Reference Guide

Aruba 3000, 6000/M3 Mobility Controller FIPS 140-2 Level 2 Security Policy

Overview

The Aruba 6000 and 3000 series Mobility Controllers are network infrastructure devices providing secure,

scalable solutions for enterprise Wi-Fi, network security policy enforcement, VPN services, and wireless

intrusion detection and prevention. Mobility controllers serve as central points of authentication,

encryption, access control, and network coordination for all mobile network services.

The controller configurations tested during the cryptographic module testing included:

 Aruba 3200-F1

 Aruba 3200-USF1

 Aruba 3400-F1

 Aruba 3400-USF1

 Aruba 3600-F1

 Aruba 3600-USF1

 M3mk1-S-F1 (used in both Aruba 6000-400-F1 and Aruba-6000-400-USF1 chassis)

 Aruba 6000-400-F1 and Aruba 6000-400-USF1 chassis (no more than four Aruba line cards,

including the combinations among M3mk1-S-F1, LC-2G-1, LC-2G24F-1, or LC-2G24FP-1, in a

single hardware configuration). Please note that the use of LC-2G-1, LC-2G24F-1 and LC-

2G24FP-1 is optional, but at least one M3mk1-S-F1 is required in a single hardware

configuration).

 FIPS Kit

o 4010061-01 (Part number for Tamper Evident Labels)

 The exact firmware version validated was ArubaOS 6.3.1.7-FIPS

Note: For radio regulatory reasons, Aruba 3200-USF1, Aruba 3400-USF1, Aruba 3600-USF1 and Aruba

6000-400-USF1 are to be sold in the US only. Aruba 3200-F1, Aruba 3400-F1, Aruba 3600-F1 and

Aruba 6000-400-F1 must not be used for deployment in the United States. From a FIPS perspective,

both -USF1 and -F1 models are identical and fully FIPS compliant.