MNR S2500 Security Policy
Version 1.3, Revision Date: 1/13/2009
Page
14
CSP
Firmware
Update
K
ey ent
ry
User
Management
IK
E
Ipsec tunnel
establishment
FRF.1
7
tunnel
establishment
SSH
Reboot
Zeroization
Crypto
Configuration
Network
Configuration
Enable Ports
File System
Authentica
ted
Show St
at
us
Access Control
KEK
R
R
Z
R
IKE Pre-shared
Key
W
R
Z W RW
R
SKEYID
RW
Z
Z
SKEYID_d
RW
Z
SKEYID_a
RW
Z
SKEYID_e
RW
Z
Ephemeral DH
Phase-1 private
key
RW
Z
Ephemeral Phase-
2 DH private key
RW
Z
IPSEC Session
Keys
RW
R
Z
FRF.17 Session
Keys
RW
R
Z
SSH-RSA Private
Key
RW
Z
RW
SSH-DSA Private
Key
RW
Z
RW
SSH Session Keys
RW
Z
SSH DH Private
Key
RW
Z
Root Password
RW
Z
User(Admin)
RW
Z
User Accounts
RW
Z
RNG Seed
RW
Z
Table 10 – Services to CSP Access mapping
