Cisco Cat4K NDPP ST
11 March 2014
EDCS-1228241
22
Figure 7 Front-to-Back Airflow Rear View
Figure 8 Back-to-Front Airflow Rear View
As described above, the physical boundary of the TOE is the switch hardware and
software. The software of the TOE is IOS and other supporting functionality (e.g., SSH
Server). This physical boundary represents the Switch subsystem of the TOE. The
Switch subsystem processes data packets and accepts a management interface connection
to administer the switch. The management interface is either through a secure SSHv2
session or via a local console connection.
The switches are hardware platforms in which all operations in the TOE scope are
protected from interference and tampering by untrusted subjects. All administration and
configuration operations are performed within the physical boundary of the TOE. Also,
all TOE Security Policy (TSP) enforcement functions must be invoked and succeed prior
to functions within the TOE scope of control (TSC) proceeding.
The TOE includes one or more chassis, one or more supervisor engine cards running the
IOS XE software and one or more line cards. Each switch is a physical device with the
following types of communication interfaces provided by the supervisor engine cards
and/or the line cards:
USB ports,
Network port,
