Motorola S2500 Manuel d'utilisateur

Copyright © Motorola, Inc. 2009. May be reproduced only in its original entirety [without revision]. Motorola Network Router (MNR) S2500 Securit

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 106. Access Control Policy Authenticated Services • Firmware Update: load

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 11Roles and Services Service Crypto Officer (SuperUser) Network Manager Use

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 12Definition of Critical Security Parameters (CSPs) The following CSPs are

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 13Definition of Public Keys: The following public keys are contained within

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 14CSP Firmware Update Key entry User Management IKE Ipsec tunnel establish

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 15 7. Operational Environment The FIPS 140-2 Area 6 Operational Environment

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 16B. Conditional Self-Tests: a. Continuous Random Number Generator (RNG) t

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 1710. Physical Security Policy Physical Security Mechanisms The MNR S2500 r

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 18PFS – Perfect Forward Secrecy RNG – Random Number Generator SHA – Secure

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 2TABLE OF CONTENTS 1. MODULE OVERVIEW ...

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 31. Module Overview The MNR S2500 router, also referred to as the S2500, is

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 42. Security Level The cryptographic module meets the overall requirements

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 5Firmware Implementations a. Triple-DES– CBC mode (112 and 168 bit) for IK

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 6Entering FIPS Mode To enter FIPS mode, the Crypto Officer must follow the

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 7SHOW –CRYPTO CONFiguration This command shows a detailed summary of the cr

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 84. Ports and Interfaces Table 4 below provides a listing of the physical p

MNR S2500 Security Policy Version 1.3, Revision Date: 1/13/2009 Page 9strings consisting of 7 to 15 characters chosen from the 94 standard keybo