Administration of the Avaya G350 Media Gateway - Avaya Support

Chapter 21: FIPSThis chapter provides information about (i) the G350 cryptographic module’s compliance withthe Federal Information Processing Standard (FIPS-140-2) for cryptographic modules, and(ii) how to configure the module to work in FIPS mode. This chapter includes the followingsections:●●●●●Overview — an overview of the G350 (relating to FIPS compliance)Security rules — the security rules enforced by the cryptographic module to implement thesecurity requirements of FIPSPassword guidelines — the general guidelines for defining passwordsManaging the module in FIPS-compliant mode — a description of the behavior of themodule working in FIPS-approved mode of operationAdministration procedures — step-by-step instructions on how to enter FIPS mode, failurescenarios, repair actions, and error statesOverviewThe G350 device is a multi-chip stand-alone cryptographic module in a commercial grade metalcase. The module provides:●●●●VPN, Voice over Internet Protocol (VoIP) media-gateway services, Ethernet switching, IProuting, and data security for IP trafficStatus output via LEDs and logs available through the module’s management interfaceNetwork interfaces for data input and outputA console portThe cryptographic boundary includes all of the components within the physical enclosure of theG350 chassis, without any expansion modules. Figure 26 illustrates these interfaces anddefines the cryptographic boundary.Issue 3 January 2005 289