Data Sheet
Page 2
... anywhere in the network-from network disruption • Features fast, one - Important Notices and Privacy Statement. CISCO CATALYST 6500 SERIES BENEFITS The Cisco Catalyst 6500 Series provides market-leading services, performance, port densities, and availability with Cisco 7xxx router Series for enterprise and service provider markets. All rights reserved. These include: • Gigabit fi...
... anywhere in the network-from network disruption • Features fast, one - Important Notices and Privacy Statement. CISCO CATALYST 6500 SERIES BENEFITS The Cisco Catalyst 6500 Series provides market-leading services, performance, port densities, and availability with Cisco 7xxx router Series for enterprise and service provider markets. All rights reserved. These include: • Gigabit fi...
Data Sheet
Page 4
...Channelized OC-48 dense OC-3 Packet over Synchronous Optical Network (SONET) (PoS) • Provides investment protection by using Cisco 7xxx Series port adapters on the Cisco Catalyst 6500 Series FlexWAN Line Card, supporting T1/E1 through OC-48 WAN interfaces • Chassis sizes range from 3-...slot (Cisco Catalyst 6503 Switch) to 13-slot (Cisco Catalyst 6513 Switch) High-Speed WAN Interfaces • Provides high-speed WAN, ATM, and SONET interfaces compatible with other core routers • Provides single-device management for WAN aggregation ...
...Channelized OC-48 dense OC-3 Packet over Synchronous Optical Network (SONET) (PoS) • Provides investment protection by using Cisco 7xxx Series port adapters on the Cisco Catalyst 6500 Series FlexWAN Line Card, supporting T1/E1 through OC-48 WAN interfaces • Chassis sizes range from 3-...slot (Cisco Catalyst 6503 Switch) to 13-slot (Cisco Catalyst 6513 Switch) High-Speed WAN Interfaces • Provides high-speed WAN, ATM, and SONET interfaces compatible with other core routers • Provides single-device management for WAN aggregation ...
Data Sheet
Page 5
... Supervisor 1 MSFC: 15 Mpps Supervisor 2 MSFC: up to 210 Mpps Supervisor 720: up to 400 Mpps Catalyst OS (CatOS) Cisco IOS CatOS/IOS Hybrid Configuration Yes, with stateful failover Power supplies (1+1) Switch fabric (1+1) Replaceable clock Replaceable fan tray Gateway ...Load Balancing Protocol Hot Standby Router Protocol Multimodule EtherChannel Rapid Spanning Tree Multiple Spanning Tree Per VLAN Rapid Spanning Tree Rapid Convergence L3 Protocols 576 ports, all ...
... Supervisor 1 MSFC: 15 Mpps Supervisor 2 MSFC: up to 210 Mpps Supervisor 720: up to 400 Mpps Catalyst OS (CatOS) Cisco IOS CatOS/IOS Hybrid Configuration Yes, with stateful failover Power supplies (1+1) Switch fabric (1+1) Replaceable clock Replaceable fan tray Gateway ...Load Balancing Protocol Hot Standby Router Protocol Multimodule EtherChannel Rapid Spanning Tree Multiple Spanning Tree Per VLAN Rapid Spanning Tree Rapid Convergence L3 Protocols 576 ports, all ...
Data Sheet
Page 12
... WAN interfaces using two technologies: • FlexWAN module-Accepts up to DS3/E3 OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a0080092250.html Cisco Systems, Inc. Page 12 of WAN/MAN protocols, including Frame Relay, ATM, PoS, Point-to...3c/STM-1 PoS/SDH OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a0080092249.html • Cisco 7600 Series 4-Port Gigabit Ethernet OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a008009223d.html • Cisco 7600 Series 1-Port Channelized OC-12/STM-4 ...
... WAN interfaces using two technologies: • FlexWAN module-Accepts up to DS3/E3 OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a0080092250.html Cisco Systems, Inc. Page 12 of WAN/MAN protocols, including Frame Relay, ATM, PoS, Point-to...3c/STM-1 PoS/SDH OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a0080092249.html • Cisco 7600 Series 4-Port Gigabit Ethernet OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a008009223d.html • Cisco 7600 Series 1-Port Channelized OC-12/STM-4 ...
Data Sheet
Page 13
... monitoring, and troubleshooting; and 4-Port OC-12c/STM-4 PoS/SDH OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a008009223e.html • Cisco 7600 Series 2-Port ATM OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a008008876f.html • Cisco 7600 Series 2-Port OC-48c/1-Port OC-48c DPT OSM: http://www...
... monitoring, and troubleshooting; and 4-Port OC-12c/STM-4 PoS/SDH OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a008009223e.html • Cisco 7600 Series 2-Port ATM OSM: http://www.cisco.com/en/US/products/hw/routers/ps368/products_data_sheet09186a008008876f.html • Cisco 7600 Series 2-Port OC-48c/1-Port OC-48c DPT OSM: http://www...
Data Sheet
Page 23
All contents are Copyright © 1992-2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 23 of 29 Table 10 Catalyst 6500 Series Specifications (Continued) Specifi... Ethernet 903 Reverse Address Resolution Protocol (RARP) 906 TFTP Bootstrap 951, 1542 BootP, BootP extensions 1027 Proxy ARP 1122 Host requirements 1256 ICMP Router Discovery Protocol (IRDP) IPv4 router discovery 1519 Classless interdomain routing (CIDR) 1541 Dynamic Host Control Protocol (DHCP) 1591 Domain Name System (DNS) client 1619 PPP over SONET ...
All contents are Copyright © 1992-2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 23 of 29 Table 10 Catalyst 6500 Series Specifications (Continued) Specifi... Ethernet 903 Reverse Address Resolution Protocol (RARP) 906 TFTP Bootstrap 951, 1542 BootP, BootP extensions 1027 Proxy ARP 1122 Host requirements 1256 ICMP Router Discovery Protocol (IRDP) IPv4 router discovery 1519 Classless interdomain routing (CIDR) 1541 Dynamic Host Control Protocol (DHCP) 1591 Domain Name System (DNS) client 1619 PPP over SONET ...
Data Sheet
Page 25
... Network Management Protocol (SNMP)v1 1212 MIB definitions 1213 SNMP MIB II 1215 SNMP traps 1256 ICMP router discovery 1285 Station management (SMT) 7.3 1354 IP forwarding table MIB 1493 Bridge MIB 1516 Ethernet repeater MIB 1573 Interface table MIB... Cisco Systems, Inc. All contents are Copyright © 1992-2004 Cisco Systems, Inc. Table 10 Catalyst 6500 Series Specifications (Continued) Specification Number Description 1723 ...
... Network Management Protocol (SNMP)v1 1212 MIB definitions 1213 SNMP MIB II 1215 SNMP traps 1256 ICMP router discovery 1285 Station management (SMT) 7.3 1354 IP forwarding table MIB 1493 Bridge MIB 1516 Ethernet repeater MIB 1573 Interface table MIB... Cisco Systems, Inc. All contents are Copyright © 1992-2004 Cisco Systems, Inc. Table 10 Catalyst 6500 Series Specifications (Continued) Specification Number Description 1723 ...
User Guide
Page 1
... 140-2 validation of the Catalyst 6509 switch and the Cisco 7606 and Cisco 7609 routers with the VPN Services Module meet the security requirements of...Cisco 7606 and Cisco 7609 routers with the VPN Services Module: • Hardware Version - Hardware Version 1.0 (Cisco 7606 router) - Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note This is available on the NIST website at http://csrc.nist.gov/cryptval/. Catalyst 6509 switch - Cisco 7606 router - Cisco 7609 router • Backplane chassis - Hardware Version 1.0 (Cisco 7609 router...
... 140-2 validation of the Catalyst 6509 switch and the Cisco 7606 and Cisco 7609 routers with the VPN Services Module meet the security requirements of...Cisco 7606 and Cisco 7609 routers with the VPN Services Module: • Hardware Version - Hardware Version 1.0 (Cisco 7606 router) - Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note This is available on the NIST website at http://csrc.nist.gov/cryptval/. Catalyst 6509 switch - Cisco 7606 router - Cisco 7609 router • Backplane chassis - Hardware Version 1.0 (Cisco 7609 router...
User Guide
Page 2
...; Finite State Machine • Module Software Listing Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with operations and capabilities of the Catalyst 6509 switch and the Cisco 7606 and Cisco 7609 routers in the technical terms of a FIPS 140-2 Cryptographic Module Security Policy... sections: • References, page 2 • Document Organization, page 2 • Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers, page 4 • Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module, page 6 • Roles and Services, page 10 • Installing the Opacity Shield on...
...; Finite State Machine • Module Software Listing Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with operations and capabilities of the Catalyst 6509 switch and the Cisco 7606 and Cisco 7609 routers in the technical terms of a FIPS 140-2 Cryptographic Module Security Policy... sections: • References, page 2 • Document Organization, page 2 • Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers, page 4 • Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module, page 6 • Roles and Services, page 10 • Installing the Opacity Shield on...
User Guide
Page 3
...of this Non-Proprietary Security Policy, the FIPS 140-2 Validation Submission documentation is Cisco-proprietary and is followed by the "Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers" section which details the general features and functionality of the modules. This ... and the Cisco 7606 and Cisco 7609 routers and explains the secure configuration and operation of the Catalyst 6509 switch and Cisco 7606 and Cisco 7609 routers. For access to these documents, contact Cisco Systems. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services...
...of this Non-Proprietary Security Policy, the FIPS 140-2 Validation Submission documentation is Cisco-proprietary and is followed by the "Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers" section which details the general features and functionality of the modules. This ... and the Cisco 7606 and Cisco 7609 routers and explains the secure configuration and operation of the Catalyst 6509 switch and Cisco 7606 and Cisco 7609 routers. For access to these documents, contact Cisco Systems. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services...
User Guide
Page 4
...Cisco 7609 routers provide a scalable, secure, manageable remote access server that meets FIPS 140-2 Level 2 requirements, as a multi-chip standalone module. Figure 1 Catalyst 6509 Switch Supervisor engine Redundant supervisor engine Switching modules Fan assembly 1 2 3 4 5 6 7 8 FAN STATUS 9 WS-X6K-SUP2-2GE STATUS SYSTEMCONSOLPEWR MGRMETSET SUPERVISOR2 CONSOLE CONSOLE PORT MODE WS... supply 2 ESD ground strap (redundant) connector 16076 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with the VPN Services Module offer versatility, integration, and security to branch...
...Cisco 7609 routers provide a scalable, secure, manageable remote access server that meets FIPS 140-2 Level 2 requirements, as a multi-chip standalone module. Figure 1 Catalyst 6509 Switch Supervisor engine Redundant supervisor engine Switching modules Fan assembly 1 2 3 4 5 6 7 8 FAN STATUS 9 WS-X6K-SUP2-2GE STATUS SYSTEMCONSOLPEWR MGRMETSET SUPERVISOR2 CONSOLE CONSOLE PORT MODE WS... supply 2 ESD ground strap (redundant) connector 16076 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with the VPN Services Module offer versatility, integration, and security to branch...
User Guide
Page 5
Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers Figure 2 Cisco 7606 Router PEM 1 PEM 2 Supervisor Engine OSMs WS-X6K-SUP2-2GE STATUS SYSTEMCONSOLPEWR MGRMETSET SUPERVISOR2 CONSOLE CONSOLE PORT MODE PCMCIA EJECT OSM-4OC12 POS-SI 1 STATUS 2 4 PORT OC-12 POS SM IR LINK 1 2 ... RX CARRAILEARRM RX TX PORT 3 ACTIVE TX RX CARRAILEARRM RX TX PORT4 Fan assembly Slots 1-6 (top to bottom) 63892 OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 5
Catalyst 6509 Switch and Cisco 7606 and Cisco 7609 Routers Figure 2 Cisco 7606 Router PEM 1 PEM 2 Supervisor Engine OSMs WS-X6K-SUP2-2GE STATUS SYSTEMCONSOLPEWR MGRMETSET SUPERVISOR2 CONSOLE CONSOLE PORT MODE PCMCIA EJECT OSM-4OC12 POS-SI 1 STATUS 2 4 PORT OC-12 POS SM IR LINK 1 2 ... RX CARRAILEARRM RX TX PORT 3 ACTIVE TX RX CARRAILEARRM RX TX PORT4 Fan assembly Slots 1-6 (top to bottom) 63892 OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 5
User Guide
Page 6
Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 6 OL-6334-01 Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Figure 3 Cisco 7609 Router WS-X6K-SUP2-2GE STATUSSYSTEMCONSOLPEWR MGRMETSET CONSOLE SUPERVISOR2 WS-X6K-SUP2-2GE STATUSSYSTEMCONSOLPEWR MGRMETSET CONSOLE SUPERVISOR2 OSM-40C12-POS-MM OC12 POS MM OSM-40C12-POS-MM STATUS OC12 POS...
Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 6 OL-6334-01 Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Figure 3 Cisco 7609 Router WS-X6K-SUP2-2GE STATUSSYSTEMCONSOLPEWR MGRMETSET CONSOLE SUPERVISOR2 WS-X6K-SUP2-2GE STATUSSYSTEMCONSOLPEWR MGRMETSET CONSOLE SUPERVISOR2 OSM-40C12-POS-MM OC12 POS MM OSM-40C12-POS-MM STATUS OC12 POS...
User Guide
Page 7
...front panel. (See Figure 4.) PSSCTYOWASNRTTSUEOSMLE RESETMGMT LINK LINK 44312 Figure 4 Supervisor Engine Physical Interfaces CONSOLE port PCMCIA LED WS-X6K-SUP2-2GE SUPERVISOR2 CONSOLE CONSOLE PORT MODE PCMCIA EJECT Status LEDs CONSOLE PORT MODE switch PCMCIA slot RESET button Switch...access. The VPN Services Module is provided by components within this publication. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with the supervisor engine, and cannot perform cryptographic functions; In other words, the cryptographic boundary encompasses all ...
...front panel. (See Figure 4.) PSSCTYOWASNRTTSUEOSMLE RESETMGMT LINK LINK 44312 Figure 4 Supervisor Engine Physical Interfaces CONSOLE port PCMCIA LED WS-X6K-SUP2-2GE SUPERVISOR2 CONSOLE CONSOLE PORT MODE PCMCIA EJECT Status LEDs CONSOLE PORT MODE switch PCMCIA slot RESET button Switch...access. The VPN Services Module is provided by components within this publication. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with the supervisor engine, and cannot perform cryptographic functions; In other words, the cryptographic boundary encompasses all ...
User Guide
Page 8
...diagnostic test failed. Orange Off No signal is installed in standby mode. Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Table 1 Catalyst 6509 Switch and Cisco 7606 and 7609 Router LEDs LED Color/State Description STATUS Green All diagnostics pass. Orange The power supply ...VTT module temperature major threshold has been exceeded. Orange The link has been disabled by software. Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 8 OL-6334-01 Orange Sufficient power is operational, the switch load meter indicates...
...diagnostic test failed. Orange Off No signal is installed in standby mode. Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Table 1 Catalyst 6509 Switch and Cisco 7606 and 7609 Router LEDs LED Color/State Description STATUS Green All diagnostics pass. Orange The power supply ...VTT module temperature major threshold has been exceeded. Orange The link has been disabled by software. Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 8 OL-6334-01 Orange Sufficient power is operational, the switch load meter indicates...
User Guide
Page 9
...-related self-tests passed. If no redundant supervisor engine is installed and there is in Table 2. Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Table 1 Catalyst 6509 Switch and Cisco 7606 and 7609 Router LEDs (continued) LED Color/State Description VPN Services Module STATUS Green All non-FIPS-related diagnostic tests pass. ... Console port Reset button FIPS 140-2 Logical Interface Data input interface Data output interface Control input interface OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 9
...-related self-tests passed. If no redundant supervisor engine is installed and there is in Table 2. Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Table 1 Catalyst 6509 Switch and Cisco 7606 and 7609 Router LEDs (continued) LED Color/State Description VPN Services Module STATUS Green All non-FIPS-related diagnostic tests pass. ... Console port Reset button FIPS 140-2 Logical Interface Data input interface Data output interface Control input interface OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 9
User Guide
Page 10
... this functionality after authentication to the crypto officer role by providing a valid crypto officer username and password. Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 10 OL-6334-01 The configuration of the Catalyst 6509 Switch and the...1,814,400. Both roles are used without repetition for an 8-digit PIN, the probability of the Catalyst 6509 switch and the Cisco 7606 and Cisco 7609 routers can also use the basic user services. The crypto officer can be at least eight alphanumeric characters in the online help for ...
... this functionality after authentication to the crypto officer role by providing a valid crypto officer username and password. Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 10 OL-6334-01 The configuration of the Catalyst 6509 Switch and the...1,814,400. Both roles are used without repetition for an 8-digit PIN, the probability of the Catalyst 6509 switch and the Cisco 7606 and Cisco 7609 routers can also use the basic user services. The crypto officer can be at least eight alphanumeric characters in the online help for ...
User Guide
Page 11
...or allow plaintext packets to the Cisco IOS executive program. The crypto officer role is defined. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with a terminal program. The crypto officer services consist of the router. The user services consist of the... following : • Configuring the router-Defines network interfaces and settings, creates command aliases,...
...or allow plaintext packets to the Cisco IOS executive program. The crypto officer role is defined. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with a terminal program. The crypto officer services consist of the router. The user services consist of the... following : • Configuring the router-Defines network interfaces and settings, creates command aliases,...
User Guide
Page 12
... 6506-E switch chassis (part number 800-27009-xx). • An envelope with VPN Services Module Certification Note 12 OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with 60 FIPS tamper evidence labels. • An envelope containing a disposable ESD wrist strap. Set the other end of the holes on the...
... 6506-E switch chassis (part number 800-27009-xx). • An envelope with VPN Services Module Certification Note 12 OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with 60 FIPS tamper evidence labels. • An envelope containing a disposable ESD wrist strap. Set the other end of the holes on the...
User Guide
Page 13
OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with a chassis air vent perforation. Step 11 Push the rivet pin through one of fasteners. Step 12 Repeat step 10 and step 11 for FIPS ...
OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with a chassis air vent perforation. Step 11 Push the rivet pin through one of fasteners. Step 12 Repeat step 10 and step 11 for FIPS ...