Corporate Headquarters:Copyright © 2001. Cisco Systems, Inc. All rights reserved.Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USACisco 2621XM and Cisco 2651XM ModularAccess Routers with AIM-VPN/EP FIPS 140-2Non-Proprietary Security PolicyLevel 2 ValidationVersion 1.3June 2, 2004IntroductionThis is the non-proprietary Cryptographic Module Security Policy for the 2621XM and 2651XMModular Access Routers with AIM-VPN/EP. This security policy describes how the 2621XM and2651XM routers (Hardware Version: 2621XM, 2651XM; AIM-VPN/EP: Hardware Version 1.0, BoardVersion B0; Firmware Version: IOS 12.3(3d)) meet the security requirements of FIPS 140-2, and how tooperate the 2621XM and 2651XM routers in a secure FIPS 140-2 mode. This policy was prepared aspart of the Level 2 FIPS 140-2 validation of the 2621XM and 2651XM routers.FIPS 140-2 (Federal Information Processing Standards Publication 140-2—Security Requirements forCryptographic Modules) details the U.S. Government requirements for cryptographic modules. Moreinformation about the FIPS 140-2 standard and validation program is available on the NIST website athttp://csrc.nist.gov/cryptval/.This document contains the following sections:• Introduction, page 1• The 2621XM/2651XM Router, page 2• Secure Operation of the Cisco 2621XM/2651XM Router, page 17• Related Documentation, page 19• Obtaining Documentation, page 19• Documentation Feedback, page 20• Obtaining Technical Assistance, page 20• Obtaining Additional Publications and Information, page 22