Specifications

This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

2.3 Physical Security

The router is entirely encased by a metal, opaque case. The rear of the unit contains

HWIC/WIC/VIC connectors, LAN connectors, a CF drive, power connector, console connector,

auxiliary connector, USB port, and fast Ethernet connectors. The front of the unit contains the

system status and activity LEDs. The top, side, and front portion of the chassis can be removed

to allow access to the motherboard, memory, AIM slot, and expansion slots.

The Cisco 2851 routers require that a special opacity shield be installed over the side air vents in

order to operate in FIPS-approved mode. The shield decreases the surface area of the vent holes,

reducing visibility within the cryptographic boundary to FIPS-approved specifications.

Install the opacity plates as specified in the pictures below:

Figure 4 – 2851 – Opacity Shield Position

Once the router has been configured in to meet FIPS 140-2 Level 2 requirements, the router

cannot be accessed without signs of tampering. To seal the system, apply serialized tamper-

evidence labels as follows:

1. Clean the cover of any grease, dirt, or oil before applying the tamper evidence

labels. Alcohol-based cleaning pads are recommended for this purpose. The

temperature of the router should be above 10°C.