Administration of the Avaya G350 Media Gateway - Avaya Support

FIPSTable 18: Role and service access to CSPs 3 of 3KeyEnable FIPS ModeFirmware UpdateCSPs ManagementUser ManagementModule ConfigurationResetRead all status indicationsModule backupRestoreZeroizationIKE NegotiationIPSec traffic processingRead subset of status indicationsOSPF RoutingPPPoE ServiceRADIUS AuthenticationSerial Number ExchangeEphemeralSerial NumbersecretZZIKE EphemeralDH public keysIKE EphemeralDH phase 2public keysZ Z RWZ Z RWAvaya root CARSA public keyLicense RSApublic keyRRWRW3 of 3Security rulesThe following are security rules enforced by the cryptographic module to implement the securityrequirements of this FIPS 140-2 Level 1 module.1. Set the crypto module to FIPS-140-2 mode through the procedure outlined in Entering FIPSmode on page 307.2. When exiting FIPS-140-2 mode, the crypto-officer should zeroize the CSP.3. When the module has not been placed in a valid role, the operator does not have access toany cryptographic services.4. It is recommended to only encrypt message traffic using DES to support communicationwith legacy systems.304 Administration of the Avaya G350 Media Gateway