© Copyright 2007 Cisco Systems, Inc. Page 9 of 26
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
2.2.1. User Services
Users enter the system by accessing the console port with a terminal program or via IPSec
protected telnet or SSH session to a LAN port. The IOS prompts the User for username and
password. If the password is correct, the User is allowed entry to the IOS executive program.
The services available to the User role consist of the following:
Status Functions
View state of interfaces and protocols, version of IOS currently
running.
Network Functions
Connect to other network devices through outgoing telnet, PPP, etc.
and initiate diagnostic network services (i.e., ping, mtrace).
Terminal Functions
Adjust the terminal session (e.g., lock the terminal, adjust flow
control).
Directory Services
Display directory of files kept in flash memory.
SSL-TLS/VPN
Negotiation and encrypted data transport via SSL/TLS.
EASY VPN
Negotiation and encrypted data transport via EASY VPN.
2.2.2 Crypto Officer Services
During initial configuration of the router, the Crypto Officer password (the “enable” password) is
defined. A Crypto Officer can assign permission to access the Crypto Officer role to additional
accounts, thereby creating additional Crypto Officers.
The Crypto Officer role is responsible for the configuration and maintenance of the router. The
Crypto Officer services consist of the following:
Configure the router
Define network interfaces and settings, create command aliases, set
the protocols the router will support, enable interfaces and network
services, set system date and time, and load authentication
information.
Define Rules and Filters
Create packet Filters that are applied to User data streams on each
interface. Each Filter consists of a set of Rules, which define a set
of packets to permit or deny based on characteristics such as
protocol ID, addresses, ports, TCP connection establishment, or
packet direction.
View Status Functions
View the router configuration, routing tables, active sessions, use
gets to view SNMP MIB statistics, health, temperature, memory
status, voltage, packet statistics, review accounting logs, and view
physical interface status.
Manage the router
Log off users, shutdown or reload the router, erase the flash
memory, manually back up router configurations, view complete
configurations, manager user rights, and restore router
configurations.
Set Encryption/Bypass
Set up the configuration tables for IP tunneling. Set preshared keys
(7 pages)
(186 pages)
(176 pages)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals