8
Cisco 2621 Modular Access Router Security Policy
78-13695-01
Cisco 2621 Modular Access Routers
Figure 5
Chassis Removal
Once the router has been configured in to meet FIPS 140-1 Level 2 requirements, the router cannot be
accessed without signs of tampering. To seal the system, apply serialized tamper-evidence labels as
follows:
Step 1
Clean the cover of any grease, dirt, or oil before applying the tamper evidence labels. Alcohol-based
cleaning pads are recommended for this purpose. The ambient air must be above 10ºC, otherwise the
labels may not properly cure..
Step 2
Place the first label on the router as shown in Figure 6. The tamper evidence label should be placed so
that the one half of the tamper evidence label covers the enclosure and the other half covers the side of
the router. Any attempt to remove the enclosure will leave tamper evidence.
Step 3
Place the second label on the router as shown in Figure 6. The tamper evidence label should be placed
so that the one half of the tamper evidence label covers the enclosure and the other half covers the side
of the router. Any attempt to remove the enclosure will leave tamper evidence.
Step 4
Place the third label on the router as shown in Figure 6. The tamper evidence label should be placed so
that the one half of the label covers the enclosure and the other half covers the Network Module slot.
Any attempt to remove a network module will leave tamper evidence.
Step 5
Place the fourth label on the router as shown in Figure 6. The tamper evidence label should be placed
so that the half of the label covers the enclosure and the other half covers the WAN interface card slot.
Any attempt to remove a WAN interface card will leave tamper evidence.
Step 6
Place the fifth label on the router as shown in Figure 6. The tamper evidence label should be placed so
that one half of the label covers the enclosure and the other half covers the WAN interface card slot.
Any attempt to remove a WAN interface card will leave tamper evidence.
Step 7
The labels completely cure within five minutes.
35392
POWER
RPS
ACTIVITY
Cisco 2600 SERIES