Cisco 2821 Support Question
Cisco 2821 Support Question
Find answers below for this question about Cisco 2821 - Integrated Services Router Unified Communications Bundle.Need a Cisco 2821 manual? We have 5 online manuals for this item!
Question posted by raphaelderpo on May 12th, 2015
Service Module Gigaethernet 1/0 Session
switch>enpassword:Password:bad password
Current Answers
Related Cisco 2821 Manual Pages
User Guide - Page 1
...security requirements of the Cisco 2811 or Cisco 2821 Integrated Services Router. Government requirements for Cryptographic Modules) details the U.S. More information about the FIPS 140-2 standard and validation program is the non-proprietary Cryptographic Module Security Policy for the Cisco 2811 and Cisco 2821 Integrated Services Router without an AIM card installed. All rights reserved...
User Guide - Page 2
... 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
2
OL-8663-01 In addition to this document, the Cisco 2811 or Cisco 2821 routers are dramatically evolving, driven by the routers. This introduction section is part of the Cisco 2811 or Cisco 2821 router" section on the Cisco Systems website at www.cisco.com. • The NIST Validated Modules...
User Guide - Page 3
... 2 shows the front panel and Figure 3
OL-8663-01
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
3 The cryptographic boundary of the functionality discussed in Figure 2 and Figure 3, respectively. The Cisco 2811 router supports one single-width network module, four single-width or two double-width HWICs, two internal advanced...
User Guide - Page 4
...; (2) Power switch • (3) Optional RPS input • (4) Console and auxiliary ports • (5) USB ports • (6) CF drive • (7) LEDs described in accordance with AIM module installed. The ...Cisco 2811 and Cisco 2821 Routers
shows the rear panel. However, an AIM module may not be installed in table 1. Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non ...
User Guide - Page 6
... an internal memory module, because the IOS image stored in the card may not be removed from the drive. The card itself must never be modified or upgraded. Tamper evident seal will be placed over the card in the future for smartcard or token reader. Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140...
User Guide - Page 7
...
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
7 The interfaces for the router are located on configuration, either the internal NetGX chip or the IOS software is used for cryptographic operations. Cisco 2811 and Cisco 2821 Routers
The Cisco 2821 Cryptographic Module Physical Characteristics
Figure 4
The Cisco 2821 router case
Figure 5
SYS...
User Guide - Page 8
... the rear panel. The front panel contains the following:
• (1) Power inlet
• (2) Power switch
• (3) Console and auxiliary ports
• (4) USB ports
• (5) CF drive
• (6) LEDs described in accordance with AIM module installed.
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
8
OL-8663-01 Cisco 2811 and Cisco...
User Guide - Page 11
... RADIUS and TACACS+ for username and password. If the password is correct, the User is the IOS image stored in the card cannot be placed over the card in Cisco 2811 and Cisco 2821 is considered an internal memory module. OL-8663-01
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
11...
User Guide - Page 12
....
• View Status Functions-View the router configuration, routing tables, active sessions, use gets to view SNMP MIB statistics,...services consist of the following:
• Configure the router-Define network interfaces and settings, create command aliases, set of the router, the Crypto Officer password (the "enable" password) is defined. Cisco 2811 and Cisco 2821 Integrated Services Router...
User Guide - Page 14
...and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
14
OL-8663-01 Any attempt to verify that the module has not been tampered. Cryptographic Key Management
The router securely ... of the label covers the enclosure and the other critical security parameters such as passwords. The labels completely cure within five minutes.
Keys are produced from a special ...
User Guide - Page 15
...2821 Routers
The routers support the following command will zeroize the IPSec DES/3DES/AES session key (which is derived using the Diffie-Hellman key agreement technique) from the DRAM. HMAC-SHA-1 The router...2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
15 SHA-1 - HMAC-SHA-1 - DES/3DES/AES key and HMAC-SHA-1 key are used to be zeroized by a password...module...
User Guide - Page 16
...X9.31 PRNG.
Automatically after IKE session terminated.
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security ...module supports the following commands will zeroize the pre-shared keys from the shared secret within IKE DRAM
exchange. Automatically after IKE session terminated. Cisco 2811 and Cisco 2821 Routers
• no set session...
User Guide - Page 17
... and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
17 DRAM (plaintext)
This key is DRAM
the same as above.
(plaintext)
The key used in Cisco vendor ID generation. "# no crypto isakmp key"
Automatically when IPSec session terminated.
"# no username password"
Automatically when SSH session terminated Overwrite with new password Overwrite with...
User Guide - Page 19
... key skeyid skeyid_d skeyid_a skeyid_e IKE session encrypt key IKE session authentication key ISAKMP preshared IKE hash key secret_1_0_0 IPSec encryption key
r
r
w
d
r
r
w
d
r
r
w
d
r
r
w
d
r
r
w
d
r
r
w
d
r
r
w
r
r
w
d
r
r
w
d
r
r
w
d
r
r
w
d
OL-8663-01
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy...
User Guide - Page 20
... key Configuration encryption key Router authentication key PPP Authentication key Router authentication key 2 SSH session key User password Enable password Enable secret RADIUS secret TACACS+ secret
r
r
w
d
r
r
w
w
d
d
r
r
w
d
r
dr
w
r
r
w
d
r
r
w
d
r
r
w
d
r w d
r w d
r w d
r w d
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary...
User Guide - Page 21
...• Conditional tests - DES Known Answer Test
OL-8663-01
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
21 If any secure data from being released, it is... important to test the cryptographic components of a security module to insure all secure data transmission is a cryptographic known answer test (KAT) on...
User Guide - Page 22
... enters the following syntax at least 8 characters) to place the module in the "Physical Security" section on the console port is the only allowable image; The Crypto Officer enters the following syntax:
line con 0 password [PASSWORD] login local
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
22
OL-8663-01 Secure...
User Guide - Page 23
... Cisco 2811 and Cisco 2821 Integrated Services Routers, refer to the following algorithms are allowed in FIPS mode. Since SNMP v2C uses community strings for authentication, only gets are secured through IPSec, using FIPS-approved algorithms. Note that any remote connections via a secure IPSec tunnel between the remote system and the module. ah-sha-hmac - esp...
User Guide - Page 24
Cisco 2811 and Cisco 2821 Integrated Services Router FIPS 140-2 Non Proprietary Security Policy
24
OL-...HTML. Obtaining Documentation
• Cisco 2800 Series Software Configuration documents • Cisco 2800 Series Cards and Modules
Obtaining Documentation
Cisco documentation and additional literature are available in the Product Documentation DVD package, which may have...
Quick Start Guide - Page 3
... available.
• In Cisco 2851 routers, the network module slot adds support for reference:
Company product purchased from Company telephone number Product model number Product serial number Maintenance contract number
2 Overview
The Cisco 2800 series integrated services routers include the Cisco 2801, Cisco 2811, Cisco 2821, and Cisco 2851 routers. Complete the information below, and keep...
Similar Questions
Eol And Eos
How about range time eol eos this device asr 1002-x ?
How about range time eol eos this device asr 1002-x ?
(Posted by firmanjeneldi 1 year ago)
Failed: Install_add : Install Issu In Progress. Abort The Issu Upgrade To Procee
I am trying to upgrade ASR 1006 RP2 17.06.03a to 17.08.01aFAILED: install_add : Install ISSU in prog...
I am trying to upgrade ASR 1006 RP2 17.06.03a to 17.08.01aFAILED: install_add : Install ISSU in prog...
(Posted by shivanand 1 year ago)
Le Module Sfp Qui Correspond Au Routeur Asr 1004 Stm-1
(Posted by achourilil 2 years ago)
How Many Spas Can This Router Hold?
(Posted by ali8123196 8 years ago)
Command To Find The Serial Number Of The Sfp Module Installed In Epa-ge/fe-bbrd
I have 12416/PRP ciscorouter with cardEPA-GE/FE-BBRD and it is having 3 modules also.I am able to ge...
I have 12416/PRP ciscorouter with cardEPA-GE/FE-BBRD and it is having 3 modules also.I am able to ge...
(Posted by jijugmgm 11 years ago)