Cisco ASR 1002 User Manual

Page 54 of 72
Requirement
Auditable
Events
Additional Audit
Record Contents
Sample Record
command:copy tftp ….
*Jul 10 11:04:09.179: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command:reload
FPT_TST_EXT.
1
Indication that
TSF self-test was
completed.
Any additional
information
generated by the
tests beyond
“success” or
“failure”.
Jan 23 2013 06:53:24.570: %CRYPTO-6-
SELF_TEST_RESULT: Self test info: (Self test
activated by user: admin)
Jan 23 2013 06:53:24.670: %CRYPTO-6-
SELF_TEST_RESULT: Self test info: (Software
checksum ... passed)
FPT_TST_EXT.
2
Failure of self-
test
Reason for failure
(including
identifier of invalid
certificate)
Cause: c3m_set_fips_mode, Fatal Fault, FIPS POST
Failure requested by: Process ID: 147461 (syslogd)
app_name: ssl Process: syslogd
FTA_SSL_EXT.
1
Any attempts at
unlocking of an
[local]
interactive
session.
No additional
information.
In the TOE this is represented by login attempts that
occur after the timeout of a local administrative user.
001383: May 10 18:06:34.091: %SYS-6-
EXEC_EXPIRE_TIMER: (tty 0 (0.0.0.0)) exec-
timeout timer expired for user securityperson
001384: May 10 18:06:34.091: %SYS-6-
EXIT_CONFIG: User securityperson has exited tty
session 0(0.0.0.0)
FTA_SSL.3
The termination
of a remote
session by the
session locking
mechanism.
No additional
information.
Audit record generated when SSH session is
terminated because of idle timeout:
May 29 2012 15:18:00 UTC: %SYS-6-
TTY_EXPIRE_TIMER: (exec timer expired, tty 0
(0.0.0.0)), user admin
FTA_SSL.4
The termination
of an interactive
session.
No additional
information.
 Audit record generate when admin logs out of
CONSOLE.
May 17 2011 16:29:09: %PARSER-5-
CFGLOG_LOGGEDCMD: User:test_admin logged
command:exit
 Audit record generated when the admin logs out
of SSH:
Jun 18 11:17:36.653: SSH0: Session terminated
normally
FTP_ITC.1
Initiation of the
trusted channel.
Termination of
the trusted
channel.
Identification of
the initiator and
target of failed
trusted channels
establishment
attempt.
AUDIT: See logs provided by FCS_IPSEC_EXT.1.

Cisco ASR 1002 Specifications

General

Ethernet LAN	Yes
Cabling technology	10/100/1000Base-T(X)
Networking standards	IEEE 802.3
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Ethernet interface type	Gigabit Ethernet
DHCP client	-
Supported network protocols	BGP, GRE, OSPF, DVMRP, EIGRP, IS-IS, IGMPv3, PIM-SM, PIM-SSM
Ethernet LAN (RJ-45) ports	4
Security algorithms	SSH
VPN tunnels quantity	8000
Safety	UL60950-1 CSA, C22.2 No. 60950-1-03, EN 60950-1, IEC 60950-1, AS/NZS 60950.1
Certification	FCC 47CFR15 Class A AS/NZS CISPR 22 CISPR 22 Class A EN55022 Class A ICES-003 Class A VCCI Class A CNS-13438 Class A EN61000-3-2 EN61000-3-3
Internal memory	4096 MB
AC input voltage	85 - 264 V
Power source type	AC
AC input frequency	50 - 60 Hz
Power consumption (typical)	560 W
Operating altitude	0 - 3048 m
Storage temperature (T-T)	0 - 50 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 95 %
Operating relative humidity (H-H)	5 - 90 %
Product color	Gray
Rack capacity	2U

Weight and Dimensions

Depth	461 mm
Width	437.4 mm
Height	89 mm
Weight	- g