Interface Card Command Step 7 Router(config-if-vc)# ...