Cisco ASR 1002 User Manual

Page 21 of 72
1. Logging of command execution must be enabled:
TOE-common-criteria(config)#archive
TOE-common-criteria(config)#no logging console
TOE-common-criteria(config-archive)#log config
TOE-common-criteria(config-archive-log-cfg)#logging enable
TOE-common-criteria(config-archive-log-cfg)#hidekeys
TOE-common-criteria(config-archive-log-cfg)# logging size <1000> ! Increases queue
size for messages to be sent to syslogd
TOE-common-criteria(config-archive-log-cfg)#notify syslog
TOE-common-criteria(config-archive-log-cfg)#exit
TOE-common-criteria(config-archive)#exit
2. Add year to the timestamp:
TOE-common-criteria(config)# service timestamps log datetime year
TOE-common-criteria(config)# service timestamps debug datetime year
3. Enable any required debugging. Debugging is needed for radius (if used), isakmp (if
using ikev1), ipsec, ikev2 (if using ikev2), and ntp to generate the events required in the
Security Target, however administrators should use discretion when enabling a large
number of debugs on an on-going basis:
TOE-common-criteria# debug radius authentication
TOE-common-criteria# debug crypto isakmp
TOE-common-criteria# debug crypto ipsec
TOE-common-criteria# debug crypto ikev2
TOE-common-criteria# debug ntp all
TOE-common-criteria# debug crypto pki server
4. Set the size and severity of the local logging buffer. The local logging buffer size can be
configured from a range of 4096 (default) to 2,148,483,647 bytes. It is noted to not make
the buffer size too large because the TOE could run out of memory for other tasks. It is
recommended to set it to at least 150000000:
TOE-common-criteria(config)# logging buffer 150000000
TOE-common-criteria(config)# logging buffer debug
5. To generate logging messages for failed and successful login attempts in the evaluated
configuration, issue the login on-failure and login on-success commands:
TOE-common-criteria(config)#login on-failure log
TOE-common-criteria(config)#login on-success log
6. To configure the logs to be sent to a syslog server:
TOE-common-criteria(config)# logging host <ip address of syslog server>
Ex. TOE-common-criteria(config)# logging host 192.168.202.169
7. To specify the severity level for logging to the syslog host, use the logging trap
command. Level 7 will send all logs required in the evaluation up to the debug level logs
(as enabled in step 3 above) to the syslog server:
TOE-common-criteria(config)# logging trap 7

Cisco ASR 1002 Specifications

General

Ethernet LAN	Yes
Cabling technology	10/100/1000Base-T(X)
Networking standards	IEEE 802.3
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Ethernet interface type	Gigabit Ethernet
DHCP client	-
Supported network protocols	BGP, GRE, OSPF, DVMRP, EIGRP, IS-IS, IGMPv3, PIM-SM, PIM-SSM
Ethernet LAN (RJ-45) ports	4
Security algorithms	SSH
VPN tunnels quantity	8000
Safety	UL60950-1 CSA, C22.2 No. 60950-1-03, EN 60950-1, IEC 60950-1, AS/NZS 60950.1
Certification	FCC 47CFR15 Class A AS/NZS CISPR 22 CISPR 22 Class A EN55022 Class A ICES-003 Class A VCCI Class A CNS-13438 Class A EN61000-3-2 EN61000-3-3
Internal memory	4096 MB
AC input voltage	85 - 264 V
Power source type	AC
AC input frequency	50 - 60 Hz
Power consumption (typical)	560 W
Operating altitude	0 - 3048 m
Storage temperature (T-T)	0 - 50 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 95 %
Operating relative humidity (H-H)	5 - 90 %
Product color	Gray
Rack capacity	2U

Weight and Dimensions

Depth	461 mm
Width	437.4 mm
Height	89 mm
Weight	- g