Cisco 7606 User Manual page 11

Crypto Officer Role
During initial configuration of the router, the crypto officer password (the "enable" password) is defined.
A crypto officer may assign permission to access the crypto officer role to additional accounts, which
creates additional crypto officers.
The crypto officer role is responsible for the configuration and maintenance of the router. The crypto
officer services consist of the following:
•
•
•
•
•
•
User Services
A user enters the system by accessing the console port with a terminal program. Cisco IOS prompts the
user for their password. If the password is correct, the user is allowed entry to the Cisco IOS executive
program. The user services consist of the following:
•
•
•
•
OL-6334-01
Configuring the router—Defines network interfaces and settings, creates command aliases, sets the
protocols the switch or router will support, enables interfaces and network services, sets system date
and time, and loads authentication information.
Defining rules and filters—Creates packet filters that are applied to user data streams on each
interface. Each filter consists of a set of rules, which define a set of packets to permit- or deny-based
characteristics such as protocol ID, addresses, ports, TCP connection establishment, or packet
direction.
Status functions—Views the router configuration, routing tables, and active sessions, uses the Get
commands to view SNMP MIB II statistics, health, temperature, memory status, voltage, and packet
statistics, reviews accounting logs, and views physical interface status.
Managing the switch or the router—Logs off users, shuts down or reloads the switch or router,
manually backs up switch or router configurations, views complete configurations, manages user
rights, and restores switch or router configurations.
Setting encryption and bypass—Sets up the configuration tables for IP tunneling. Sets keys and
algorithms to be used for each IP range or allow plaintext packets to be set from a specified IP
address.
Changing port adapters—Inserts and removes adapters in a port adapter slot.
Status functions—Views state of interfaces, state of Layer 2 protocols, and version of Cisco IOS
currently running.
Network functions—Connects to other network devices (using outgoing TELNET or PPP) and
initiates diagnostic network services (that is, ping, mtrace).
Terminal functions—Adjusts the terminal session (for example, locks the terminal, adjusts flow
control).
Directory Services—Displays the directory of files kept in flash memory.
Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note
Roles and Services
11