8
Cisco 3640 Modular Access Router Security Policy
78-13835-01
Cisco 3640 Modular Access Routers
Figure 3
Chassis Removal
Once the router has been configured in to meet FIPS 140-1 Level 2 requirements, the router cannot be
accessed without signs of tampering. To seal the system, apply serialized tamper-evidence labels as
follows:
Step 1
Clean the cover of any grease, dirt, or oil before applying the tamper evidence labels. Alcohol-based
cleaning pads are recommended for this purpose. The ambient air must be above 10ºC, otherwise the
labels may not properly cure.
Step 2
Place the first label on the router as shown in Figure 4. The tamper evidence label should be placed so
that the one half of the tamper evidence label covers the enclosure and the other half covers the front
panel of the router.
Step 3
Place the second label on the router as shown in Figure 4. The tamper evidence label should be placed
over the PCMCIA Flash card slots.
Step 4
Place the third label on the router as shown in Figure 4. The tamper evidence label should be placed so
that the one half of the label covers the enclosure and the other half covers the Network Module slot 3.
Step 5
Place the fourth label on the router as shown in Figure 4. The tamper evidence label should be placed
so that the one half of the label covers the enclosure and the other half covers the Network Module slot
2.
Step 6
Place the fifth label on the router as shown in Figure 4. The tamper evidence label should be placed so
that the one half of the label covers the enclosure and the other half covers the Network Module slot 1.
Step 7
Place the sixth label on the router as shown in Figure 4. The tamper evidence label should be placed so
that the one half of the label covers the enclosure and the other half covers the Network Module slot 0.
Step 8
If applicable, place the seventh label on the router as shown in Figure 4. The tamper evidence label
should cover both the of the daughter WAN interface cards on the mixed-media LAN/network module.
Step 9
The labels completely cure within five minutes.
H7043
Screw
0
ACTIVE
READY
123
PCMCIA
1
0
SYSTEM
CON
AUX
RPS