Cisco 2811 - Voice Security Bundle Router Instruction Manual

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Cisco 2811 and Cisco 2821
Integrated Services Routers
with
AIM-VPN/EPII-Plus
FIPS 140-2 Non Proprietary Security Policy
Level 2 Validation
Version 1.6
September 08, 2008

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
2
Table of Contents
1 INTRODUCTION.................................................................................................................. 3
1.1 P URPOSE ............................................................................................................................. 3
1.2 R EFERENCES ....................................................................................................................... 3
1.3 T ERMINOLOGY .................................................................................................................... 3
1.4 D OCUMENT O RGANIZATION ................................................................................................ 3
2 CISCO 2811 AND 2821 ROUTERS......................................................................................... 5
2.1 T HE 2811 C RYPTOGRAPHIC M ODULE P HYSICAL C HARACTERISTICS ...................................... 5
2.2 T HE 2821 C RYPTOGRAPHIC M ODULE P HYSICAL C HARACTERISTICS ...................................... 8
2.3 R OLES AND S ERVICES ........................................................................................................... 12
2.3.1. User Services................................................................................................12
2.3.2 Crypto Officer Services ..................................................................................12
2.3.3 Unauthenticated Services...............................................................................13
2.3.4 Strength of Authentication..............................................................................14
2.4 P HYSICAL S ECURITY ............................................................................................................. 14
2.5 C RYPTOGRAPHIC K EY M ANAGEMENT .................................................................................. 19
2.6 S ELF -T ESTS ....................................................................................................................... 27
2.6.1 Self-tests performed by the IOS image .......................................................27
2.6.2 Self-tests performed by NetGX Chip...........................................................27
2.6.3 Self-tests performed by AIM........................................................................28
3 SECURE OPERATION OF THE CISCO 2811 OR 2821 ROUTER ............................. 28
3.1 I NITIAL S ETUP ................................................................................................................... 28
3.2 S YSTEM I NITIALIZATION AND C ONFIGURATION ................................................................. 29
3.3 IPS EC R EQUIREMENTS AND C RYPTOGRAPHIC A LGORITHMS ............................................. 29
3.4 P ROTOCOLS ....................................................................................................................... 30
3.5 SSL V 3.1/TLS R EQUIREMENTS AND C RYPTOGRAPHIC A LGORITHMS ................................ 30
3.6 R EMOTE A CCESS ............................................................................................................... 30

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
3
1 Introduction
1.1 Purpose
This document is the non-proprietary Cryptographic Module Security Policy for the Cisco 2811
and 2821 Integrated Services Routers with AIM-VPN/EPII-Plus installed. This security policy
describes how the Cisco 2811 and 2821 Integrated Services Routers (Hardware Version: 2811 or
2821; Firmware Version: IOS 12.4 (15) T3) meet the security requirements of FIPS 140-2, and
how to operate the router enabled in a secure FIPS 140-2 mode. This policy was prepared as part
of the Level 2 FIPS 140-2 validation of the Cisco 2811 or 2821 Integrated Services router.
FIPS 140-2 (Federal Information Processing Standards Publication 140-2 — Security
Requirements for Cryptographic Modules) details the U.S. Government requirements for
cryptographic modules. More information about the FIPS 140-2 standard and validation program
is available on the NIST website at http://csrc.nist.gov/groups/STM/index.html.
1.2 References
This document deals only with operations and capabilities of the 2811 and 2821 routers with
AIM modules in the technical terms of a FIPS 140-2 cryptographic module security policy.
More information is available on the routers from the following sources:
The Cisco Systems website contains information on the full line of Cisco Systems
routers. Please refer to the following website:
http://www.cisco.com/en/US/products/hw/routers/index.html
For answers to technical or sales related questions please refer to the contacts listed on
the Cisco Systems website at www.cisco.com.
The NIST Validated Modules website
(http://csrc.nist.gov/groups/STM/cmvp/validation.html) contains contact information
for answers to technical or sales-related questions for the module.
1.3 Terminology
In this document, the Cisco 2811 or 2821 routers are referred to as the router, the module, or the
system.
1.4 Document Organization
The Security Policy document is part of the FIPS 140-2 Submission Package. In addition to this
document, the Submission Package contains:
Vendor Evidence document
Finite State Machine
Other supporting documentation as additional references
This document provides an overview of the routers and explains their secure configuration and
operation. This introduction section is followed by Section 2, which details the general features

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
4
and functionality of the router. Section 3 specifically addresses the required configuration for
the FIPS-mode of operation.
With the exception of this Non-Proprietary Security Policy, the FIPS 140-2 Validation
Submission Documentation is Cisco-proprietary and is releasable only under appropriate non-
disclosure agreements. For access to these documents, please contact Cisco Systems.

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
5
2 Cisco 2811 and 2821 Routers
Branch office networking requirements are dramatically evolving, driven by web and e-
commerce applications to enhance productivity and merging the voice and data infrastructure to
reduce costs. The Cisco 2811 and 2821 routers provide a scalable, secure, manageable remote
access server that meets FIPS 140-2 Level 2 requirements. This section describes the general
features and functionality provided by the routers. The following subsections describe the
physical characteristics of the routers.
2.1 The 2811 Cryptographic Module Physical Characteristics
Figure 1 – The 2811 router case
The 2811 Router is a multiple-chip standalone cryptographic module. The router has a
processing speed of 350MHz. Depending on configuration, installed AIM-VPN/EPII-Plus
module, or the internal NetGX chip or the IOS software is used for cryptographic operations.
The cryptographic boundary of the module is the device’s case. All of the functionality
discussed in this document is provided by components within this cryptographic boundary.
The interface for the router is located on the front and rear panels as shown in Figure 2 and
Figure 3, respectively.
Figure 2 – Front Panel Physical Interfaces

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
6
Figure 3 – Rear Panel Physical Interfaces
The Cisco 2811 router features a console port, an auxiliary port, two Universal Serial Bus (USB)
ports, four high-speed WAN interface card (HWIC) slots, two10/100 Gigabit Ethernet RJ45
ports, an Enhanced Network Module (ENM) slot, and a Compact Flash (CF) drive. The 2811
router supports one single-width network module, four single-width or two double-width
HWICs, two slots for AIM-VPN/BPII-Plus cards
1
, two internal packet voice data modules
(PVDMs), two fast Ethernet connections, and 16 ports of IP phone power output. Figure 2 shows
the front panel and Figure 3 shows the rear panel. The front panel contains 4 LEDs that output
status data about the system power, auxiliary power, system activity, and compact flash busy
status. The back panel consists of 12 LEDs: two Ethernet activity LEDs, two duplex LEDs, two
speed LEDs, two link LEDs, two PVDM LEDs, and two AIM LEDs.
The front panel contains the following:
•(1) Power inlet
•(2) Power switch
•(3) Optional RPS input
•(4) Console and auxiliary ports
•(5) USB ports
•(6) CF drive
•(7) LEDs described in table 1.
The back panel contains the following:
•(1) Ground connector
•(2) and (3) Ethernet ports and LEDs
•(4)-(7) HWIC slots
•(8) ENM slot.
The following tables provide more detailed information conveyed by the LEDs on the front and
rear panel of the router:
Name State Description
System Power Off
Blinking Green
Solid Green
Solid Orange
Power off
ROMMON mode
Operating normally
System Error Detected
1
The security policy covers the configuration in which one AIM card is used.

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
7
Auxiliary Power Off
Solid Green
Solid Orange
-48V PS and RPS not present
-48V PS or RPS present and functional
-48V PS or RPS present and failure detected
Activity Off
Blinking Green
Solid Green
No interrupts or packet transfer occurring
System is servicing interrupts
System is actively transferring packets
Compact Flash Off
Solid Green No ongoing accesses, eject permitted Device is busy, do not eject
Table 1 – 2811 Front Panel Indicators
Name State Description
PVDM1 Off
Solid Green
Solid Orange
PVDM1 not installed
PVDM1 installed and initialized
PVDM1 installed and initialized error
PVDM0 Off
Solid Green
Solid Orange
PVDM0 not installed
PVDM0 installed and initialized
PVDM0 installed and initialized error
AIM1 Off
Solid Green
Solid Orange
AIM1 not installed
AIM1 installed and initialized
AIM1 installed and initialized error
AIM0 Off
Solid Green
Solid Orange
AIM0 not installed
AIM0 installed and initialized
AIM0 installed and initialized error
Table 2 – 2811 Rear Panel Indicators
The following table describes the meaning of Ethernet LEDs on the rear panel:
Name State Description
Activity Off
Solid/Blinking Green Not receiving packets Receiving packets
Duplex Off
Solid Green Half-Duplex Full-Duplex
Speed One Blink Green
Two Blink Green 10 Mbps 100 Mbps
Link Off
Solid Green No link established Ethernet link is established
Table 3 – 2811 Ethernet Indicators
The physical interfaces are separated into the logical interfaces from FIPS 140-2 as described in
the following table:
Router Physical Interface FIPS 140-2 Logical Interface
10/100 Ethernet LAN Ports
HWIC Ports
Console Port
Auxiliary Port
ENM Slot
USB Ports
Data Input Interface

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
8
Router Physical Interface FIPS 140-2 Logical Interface
10/100 Ethernet LAN Ports
HWIC Ports
Console Port
Auxiliary Port
ENM Slot
USB Ports
Data Output Interface
10/100 Ethernet LAN Ports
HWIC Ports
Power Switch
Console Port
Auxiliary Port
ENM Slot
Control Input Interface
10/100 Ethernet LAN Port LEDs
AIM LEDs
PVDM LEDs
Power LED
Activity LEDs
Auxiliary LED
Compact Flash LED
Console Port
Auxiliary Port
USB Ports
Status Output Interface
Main Power Plug
Redundant Power Supply Plug Power Interface
Table 4 – 2811 FIPS 140-2 Logical Interfaces
The CF card that stored the IOS image is considered an internal memory module, because the
IOS image stored in the card may not be modified or upgraded. The card itself must never be
removed from the drive. Tamper evident seal will be placed over the card in the drive.
2.2 The 2821 Cryptographic Module Physical Characteristics
Figure 4 – The 2821 router case
The 2821 router a multiple-chip standalone cryptographic module. The router has a processing
speed of 350MHz. Depending on configuration, either installed AIM-VPN/EPII-Plus card or the
internal NetGX chip or the IOS software is used for cryptographic operations.

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
9
The cryptographic boundary of the module is the device’s case. All of the functionality
discussed in this document is provided by components within this cryptographic boundary.
The interfaces for the router are located on the front and rear panels as shown in Figure 5 and
Figure 6, respectively.
Figure 5 – 2821 Front Panel Physical Interfaces
Figure 6 – 2821 Rear Panel Physical Interfaces
The Cisco 2821 router features a console port, an auxiliary port, two Universal Serial Bus (USB)
ports, four high-speed WAN interface card (HWIC) slots, two10/100 Gigabit Ethernet RJ45
ports, a Enhanced Network Module (ENM) slot, a Voice Network Module (VeNoM) slot, and a
Compact Flash (CF) drive. The 2821 router supports one single-width network module, four
single-width or two double-width HWICs, has two slots for AIM-VPN/BPII-Plus cards
2
, three
internal packet voice data modules (PVDMs), two fast Ethernet connections, and 16 ports of IP
phone power output. Figure 5 shows the front panel and Figure 6 shows the rear panel. The front
panel contains 4 LEDs that output status data about the system power, auxiliary power, system
activity, and compact flash busy status. The back panel consists of 13 LEDs: two Ethernet
activity LEDs, two duplex LEDs, two speed LEDs, two link LEDs, three PVDM LEDs, and two
AIM LEDs.
The front panel contains the following:
•(1) Power inlet
•(2) Power switch
•(3) Console and auxiliary ports
2
The security policy covers the configuration in which one AIM card is used.

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
10
•(4) USB ports
•(5) CF drive
•(6) LEDs described in table 1.
•(7) Optional RPS input
The back panel contains the following:
•(1) GE 0 port
•(2) GE 1 port
•(3) HWIC 0 slot
•(4) HWIC 1 slot
•(5) HWIC 2 slot
•(6) HWIC 3 slot
•(7) VeNoM slot
•(8) ENM slot
•(9) Ground connector
The following tables provide more detailed information conveyed by the LEDs on the front and
rear panel of the router:
Name State Description
System Power Off
Blinking Green
Solid Green
Solid Orange
Power off
ROMMON mode
Operating normally
System Error Detected
Auxiliary Power Off
Solid Green
Solid Orange
-48V PS and RPS not present
-48V PS or RPS present and functional
-48V PS or RPS present and failure detected
Activity Off
Blinking Green
Solid Green
No interrupts or packet transfer occurring
System is servicing interrupts
System is actively transferring packets
Compact Flash Off
Solid Green No ongoing accesses, eject permitted Device is busy, do not eject
Table 5 – 2821 Front Panel Indicators
Name State Description
PVDM2 Off
Solid Green
Solid Orange
PVDM2 not installed
PVDM2 installed and initialized
PVDM2 installed and initialized error
PVDM1 Off
Solid Green
Solid Orange
PVDM1 not installed
PVDM1 installed and initialized
PVDM1 installed and initialized error
PVDM0 Off
Solid Green
Solid Orange
PVDM0 not installed
PVDM0 installed and initialized
PVDM0 installed and initialized error
AIM1 Off
Solid Green
Solid Orange
AIM1 not installed
AIM1 installed and initialized
AIM1 installed and initialized error
AIM0 Off
Solid Green AIM0 not installed AIM0 installed and initialized

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
11
Solid Orange AIM0 installed and initialized error
Table 6 – 2821 Rear Panel Indicators
The following table describes the meaning of Ethernet LEDs on the front panel:
Name State Description
Activity Off
Solid/Blinking Green Not receiving packets Receiving packets
Duplex Off
Solid Green Half-Duplex Full-Duplex
Speed One Blink Green
Two Blink Green 10 Mbps 100 Mbps
Link Off
Solid Green No link established Ethernet link is established
Table 7 – 2821 Ethernet Indicators
The physical interfaces are separated into the logical interfaces from FIPS 140-2 as described in
the following table:
Router Physical Interface FIPS 140-2 Logical Interface
10/100 Ethernet LAN Ports
HWIC Ports
Console Port
Auxiliary Port
ENM Slot
VeNoM Slot
USB Ports
Data Input Interface
10/100 Ethernet LAN Ports
HWIC Ports
Console Port
Auxiliary Port
ENM Slot
VeNoM Slot
USB Ports
Data Output Interface
10/100 Ethernet LAN Ports
HWIC Ports
Power Switch
Console Port
Auxiliary Port
ENM Slot
Control Input Interface
10/100 Ethernet LAN Port LEDs
AIM LEDs
PVDM LEDs
Power LED
Activity LEDs
Auxiliary LED
Compact Flash LED
Console Port
Auxiliary Port
USB Ports
Status Output Interface

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
12
Router Physical Interface FIPS 140-2 Logical Interface
Main Power Plug
Redundant Power Supply Plug Power Interface
Table 8 – 2821 FIPS 140-2 Logical Interfaces
The CF card that stored the IOS image is considered an internal memory module. The reason is
the IOS image stored in the card cannot be modified or upgraded. The card itself must never be
removed from the drive. Tamper evident seal will be placed over the card in the drive.
2.3 Roles and Services
Authentication in Cisco 2811 and 2821 is role-based. There are two main roles in the router that
operators can assume: the Crypto Officer role and the User role. The administrator of the router
assumes the Crypto Officer role in order to configure and maintain the router using Crypto
Officer services, while the Users exercise only the basic User services. The module supports
RADIUS and TACACS+ for authentication. A complete description of all the management and
configuration capabilities of the router can be found in the Performing Basic System
Management manual and in the online help for the router.
2.3.1. User Services
Users enter the system by accessing the console port with a terminal program or via IPSec
protected telnet or SSH session to a LAN port. The IOS prompts the User for username and
password. If the password is correct, the User is allowed entry to the IOS executive program.
The services available to the User role consist of the following:
Status Functions View state of interfaces and protocols, version of IOS currently
running.
Network Functions Connect to other network devices through outgoing telnet, PPP, etc.
and initiate diagnostic network services (i.e., ping, mtrace).
Terminal Functions Adjust the terminal session (e.g., lock the terminal, adjust flow
control).
Directory Services Display directory of files kept in flash memory.
SSL-TLS/VPN Negotiation and encrypted data transport via SSL/TLS.
EASY VPN Negotiation and encrypted data transport via EASY VPN.
2.3.2 Crypto Officer Services
During initial configuration of the router, the Crypto Officer password (the “enable” password) is
defined. A Crypto Officer can assign permission to access the Crypto Officer role to additional
accounts, thereby creating additional Crypto Officers.
The Crypto Officer role is responsible for the configuration and maintenance of the router.
The Crypto Officer services consist of the following:

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
13
Configure the router Define network interfaces and settings, create command aliases, set
the protocols the router will support, enable interfaces and network
services, set system date and time, and load authentication
information.
Define Rules and Filters
Create packet Filters that are applied to User data streams on each
interface. Each Filter consists of a set of Rules, which define a set
of packets to permit or deny based on characteristics such as
protocol ID, addresses, ports, TCP connection establishment, or
packet direction.
View Status Functions View the router configuration, routing tables, active sessions, use
gets to view SNMP MIB statistics, health, temperature, memory
status, voltage, packet statistics, review accounting logs, and view
physical interface status.
Manage the router Log off users, shutdown or reload the router, erase the flash
memory, manually back up router configurations, view complete
configurations, manager user rights, and restore router
configurations.
Set Encryption/Bypass Set up the configuration tables for IP tunneling. Set preshared keys
and algorithms to be used for each IP range or allow plaintext
packets to be set from specified IP address.
Bypass Mode
The routers implement an alternating bypass capability, in which some connections may be
cryptographically authenticated and encrypted while others may not. Two independent internal
actions are required in order to transition into each bypass state: First, the bypass state must be
configured by the Crypto Officer using “match address <ACL-name>" sub-command under
crypto map which defines what traffic is encrypted. Second, the module must receive a packet
that is destined for an IP that is not configured to receive encrypted data. The configuration table
uses an error detection code to detect integrity failures, and if an integrity error is detected, the
module will enter an error state in which no packets are routed. Therefore, a single error in the
configuration table cannot cause plaintext to be transmitted to an IP address for which it should
be encrypted.
2.3.3 Unauthenticated Services
The services available to unauthenticated users are:
•Viewing the status output from the module’s LEDs
•Powering the module on and off using the power switch
•Sending packets in bypass

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
14
2.3.4 Strength of Authentication
The security policy stipulates that all user passwords must be 8 alphanumeric characters, so the
password space is 2.8 trillion possible passwords. The possibility of randomly guessing a
password is thus far less than one in one million. To exceed a one in 100,000 probability of a
successful random password guess in one minute, an attacker would have to be capable of 28
million password attempts per minute, which far exceeds the operational capabilities of the
module to support.
When using RSA based authentication, RSA key pair has modulus size of 1024 bit to 2048 bit,
thus providing between 80 bits and 112 bits of strength. Assuming the low end of that range, an
attacker would have a 1 in 2 80 chance of randomly obtaining the key, which is much stronger
than the one in a million chance required by FIPS 140-2. To exceed a one in 100,000 probability
of a successful random key guess in one minute, an attacker would have to be capable of
approximately 1.8x10 21 attempts per minute, which far exceeds the operational capabilities of the
modules to support.
When using preshared key based authentication, the security policy stipulates that all preshared
keys must be 8 alphanumeric characters, so the key space is 2.8 trillion possible combinations.
The possibility of randomly guessing this is thus far less than one in one million. To exceed a
one in 100,000 probability of a successful random guess in one minute, an attacker would have
to be capable of 28 million attempts per minute, which far exceeds the operational capabilities of
the module to support.
2.4 Physical Security
The router is entirely encased by a metal, opaque case. The rear of the unit contains
HWIC/WIC/VIC connectors, LAN connectors, a CF drive, power connector, console connector,
auxiliary connector, USB port, and fast Ethernet connectors. The front of the unit contains the
system status and activity LEDs. The top, side, and front portion of the chassis can be removed
to allow access to the motherboard, memory, AIM slot, and expansion slots.
The Cisco 2811 and 2821 routers require that a special opacity shield be installed over the side
air vents in order to operate in FIPS-approved mode. The shield decreases the surface area of the
vent holes, reducing visibility within the cryptographic boundary to FIPS-approved
specifications.
Install the opacity plates as specified in the pictures below:

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
15
Figure 7- 2811 – Opacity Shields
Figure 8 - 2821 opacity shield placement
Once the router has been configured in to meet FIPS 140-2 Level 2 requirements, the router
cannot be accessed without signs of tampering. To seal the system, apply serialized tamper-
evidence labels as follows:
For Cisco 2811:

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
16
1. Clean the cover of any grease, dirt, or oil before applying the tamper evidence
labels. Alcohol-based cleaning pads are recommended for this purpose. The
temperature of the router should be above 10°C.
2. The tamper evidence label should be placed so that one half of the label covers
the front panel and the other half covers the enclosure.
3. The tamper evidence label should be placed over the CF card in the slot so that
any attempt to remove the card will show sign of tampering.
4. The tamper evidence label should be placed so that the one half of the label
covers the enclosure and the other half covers the port adapter slot.
5. The tamper evidence label should be placed so that the one half of the label
covers the enclosure and the other half covers the rear panel.
6. Place tamper evident labels on the opacity shield as shown in Figure 11.
7. The labels completely cure within five minutes.
Figures 9, 10 and 11 show the additional tamper evidence label placements for the 2811.
Figure 9 – 2811 Tamper Evident Label Placement (Back View)
Figure 10 – 2811 Tamper Evident Label Placement (Front View)

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
17
Figure 11 – 2811 Tamper Evident Label Placement on the Opacity Shield
For Cisco 2821:
1. Clean the cover of any grease, dirt, or oil before applying the tamper evidence
labels. Alcohol-based cleaning pads are recommended for this purpose. The
temperature of the router should be above 10°C.
2. The tamper evidence label should be placed so that one half of the label covers
the front panel and the other half covers the enclosure.
3. The tamper evidence label should be placed over the CF card in the slot so that
any attempt to remove the card will show sign of tampering.
4. The tamper evidence label should be placed so that the one half of the label
covers the enclosure and the other half covers the port adapter slot.
5. The tamper evidence label should be placed so that the one half of the label
covers the enclosure and the other half covers the rear panel.
6. Place tamper evident labels on the opacity shield as shown in Figure 14.
7. The labels completely cure within five minutes.
Figures 12, 13 and 14 show the additional tamper evidence label placements for the 2821.

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
18
Figure 12 – Cisco 2821 Tamper Evident Label Placement (Back View)
Figure 13 – Cisco 2821 Tamper Evident Label Placement (Front View)
Figure 14 – Cisco 2821 Tamper Evident Label Placement on the Opacity Shield

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
19
The tamper evidence seals are produced from a special thin gauge vinyl with self-adhesive
backing. Any attempt to open the router will damage the tamper evidence seals or the material of
the module cover. Since the tamper evidence seals have non-repeated serial numbers, they can be
inspected for damage and compared against the applied serial numbers to verify that the module
has not been tampered. Tamper evidence seals can also be inspected for signs of tampering,
which include the following: curled corners, bubbling, crinkling, rips, tears, and slices. The word
“OPEN” may appear if the label was peeled back.
2.5 Cryptographic Key Management
The router securely administers both cryptographic keys and other critical security parameters
such as passwords. The tamper evidence seals provide physical protection for all keys. All keys
are also protected by the password-protection on the Crypto Officer role login, and can be
zeroized by the Crypto Officer. All zeroization consists of overwriting the memory that stored
the key. Keys are exchanged and entered electronically or via Internet Key Exchange (IKE) or
SSL handshake protocols.
The routers support the following FIPS-2 approved algorithm implementations:
Algorithm Algorithm Certificate Number
Software (IOS) Implementations
AES 795
Triple-DES 683
SHA-1, SHA-256, SHA-512 794
HMAC-SHA-1 436
X9.31 PRNG 456
RSA 379
Onboard NetGX Implementations
AES 265
Triple-DES 347
SHA-1 344
HMAC-SHA-1 77
AIM Module Implementations
AES 100
Triple-DES 213
SHA-1 401
HMAC-SHA-1 38
X9.31 PRNG 80
RSA 383
The router is in the approved mode of operation only when FIPS 140-2 approved algorithms are
used (except DH and RSA key transport which are allowed in the approved mode for key
establishment despite being non-approved).
Note: The module supports DH key sizes of 1024 and 1536 bits and RSA key sizes of 1024,
1536 and 2048 bits. Therefore, the Diffie Hellmann Key agreement, key establishment
methodology provides between 80-bits and 96-bits of encryption strength per NIST 800-57. RSA

© Copyright 2007 Cisco Systems, Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
20
Key wrapping, key establishment methodology provides between 80-bits and 112-bits of
encryption strength per NIST 800-57.
The following are not FIPS 140-2 approved Algorithms: DES, RC4, MD5, HMAC-MD5, RSA
key wrapping and DH; however again DH and RSA are allowed for use in key establishment.
The module contains a HiFn 7814-W cryptographic accelerator chip, integrated in the AIM card.
Unless the AIM card is disabled by the Crypto Officer with the “no crypto engine aim”
command, the HiFn 7814-W provides AES (128-bit, 192-bit, and 256-bit) and Triple-DES (168-
bit) encryption; MD5 and SHA-1 hashing; and hardware support for DH, X9.31 RNG, RSA
encryption/decryption, and RSA public key signature/verification.
The module supports the following types of key management schemes:
1. Pre-shared key exchange via electronic key entry. Triple-DES/AES key and HMAC-
SHA-1 key are exchanged and entered electronically.
2. Internet Key Exchange method with support for pre-shared keys exchanged and entered
electronically.
•The pre-shared keys are used with Diffie-Hellman key agreement technique to
derive Triple-DES or AES keys.
•The pre-shared key is also used to derive HMAC-SHA-1 key.
3. RSA digital signatures based authentication is used for IKE, with Diffie-Hellman Key
agreement technique to derive AES or Triple-DES keys.
4. RSA encrypted nonces based authentication is used for IKE, with Diffie-Hellman Key
agreement technique to derive AES or Triple-DES keys.
5. RSA key transport is used to derive the Triple-DES or AES keys during SSLv3.1/TLS
handshake.
The module supports commercially available Diffie-Hellman and RSA key transport for key
establishment.
All pre-shared keys are associated with the CO role that created the keys, and the CO role is
protected by a password. Therefore, the CO password is associated with all the pre-shared keys.
The Crypto Officer needs to be authenticated to store keys. All Diffie-Hellman (DH) keys agreed
upon for individual tunnels are directly associated with that specific tunnel only via the IKE
protocol. RSA Public keys are entered into the modules using digital certificates which contain
relevant data such as the name of the public key's owner, which associates the key with the
correct entity. All other keys are associated with the user/role that entered them.
Key Zeroization:
Each key can be zeroized by sending the “no” command prior to the key function commands.
This will zeroize each key from the DRAM, the running configuration.
“Clear Crypto IPSec SA” will zeroize the Triple-DES/AES session key (which is derived using
the Diffie-Hellman key agreement technique) from the DRAM. This session key is only