Nortel Networks NN46120-104 Manual de usuario Pagina 243
- Pagina / 300
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
9.0 Roles and Services 243
Service FIPS140-1 Level 3 Mode Non- FIPS140-1 Mode
Not auth
enticated
User
Role
SO Role Not auth
enticated
User
Role
SO Role SRDIs Access
ed
Modular Exponentiation
using CRT (note 3)
YES YES YES YES YES Yes None
Modular Exponentiation
(note 3)
YES YES YES YES YES YES None
RSA Encrypt (note 8) NO NO NO NO YES YES EPK (use)
RSA Decrypt (note 8) NO NO NO NO YES YES DPK (use)
Digital Signature Standard
Sign (note 1)
NO NO NO YES YES YES None
Digital Signature Standard
Verification (note 1)
NO NO NO YES YES YES None
Self-test YES YES YES YES YES YES None
Firmware Update NO NO YES NO NO YES None
Generate Random Number YES YES YES YES YES YES PRNGKey (crea
te, destroy)
Get Configuration YES YES YES YES YES YES None
Get Status YES YES YES YES YES YES None
Verify Firmware Image NO NO YES NO NO YES
SHA1 Hash NO YES YES YES YES YES None
SHA1 HMAC (note 1) NO NO NO YES YES YES None
MD5 Hash NO NO NO YES YES YES None
MD5 HMAC (note 1) NO NO NO YES YES YES None
Note 1 = The key for these commands is input through the PCI bus (data input interface)
Note 2 = This is a PKCS 12 method for deriving a 3DES key from a password, salt and iteration count.
Note 3 = The Exponentiation Using CRT and Exponentiation functions are generic math functions; all
parameters are input through the PCI interface (data input interface).
Note 4 = When operating in the FIPS140-1 mode, it is not possible for secret keys, private keys or critical
security parameters to cross the PCI bus without being wrapped (encrypted) using the Key-Wrapping
Key.
Note 5 = User Login is the process that takes the board from an unauthenticated state to the authenticated
state. Only one user may be authenticated at a particular time. Consequently, the User Login process
cannot be started from the authenticated state. Nonetheless, the User Login process cannot be
completed successfully without authentication.
Note 6 = This command is used for generating the key-wrapping-key.
Note 7 = When the board is in the zeroized state, it is possible to for an unauthenticated user to uninitialize
the board.
Note 8 = These operations must access stored cryptographic keys. The keys may not be input through the
PCI interface.
Nortel VPN Gateway
User Guide
NN46120-104 02.01 Standard
14 April 2008
Copyright © 2007-2008 Nortel Networks
.
- User Guide 1
- Licensing 2
- Contents 3
- Who Should Use This Book 8
- Related documentation 9
- Product Names 10
- How This Book Is Organized 11
- 12 Preface 12
- Typographic Conventions 13
- How to Get Help 14
- Introducing the VPN Gateway 15
- SSL Acceleration 16
- Hardware Platforms 18
- Feature List 19
- Transparent Mode Access 20
- User Authentication 20
- User Authorization 20
- Client Security 21
- Accounting and Auditing 21
- Networking 21
- Secure Service Partitioning 21
- Branch Office Tunnels 22
- Portal Guard 22
- Scalability and Redundancy 23
- Public Key Infrastructure 23
- Introducing the ASA 310-FIPS 27
- HSM Overview 28
- Extended Mode vs. FIPS Mode 29
- Types of iKeys 30
- Additional HSM Information 33
- Initial Setup 35
- Clusters 36
- IP Address Types 37
- 38 Initial Setup 38
- Interfaces 39
- Switch 2424-SSL 40
- Configuration at Boot Up 41
- Complete the New Setup 46
- Initializing system......ok 49
- Basic VPN Setup 50
- Default Network 50
- Default Services 51
- 52 Initial Setup 52
- Complete the Join Setup 56
- Complete the Join Setup 57 57
- ......ok 57
- Setup successful 57
- Installing an ASA 310-FIPS 58
- ( new setup, continued) 59
- Reinstalling the Software 70
- Upgrading the NVG Software 73
- 74 Upgrading the NVG Software 74
- 78 Upgrading the NVG Software 78
- Managing Users and Groups 79
- 80 Managing Users and Groups 80
- Adding a New User 81
- • tunnelguard 82
- Adding Users through RADIUS 85
- Changing a Users Password 88
- Deleting a User 91
- Adding Certificates to the NVG 99
- Copy-and-Paste Certificates 100
- >> Certificate 1# apply 101
- Changes applied successfully 101
- Copy-and-Paste Private Key 102
- Nortel VPN Gateway 104
- NN46120-104 02.01 Standard 104
- 14 April 2008 104
- /cfg/cur cert command 106
- Update Existing Certificate 107
- Certificate 108
- Generating client certificates 110
- Create a New Certificate 111 111
- >> Certificate 1# 112
- Valid for days [365]: 112
- Key size (512/1024) [512]: 112
- Export Client Certificate 114
- >> Main# cfg/cert 116
- Automatic CRL Retrieval 120
- Client certificate support 123
- Signing CSRs 124
- 5 Apply the changes 125
- Generate Test Certificate 126
- Automatic CRL Retrieval 127 127
- General Commands 128
- Show Key Size 129
- Show Key Information 129
- Virtual Desktop 131
- 132 Virtual Desktop 132
- Launch Vdesktop from Portal 133
- Virtual Desktop Operations 134
- The Command Line Interface 135
- Connecting to the VPN Gateway 136
- Running Telnet 137
- Running an SSH Client 138
- Accessing the NVG Cluster 140
- CLI vs. Setup 142
- Idle Timeout 144
- Troubleshooting the NVG 145
- Enable Telnet or SSH Access 146
- Check the Access List 146
- 148 Troubleshooting the NVG 148
- Cannot Contact the MIP 149
- 150 Troubleshooting the NVG 150
- The NVG Stops Responding 151
- A User Password is Lost 152
- Boot User Password 153 153
- Alteon iSD SSL 153
- Software version 7.1 153
- Boot User Password 155 155
- 158 Troubleshooting the NVG 158
- 164 Troubleshooting the NVG 164
- 166 Troubleshooting the NVG 166
- 168 Troubleshooting the NVG 168
- 170 Troubleshooting the NVG 170
- System Diagnostics 172
- Error Log Files 174
- 176 Troubleshooting the NVG 176
- Appendix 177
- Supported Ciphers 177
- 178 Supported Ciphers 178
- Supported Ciphers (cont’d.) 178
- Cipher List Formats 179
- Modifying a Cipher List 180
- The SNMP Agent 183
- Supported MIBs 184
- SNMP-VIEW-BASED-ACM-MIB 185 185
- Limitations 186
- DISMAN-EVENT-MIB 187 187
- 188 The SNMP Agent 188
- Supported Traps 189
- Syslog Messages 191
- List of Syslog Messages 192
- ALARM 193 193
- Alarm Severity Syslog Level 193
- CRITICAL ALERT 193
- • Name: isd_down 194
- • Name: single_master 194
- • Name: log_open_failed 194
- ALARM 195 195
- 196 Syslog Messages 196
- ERROR 197 197
- 198 Syslog Messages 198
- ERROR 199 199
- 200 Syslog Messages 200
- INFO 201 201
- 202 Syslog Messages 202
- AAA Subsystem Messages 203 203
- Log functionality 204
- WARNING 205 205
- 206 Syslog Messages 206
- INFO 207 207
- 208 Syslog Messages 208
- INFO 209 209
- 210 Syslog Messages 210
- INFO 211 211
- 212 Syslog Messages 212
- INFO 213 213
- 214 Syslog Messages 214
- INFO 215 215
- 216 Syslog Messages 216
- INFO 217 217
- 218 Syslog Messages 218
- INFO 219 219
- 220 Syslog Messages 220
- INFO 221 221
- 222 Syslog Messages 222
- License Information 223
- 224 License Information 224
- 226 License Information 226
- 228 License Information 228
- 230 License Information 230
- 232 License Information 232
- HSM Security Policy 233
- 2.0 Applicable Documents 234
- 3.0 Overview 234
- 4.0 Capabilities 235
- 5.0 Physical Security 237
- 7.1 Module Interfaces 237
- 7.1 Components 238
- 240 HSM Security Policy 240
- 9.0 Roles and Services 241
- 9.4 User Creation 242
- 9.5 Services 242
- 9.0 Roles and Services 243 243
- 244 HSM Security Policy 244
- 9.0 Roles and Services 245 245
- 246 HSM Security Policy 246
- 9.0 Roles and Services 247 247
- 10.0 Key Management 248
- 10.2 Key Storage 249
- 10.3 Key Entry and Output 249
- 10.4 Key Distribution 249
- 11.0 Modes 250
- 12.0 Self-Tests 251
- 13.0 Conclusion 252
- Definition of Key Codes 253
- Syntax Description 254
- Redefinable Keys 255
- SSH host keys 257
- Methods for Protection 258
- The VPN Gateway 259
- 260 SSH host keys 260
- Active Directory 261
- 5 Click Add 263
- Create New Class 266
- Create New Class 267 267
- Create New Class 269 269
- Using the Port Forwarder API 271
- Creating a Port Forwarder 273
- Demo Application 274
- Create New Class 275 275
- Example 277 277
- Example 281 281
- Connecting Through a Proxy 282
- Monitoring the Port Forwarder 283
- Glossary 285
- 286 Glossary 286
- 288 Glossary 288
- 290 Glossary 290
- 292 Glossary 292
- 294 Glossary 294
Relacionado con productos y manuales para Software Nortel Networks NN46120-104
Software Nortel Networks P0887496 Manual de usuario
(95 paginas)
(95 paginas)
Software Nortel Networks 608(WL) Manual de usuario
(222 paginas)
(222 paginas)
Software Nortel Networks BCM50 Manual de usuario
(352 paginas)
(352 paginas)
Software Nortel Networks NN43001-121 Manual de usuario
(304 paginas)
(304 paginas)
Software Nortel Networks 40M2420 Manual de usuario
(382 paginas)
(382 paginas)
Software Nortel Networks P0886629 Manual de usuario
(81 paginas)
(81 paginas)
Software Nortel Networks NN43001-504 Manual de usuario
(228 paginas)
(228 paginas)
Software Nortel Networks NN43001-106 Manual de usuario
(616 paginas)
(616 paginas)
Software Nortel Networks 8672ATME Manual de usuario
(162 paginas)
(162 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.138 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales