Cisco ASR 1002 User Manual

Page 70 of 72
8 Security Measures for the Operational Environment
Proper operation of the TOE requires functionality from the environment. It is the
responsibility of the authorized administrator of the TOE to ensure that the Operational
Environment provides the necessary functions, and adheres to the environment security
objectives listed below. The environment security objective identifiers map to the
environment security objectives as defined in the Security Target.
Table 10: Operational Environment Security Measures
Environment
Security Objective
Operational Environment
Security Objective
Definition
Privileged and Semi-
privileged
administrator
responsibility
OE.NO_GENERAL_PURPO
SE
There are no general-purpose
computing capabilities (e.g.,
compilers or user applications)
available on the TOE, other than
those services necessary for the
operation, administration and
support of the TOE.
Administrators will make sure
there are no general-purpose
computing capabilities (e.g.,
compilers or user applications)
available on the TOE.
OE.PHYSICAL
Physical security, commensurate
with the value of the TOE and the
data it contains, is provided by the
environment.
Administrators must ensure the
TOE is installed and maintained
within a secure physical
location. This can include a
secured building with key card
access or within the physical
control of an authorized
administrator in a mobile
environment.
OE.TRUSTED_ADMIN
TOE Administrators are trusted to
follow and apply all administrator
guidance in a trusted manner.
Administrators must be properly
trained in the usage and proper
operation of the TOE and all the
provided functionality per the
implementing organization’s
operational security policies.
These administrators must
follow the provided guidance.
OE.CONNECTIONS
TOE administrators will ensure that
the TOE is installed in a manner that
will allow the TOE to effectively
enforce its policies on network
traffic flowing among attached
networks.
Administrators must ensure that
the TOE can enforce its security
policies on the network traffic
and not allowed to be ineffective
due to faulty installation.

Cisco ASR 1002 Specifications

General

Ethernet LAN	Yes
Cabling technology	10/100/1000Base-T(X)
Networking standards	IEEE 802.3
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Ethernet interface type	Gigabit Ethernet
DHCP client	-
Supported network protocols	BGP, GRE, OSPF, DVMRP, EIGRP, IS-IS, IGMPv3, PIM-SM, PIM-SSM
Ethernet LAN (RJ-45) ports	4
Security algorithms	SSH
VPN tunnels quantity	8000
Safety	UL60950-1 CSA, C22.2 No. 60950-1-03, EN 60950-1, IEC 60950-1, AS/NZS 60950.1
Certification	FCC 47CFR15 Class A AS/NZS CISPR 22 CISPR 22 Class A EN55022 Class A ICES-003 Class A VCCI Class A CNS-13438 Class A EN61000-3-2 EN61000-3-3
Internal memory	4096 MB
AC input voltage	85 - 264 V
Power source type	AC
AC input frequency	50 - 60 Hz
Power consumption (typical)	560 W
Operating altitude	0 - 3048 m
Storage temperature (T-T)	0 - 50 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 95 %
Operating relative humidity (H-H)	5 - 90 %
Product color	Gray
Rack capacity	2U

Weight and Dimensions

Depth	461 mm
Width	437.4 mm
Height	89 mm
Weight	- g