Cisco ISR 4000 series User Manual

Cisco ISR 4000 Family Routers Administrator Guidance
Page 23 of 66
TOE-common-criteria(config-if)#crypto map sample
TOE-common-criteria(config-if)#exit
TOE-common-criteria(config)#ip route 12.1.1.0 255.255.255.0 11.1.1.4
TOE-common-criteria(config)#access-list 115 permit ip 10.1.1.0 0.0.0.255 12.1.1.0
0.0.0.255 log
TOE-common-criteria(config)#logging host 12.1.1.1
Recovery from an event where the connection is unintentionally broken is to follow the steps to
establish a connection as listed above.
3.3.6 Base Firewall Rule set Configuration
The Network Device PP VPN Gateway Extended Package (VPNGW EP) contains requirements
for the TOE basic packet filtering. Packet filtering is able to be done on many protocols by the
TOE, including but not limited to (although the evaluation only covers IPv4, IPv6, TCP and UDP):
 IPv4 (RFC 791)
 IPv6 (RFC 2460)
 TCP (RFC 793)
 UDP (RFC 768)
 IKEv1 (RFCs 2407, 2408, 2409, RFC 4109)
 IKEv2 (RFC 5996)
 IPsec ESP (RFCs 4301, 4303)
 SSH (RFCs 4251, 4252, 4253, and 4254)
The following attributes, at a minimum, are configurable within Packet filtering rules for the
associated protocols:
 IPv4
o Source address
o Destination Address
o Protocol
 IPv6
o Source address
o Destination Address
o Next Header (Protocol)
 TCP
o Source Port
o Destination Port
 UDP

Cisco ISR 4000 series Specifications

General

Brand	Cisco
Model	ISR 4000 series
Category	Network Router
Language	English