Cisco 2621 User Manual page 20

Cisco 2651 Modular Access Routers
Table 3
Router Physical Interface
10/100BASE-TX LAN Port
WAN Interface
Network Module Interface
Console Port
Auxiliary Port*
10/100BASE-TX LAN Port
WAN Interface
Network Module Interface
Console Port
Auxiliary Port*
Power Switch
Console Port
Auxiliary Port*
LAN Port LEDs
10/100BASE-TX LAN Port LEDs
Power LED
Redundant Power LED
Activity LED
Console Port
Auxiliary Port*
Power Plug
In addition to the built-in interfaces, the router also has approximately 70 network modules that can
optionally be placed in an available slot. These networks modules have many embodiments, including
multiple Ethernet, token ring, and modem cards to handle frame relay, ATM, and ISDN connections. See
the
network modules and how they apply to the FIPS certification.
Roles and Services
There are two main roles in the router (as required by FIPS 140-1) that operators may assume: Crypto
Officer role and User role. The administrator of the router assumes the Crypto Officer role in order to
configure and maintain the router using Crypto Officer services, while the Users exercise only the basic
User services.
Crypto Officer Services
During initial configuration of the router a Crypto Officer or Administrator password is defined and all
management services are available from this role. The Administrator connects to the router through the
console port via terminal program. An administrator of the router may assign permission to access the
Administrator role to additional accounts, thereby creating additional administrators.
Cisco 2651 Modular Access Router Security Policy
6
FIPS 140-1 Logical Interfaces
*The auxiliary port must be disabled in FIPS mode. See the
"Network Modules and WAN Interface Cards" section on page 11
FIPS 140-1 Logical Interface
Data Input Interface
Data Output Interface
Control Input Interface
Status Output Interface
Power Interface
"Secure Operation of the Cisco 2651 Router" section on page
for a more detailed description of
10.
78-13697-01