Roles And Services; Crypto Officer Services - Cisco 2621 User Manual

Cisco 2621 Modular Access Routers
Table 3
Router Physical Interface
10/100BASE-TX LAN Port
WAN Interface
Network Module Interface
Console Port
Auxiliary Port*
10/100BASE-TX LAN Port
WAN Interface
Network Module Interface
Console Port
Auxiliary Port*
Power Switch
Console Port
Auxiliary Port*
LAN Port LEDs
10/100BASE-TX LAN Port LEDs
Power LED
Redundant Power LED
Activity LED
Console Port
Auxiliary Port*
Power Plug
In addition to the built-in interfaces, the router also has approximately 70 network modules that can
optionally be placed in an available slot. These networks modules have many embodiments, including
multiple Ethernet, token ring, and modem cards to handle frame relay, ATM, and ISDN connections.

Roles and Services

There are two main roles in the router (as required by FIPS 140-1) that operators may assume: Crypto
Officer role and User role. The administrator of the router assumes the Crypto Officer role in order to
configure and maintain the router using Crypto Officer services, while the Users exercise only the basic
User services.

Crypto Officer Services

During initial configuration of the router a Crypto Officer or Administrator password is defined and all
management services are available from this role. The Administrator connects to the router through the
console port via terminal program. An administrator of the router may assign permission to access the
Administrator role to additional accounts, thereby creating additional administrators.
At the highest level, Crypto Officer services include the following:
Cisco 2621 Modular Access Router Security Policy
6
FIPS 140-1 Logical Interfaces
*The auxiliary port must be disabled in FIPS mode. See Section 3.
FIPS 140-1 Logical Interface
Data Input Interface
Data Output Interface
Control Input Interface
Status Output Interface
Power Interface
78-13824-01