Cisco ASR 1001 User Manual

Page 30 of 72
Note: Details for the password encryption aes command can be found in the: [10] Under
Reference Guides  Command References  Security and VPN  See manual Cisco IOS
Security Command Reference: Commands M to R.
4.3 Clock Management
Clock management is restricted to the privileged administrator.
[15] contains information on setting the local hardware clock or NTP sources. When Network
Time Protocol (NTP) is configured, the time is synchronized with a NTP server over NTPv3.
NTP runs on UDP, which in turn runs on IP. NTP Version 3 (NTPv3) is documented in RFC
1305.
4.4 Identification and Authentication
Configuration of Identification and Authentication settings is restricted to the privileged
administrator.
The ASR can be configured to use any of the following authentication methods:
 Remote authentication (RADIUS)
o Refer to “Authentication Server Protocols” elsewhere in this document for more
details.
 Local authentication (password or SSH public key authentication);
o Note: this should only be configured for local fallback if the remote authentication
server is not available.
 X.509v3 certificates
o Refer to “X.509 Certificates” in Section Error! Reference source not
found.below for more details.
4.5 Login Banners
The TOE may be configured by the privileged administrators with banners using the banner
login command. This banner is displayed before the username and password prompts. To create
a banner of text “This is a banner” use the command
banner login ^c This is a banner ^c
where c is the delimiting character. The delimiting character may be any character except ?, and
it must not be part of the banner message.
4.6 Virtual Private Networks (VPN)
4.6.1 IPsec Overview
The TOE allows all privileged administrators to configure Internet Key Exchange (IKE) and
IPSEC policies. IPsec provides the following network security services:

Cisco ASR 1001 Specifications

General

Ethernet LAN	Yes
Cabling technology	10/100/1000Base-T(X)
Networking standards	-
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Ethernet interface type	Gigabit Ethernet
USB ports quantity	1
Ethernet LAN (RJ-45) ports	4
VPN tunnels quantity	8000
Product color	Gray
Rack capacity	1U
AC input voltage	85 - 264 V
Power source type	AC
AC input frequency	50 - 60 Hz
Power consumption (typical)	250 W
Safety	UL60950-1 CSA, C22.2 No. 60950-1-03, EN 60950-1, IEC 60950-1, AS/NZS 60950.1
Certification	FCC 47CFR15 Class A AS/NZS CISPR 22 CISPR 22 Class A EN55022 Class A ICES-003 Class A VCCI Class A CNS-13438 Class A EN61000-3-2 EN61000-3-3
Internal memory	8192 MB
Operating altitude	0 - 3048 m
Storage temperature (T-T)	0 - 50 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 95 %
Operating relative humidity (H-H)	5 - 90 %

Weight and Dimensions

Depth	461.5 mm
Width	439.42 mm
Height	43.43 mm
Weight	11350 g