Roles And Services; User Services - Cisco 3825 Non Proprietary Security Policy

Cisco 3825 and Cisco 3845 Routers
Table 7
10/100/1000 Ethernet LAN Ports
HWIC Ports
Console Port
Auxiliary Port
ENM Slots
SFP
10/100/1000 Ethernet LAN LEDs
SFP LED
AIM LEDs
PVDM LEDs
System Power LEDs
System Activity LED
System LED
Compact Flash LED
Auxiliary Power LEDs
Console Port
Auxiliary Port
Power Plug
There are two USB ports but they are not supported currently. The ports will be supported in the future
for smartcard or token reader.
The CF card that stored the IOS image is considered an internal memory module. The reason is the IOS
image stored in the card cannot be modified or upgraded. The card itself must never be removed from
the drive. Tamper evident seal will be placed over the card in the drive.

Roles and Services

Authentication in Cisco 3825 and Cisco 3845 is role-based. There are two main roles in the router that
operators can assume: the Crypto Officer role and the User role. The administrator of the router assumes
the Crypto Officer role in order to configure and maintain the router using Crypto Officer services, while
the Users exercise only the basic User services. The module supports RADIUS and TACACS+ for
authentication. A complete description of all the management and configuration capabilities of the router
can be found in the Performing Basic System Management manual and in the online help for the router.

User Services

Users enter the system by accessing the console port with a terminal program or via IPSec protected
telnet or SSH session to a LAN port. The IOS prompts the User for username and password. If the
password is correct, the User is allowed entry to the IOS executive program.
Cisco 3825 and Cisco 3845 Integrated Services Routers FIPS 140-2 Non Proprietary Security Policy
12
Cisco 3845 FIPS 140-2 Logical Interfaces (Continued)
Control Input Interface
Status Output Interface
Power Interface
OL-8662-01