Router Guide
Page 4
... draft 2.0 standard • Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS® Software Cisco 880 Series Small Offices and Teleworker Deployments • High performance for broadband access in small offices and small branch-office and teleworker sites • Collaborative services with secure analog, digital voice, and data communication •...
... draft 2.0 standard • Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS® Software Cisco 880 Series Small Offices and Teleworker Deployments • High performance for broadband access in small offices and small branch-office and teleworker sites • Collaborative services with secure analog, digital voice, and data communication •...
Router Guide
Page 11
... tool simplifies setup and deployment, and centralized management capabilities give network managers visibility and control of -band management with centralized configuration management. 19 Support for mobility; Notes 18 Cisco 860 Series The Cisco® 860 Series Integrated Services Routers combine Internet access, security, and wireless services onto a single, secure device that provide business solutions for secure voice and...
... tool simplifies setup and deployment, and centralized management capabilities give network managers visibility and control of -band management with centralized configuration management. 19 Support for mobility; Notes 18 Cisco 860 Series The Cisco® 860 Series Integrated Services Routers combine Internet access, security, and wireless services onto a single, secure device that provide business solutions for secure voice and...
Router Guide
Page 12
... TSPEC Call Admission Control to ensure voice quality is maintained • Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency WLAN Security Features • 802.11i • WiFi Protected Access (WPA) & AES (WPA2) • EAP Authentication: Cisco LEAP, PEAP, EAP-TLS, EAP-...fixed captive omnidirectional 2dBi gain omni dipole antennas • Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS Software Series Distinctions Cisco 860 Series WAN Technologies LAN Switch Security WLAN Option • Cisco 861 - 100 MB Ethernet •...
... TSPEC Call Admission Control to ensure voice quality is maintained • Unscheduled Automatic Power Save Delivery (UPSD) to reduce latency WLAN Security Features • 802.11i • WiFi Protected Access (WPA) & AES (WPA2) • EAP Authentication: Cisco LEAP, PEAP, EAP-TLS, EAP-...fixed captive omnidirectional 2dBi gain omni dipole antennas • Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS Software Series Distinctions Cisco 860 Series WAN Technologies LAN Switch Security WLAN Option • Cisco 861 - 100 MB Ethernet •...
Router Guide
Page 14
optional 802.11g/n for optimizing voice and video applications. In addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment. Advanced Security • An integrated stateful and application inspection firewall provides network perimeter security. • High-speed ... DSL technologies to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services. Optional 8021. 1g/n Access Point • This broadband router offers a secure integrated access point in a single device. • This ...
optional 802.11g/n for optimizing voice and video applications. In addition, the web-based Cisco Configuration Professional configuration tool simplifies setup and deployment. Advanced Security • An integrated stateful and application inspection firewall provides network perimeter security. • High-speed ... DSL technologies to take advantage of broadband network speeds while running secure, concurrent data, voice, video, and wireless services. Optional 8021. 1g/n Access Point • This broadband router offers a secure integrated access point in a single device. • This ...
Router Guide
Page 20
...-based Cisco Configuration Professional configuration management tool, which simplifies setup and deployment. Benefits and Advantages Increased Performance for Concurrent Services Router performance allows...secure voice and data communications to enterprise small branch offices. Optional Dual-radio/Dual-band IEEE 8021. 1n Access Point • The Cisco 890 Series offers a secure...fixed-configuration routers that provides increased throughput, reliability, and predictability. Notes 36 Cisco 890 Series Cisco 890 Series Integrated Services Routers are designed to deliver secure broadband, Metro...
...-based Cisco Configuration Professional configuration management tool, which simplifies setup and deployment. Benefits and Advantages Increased Performance for Concurrent Services Router performance allows...secure voice and data communications to enterprise small branch offices. Optional Dual-radio/Dual-band IEEE 8021. 1n Access Point • The Cisco 890 Series offers a secure...fixed-configuration routers that provides increased throughput, reliability, and predictability. Notes 36 Cisco 890 Series Cisco 890 Series Integrated Services Routers are designed to deliver secure broadband, Metro...
Security Policy
Page 2
... ...27 2.6.1 Self-tests performed by the IOS image 27 2.6.2 Self-tests performed by NetGX Chip 27 2.6.3 Self-tests performed by AIM 28 3 SECURE OPERATION OF THE CISCO 2811 OR 2821 ROUTER 28 3.1 INITIAL SETUP ...28 3.2 SYSTEM INITIALIZATION AND CONFIGURATION 29 3.3 IPSEC REQUIREMENTS AND CRYPTOGRAPHIC ALGORITHMS 29 3.4 PROTOCOLS ...30 3.5 SSLV3.1/TLS REQUIREMENTS AND CRYPTOGRAPHIC ALGORITHMS 30...
... ...27 2.6.1 Self-tests performed by the IOS image 27 2.6.2 Self-tests performed by NetGX Chip 27 2.6.3 Self-tests performed by AIM 28 3 SECURE OPERATION OF THE CISCO 2811 OR 2821 ROUTER 28 3.1 INITIAL SETUP ...28 3.2 SYSTEM INITIALIZATION AND CONFIGURATION 29 3.3 IPSEC REQUIREMENTS AND CRYPTOGRAPHIC ALGORITHMS 29 3.4 PROTOCOLS ...30 3.5 SSLV3.1/TLS REQUIREMENTS AND CRYPTOGRAPHIC ALGORITHMS 30...
Security Policy
Page 28
... Test SHA-1 Known Answer Test HMAC-SHA-1 Known Answer Test 2.6.3 • Self-tests performed by Crypto Officer. © Copyright 2007 Cisco Systems, Inc. 28 This document may be possible. 3 Unless disabled by AIM3 AIM Self Tests o POST tests AES Known Answer Test ...consistency test for RSA signature keys Continuous RNG test for the hardware RNG 3 Secure Operation of the Cisco 2811 or 2821 router The Cisco 2811 and 2821 routers meet all the Level 2 requirements for FIPS 140-2. Operating this router without the password will remove the module from the FIPS approved mode of operation...
... Test SHA-1 Known Answer Test HMAC-SHA-1 Known Answer Test 2.6.3 • Self-tests performed by Crypto Officer. © Copyright 2007 Cisco Systems, Inc. 28 This document may be possible. 3 Unless disabled by AIM3 AIM Self Tests o POST tests AES Known Answer Test ...consistency test for RSA signature keys Continuous RNG test for the hardware RNG 3 Secure Operation of the Cisco 2811 or 2821 router The Cisco 2811 and 2821 routers meet all the Level 2 requirements for FIPS 140-2. Operating this router without the password will remove the module from the FIPS approved mode of operation...
Quick Start Guide
Page 29
... see the Troubleshooting and Maintenance module in the "Checklist for the messages to get started. For information on your router by default, we recommend using Cisco Router and Security Device Manager (SDM): yourname con0 is now available Press RETURN to stop and the SYS PWR LED is solid ... any keys on page 35. Note Because SDM is installed on using the setup command facility or the command-line interface (CLI): --- System Configuration Dialog --- Power-Up Procedure To power up your Cisco 2800 series router and verify that your PC is powered up . When the procedure is finished...
... see the Troubleshooting and Maintenance module in the "Checklist for the messages to get started. For information on your router by default, we recommend using Cisco Router and Security Device Manager (SDM): yourname con0 is now available Press RETURN to stop and the SYS PWR LED is solid ... any keys on page 35. Note Because SDM is installed on using the setup command facility or the command-line interface (CLI): --- System Configuration Dialog --- Power-Up Procedure To power up your Cisco 2800 series router and verify that your PC is powered up . When the procedure is finished...
Quick Start Guide
Page 32
...Cisco 2800 series routers. 6. For example, line 0/3/0 specifies the line associated with your router by the CLI syntax for voice ports in slot 3. For instructions on configuring your router...EVMs. Note On the Cisco 2811, Cisco 2821, and Cisco 2851 routers, the interface numbering scheme ...Cisco Router and Security Device Manager (SDM) If the following tools: • Cisco Router and Security Device Manager (SDM)-See the "Initial Configuration Using Cisco Router and Security Device Manager (SDM)" section on page 32. • Setup command facility-See the "Initial Configuration Using the Setup...
...Cisco 2800 series routers. 6. For example, line 0/3/0 specifies the line associated with your router by the CLI syntax for voice ports in slot 3. For instructions on configuring your router...EVMs. Note On the Cisco 2811, Cisco 2821, and Cisco 2851 routers, the interface numbering scheme ...Cisco Router and Security Device Manager (SDM) If the following tools: • Cisco Router and Security Device Manager (SDM)-See the "Initial Configuration Using Cisco Router and Security Device Manager (SDM)" section on page 32. • Setup command facility-See the "Initial Configuration Using the Setup...
Quick Start Guide
Page 33
... used to protect access to privileged EXEC and configuration modes. Enter enable password: xxxxxx 33 Initial Configuration Using the Setup Command Facility This section shows how to use the CLI or Cisco Router and Security Device Manager (SDM) to perform additional configuration. Note If you like to enter the initial configuration dialog? [yes/no...
... used to protect access to privileged EXEC and configuration modes. Enter enable password: xxxxxx 33 Initial Configuration Using the Setup Command Facility This section shows how to use the CLI or Cisco Router and Security Device Manager (SDM) to perform additional configuration. Note If you like to enter the initial configuration dialog? [yes/no...
Quick Start Guide
Page 35
... any point you to terminate autoinstall and continue with interface and port numbering, see the "Initial Configuration Using Cisco Router and Security Device Manager (SDM)" section on page 30. Step 1 To proceed with manual configuration using the CLI, enter no ip ...Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to modify this configuration. for verification procedures. Compiled by cisco Systems, Inc. interface FastEthernet0/1 shutdown no when the power-up messages end: Would you...
... any point you to terminate autoinstall and continue with interface and port numbering, see the "Initial Configuration Using Cisco Router and Security Device Manager (SDM)" section on page 30. Step 1 To proceed with manual configuration using the CLI, enter no ip ...Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to modify this configuration. for verification procedures. Compiled by cisco Systems, Inc. interface FastEthernet0/1 shutdown no when the power-up messages end: Would you...
Hardware Guide
Page 91
... power, activity, and status information useful during powerup. At any prompt. Note If the rommon 1> prompt appears, your router, we recommend using Cisco Router and Security Device Manager (SDM). The built-in LED indicators in the front and rear panels are in Table 6 on your system... the initial configuration dialog? [yes/no]: To learn how to use the setup command facility to configure the router, see the "Initial Configuration Using the Setup Command Facility" section on your router. Verifying the Front Panel LED Indications The front-panel indicator LEDs described in ...
... power, activity, and status information useful during powerup. At any prompt. Note If the rommon 1> prompt appears, your router, we recommend using Cisco Router and Security Device Manager (SDM). The built-in LED indicators in the front and rear panels are in Table 6 on your system... the initial configuration dialog? [yes/no]: To learn how to use the setup command facility to configure the router, see the "Initial Configuration Using the Setup Command Facility" section on your router. Verifying the Front Panel LED Indications The front-panel indicator LEDs described in ...
Hardware Guide
Page 92
... Hardware Configuration To display and verify the hardware features, enter the following tools: • Cisco Router and Security Device Manager-See the "Initial Configuration Using Cisco Router and Security Device Manager" section on page 5. • Setup command facility-See the "Initial Configuration Using the Setup Command Facility" section on page 5. • Command-line interface (CLI)-See the "Initial...
... Hardware Configuration To display and verify the hardware features, enter the following tools: • Cisco Router and Security Device Manager-See the "Initial Configuration Using Cisco Router and Security Device Manager" section on page 5. • Setup command facility-See the "Initial Configuration Using the Setup Command Facility" section on page 5. • Command-line interface (CLI)-See the "Initial...
Hardware Guide
Page 93
... any point you can download the latest version of Cisco 2800 Series Routers" online document. Initial Configuration Using Cisco Router and Security Device Manager The following example and the user entries (in bold) are in the setup command facility vary, depending on configuring your router by using the setup command facility, you can use SDM, you may enter...
... any point you can download the latest version of Cisco 2800 Series Routers" online document. Initial Configuration Using Cisco Router and Security Device Manager The following example and the user entries (in bold) are in the setup command facility vary, depending on configuring your router by using the setup command facility, you can use SDM, you may enter...
Hardware Guide
Page 94
...modes Status T1 0/0/0 24 23 pri/channelized Administratively up Power Up and Initial Configuration Procedures for Cisco 2800 Series Routers 6 OL-5788-01 This password is not encrypted (less secure) and can be seen when viewing the configuration: The enable secret is used when you do...Enter enable secret: xxxxxx Enter an enable password that appears is dependent on the type of Cisco modular router platform and on the system Would you like to enter basic management setup: At any prompt. Enter virtual terminal password: xxxxxx Respond to the following messages appear, press...
...modes Status T1 0/0/0 24 23 pri/channelized Administratively up Power Up and Initial Configuration Procedures for Cisco 2800 Series Routers 6 OL-5788-01 This password is not encrypted (less secure) and can be seen when viewing the configuration: The enable secret is used when you do...Enter enable secret: xxxxxx Enter an enable password that appears is dependent on the type of Cisco modular router platform and on the system Would you like to enter basic management setup: At any prompt. Enter virtual terminal password: xxxxxx Respond to the following messages appear, press...
Hardware Guide
Page 95
...? [no]: no ip address ! The user prompt appears. Press RETURN to the following configuration command script was created: hostname Router enable secret 5 $1$D5P6$PYx41/lQIASK.HcSbfO5q1 enable password xxxxxx line vty 0 4 password xxxxxx snmp-server community public ! interface ...FastEthernet0/1 shutdown no Configure IP on page 9 for Cisco 2800 Series Routers 7 Select [2] to save the initial configuration: [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this interface: 172.1.2.3 Subnet...
...? [no]: no ip address ! The user prompt appears. Press RETURN to the following configuration command script was created: hostname Router enable secret 5 $1$D5P6$PYx41/lQIASK.HcSbfO5q1 enable password xxxxxx line vty 0 4 password xxxxxx snmp-server community public ! interface ...FastEthernet0/1 shutdown no Configure IP on page 9 for Cisco 2800 Series Routers 7 Select [2] to save the initial configuration: [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this interface: 172.1.2.3 Subnet...