Junos-FIPS Environment

This part of the Secure Junos Configuration Guide provides configuration and operational information to help you perform the tasks associated with effectively configuring a network of Juniper Networks routers in a Federal Information Processing Standards (FIPS) 140-2 environment. The FIPS 140-2 environment is implemented as both hardware and software. Two major roles are defined:

• Junos-FIPS Users can add or remove Adaptive Services II (AS II) FIPS Physical Interface Cards (PICs).
• The Crypto Officer installs the Junos-FIPS software and sets up the keys and passwords for the system and Junos-FIPS Users.

Both user types can also perform normal router configuration tasks, such as configuring routing protocols and routing policies as individual user configuration allows.

Note: Because this guide only covers Junos-FIPS configuration and operation, and is not related to the release of any specific products running the Junos software, refer to other Junos hardware and software manuals for non-Junos-FIPS configuration tasks. While Junos-FIPS configuration statements and commands are noted in other Junos hardware and software configuration guides, all details relating to Junos-FIPS operation are presented in the Junos-FIPS Configuration Guide.

This guide is not intended as a troubleshooting guide. However, you can use it with a broader troubleshooting strategy to identify Junos-FIPS network problems.

This chapter discusses the following topics:

• Overview of Junos-FIPS
• Supported Roles and Services
• Junos-FIPS Hardware Environment
• Junos-FIPS Software Environment
• Configuration Restrictions
• Summary of Junos and Junos-FIPS Differences