Cisco 1841 User Manual

22
Cisco 1841 Integrated Services Router with AIM-VPN/BPII-Plus and Cisco 2801 Integrated Services Router with AIM-VPN/EPII-Plus
OL-8719-01
Related Documentation
IPSec Requirements and Cryptographic Algorithms
• The only type of key management protocol that is allowed in FIPS mode is Internet Key Exchange
(IKE), although manual creation of security associations is also permitted.
• Although the IOS implementation of IKE allows a number of algorithms, only the following
algorithms are allowed in a FIPS 140-2 configuration:
– ah-sha-hmac
– esp-des
– esp-sha-hmac
– esp-3des
– esp-aes
• The following algorithms are not FIPS approved and should not be used during FIPS-approved
mode:
– MD-5 for signing
– MD-5 HMAC
– RSA
Protocols
SNMP v3 over a secure IPSec tunnel may be employed for authenticated, secure SNMP gets and sets.
Since SNMP v2C uses community strings for authentication, only gets are allowed under SNMP v2C.
SSL is not an approved protocol, and shall not be used in FIPS mode of operations
Remote Access
• Telnet access to the module is only allowed via a secure IPSec tunnel between the remote system
and the module. The Crypto officer must configure the module so that any remote connections via
telnet are secured through IPSec, using FIPS-approved algorithms. Note that all users must still
authenticate after remote access is granted.
• SSH access to the module is only allowed if SSH is configured to use a FIPS-approved algorithm.
The Crypto officer must configure the module so that SSH uses only FIPS-approved algorithms.
Note that all users must still authenticate after remote access is granted.
Related Documentation
For more information about the Cisco 1841 and Cisco 2801 Integrated Services Routers, refer to the
following documents:
• Cisco 1800 Series Integrated Services Routers Quick Start Guides
• Cisco 1800 Series Hardware Installation documents
• Cisco 1800 Series Software Configuration documents
• Cisco 1800 Series Cards and Modules

Cisco 1841 Specifications

General

Flash memory	32 MB
Internal memory	128 MB
Product color	Black, Blue, Stainless steel
Rack capacity	1U
LED indicators	Yes
Storage temperature (T-T)	-25 - 65 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 95 %
Operating relative humidity (H-H)	10 - 85 %
Cabling technology	10/100Base-T(X)
Networking standards	-
Ethernet LAN data rates	10, 100 Mbit/s
Ethernet interface type	Fast Ethernet
USB ports quantity	1
Ethernet LAN (RJ-45) ports	2
Firewall security	Cisco IOS
Security algorithms	128-bit AES, 192-bit AES, 256-bit AES, 3DES, DES
Dual-band	No

Weight and Dimensions

Depth	274 mm
Width	343 mm
Height	47.5 mm
Weight	2800 g