FIPS 140-2 Non-Proprietary Security Policy, Version 0.8
March 17, 2016
Sonus SBC 7000 Session Border Controller
© 2016 Sonus Networks, Inc.
This document may be freely reproduced and distributed whole and intact including this copyright notice.
Page 25 of 32
3.
Secure Operation
The SBC 7000 Session Border Controller meets overall Level 1 requirements for FIPS 140-2. The sections below
describe how to ensure that the module is running securely. Please note that physical access to the module shall
be limited to authorized operators only.
3.1
Initial Setup
The module is delivered in an uninitialized factory state, and requires first-time configuration in order to operate
in its FIPS-Approved mode. Physical access to the module shall be limited to the Crypto Officer, and the CO shall
be responsible for putting the module into the Approved mode. The following sections provide the necessary
step-by-step instructions for the secure installation of the SBC device, as well as the steps necessary to configure
the module for its FIPS-Approved mode of operation.
3.1.1 SBC Hardware Installation and Commissioning
In order to setup the SBC, the following steps should be performed by an authorized CO:
1. Before unpacking the SBC from the shipping container, examine the shipping container for evidence of
damage. If any such damage exists, indicate that on the shipping document of the carrier and contact
Sonus Networks, Inc. immediately for instructions.
2. Retain the packing list. Make sure all the items on the list are present including all the components of
the universal rack mount kit that is shipped with the module.
3. Follow the instructions in "Sonus SBC 7000 Series 5.0 Hardware Install Guide" to install Rack Mount Kits,
SBC Chassis, Front Bezel, and Cables.
Once these steps have been completed, the SBC hardware is considered to be installed and commissioned.
3.1.2 SBC Firmware Installation and Configuration
The next steps are to configure the firmware amd management ports and to install the SBC application software.
Please follow the detailed instructions in "Sonus SBC 5000 & 7000 Software Installation Guide" for configuring,
installing, and upgrading the SBC 7000 appplication, or the following instructions shall be followed by the CO:
1. Connect your PC/Laptop via an Ethernet cable to the Ethernet Field Service Port (FSP) provided by the
BMC of the appliance.
2. Configure your PC with an IP address on the "169.254.77.x" subnet.
3. Type the pre-configured IP address "169.254.77.1" in a web browser to connect to the BMC.
4. Configure the real BMC IP address in BMC configuration screen to replace the initial address
"169.254.77.1".
5. Disconnect the PC/Laptop from FSP. Connect the FSP port to the router on LAN segment for out-of-band
management.
6. Connect a PC to the IP network that can access the BMC IP address.