Module Name
Juniper Networks MX240, MX480, MX960 3D Universal Edge Routers with RE-S-X6-128G/RE-1800 Routing Engine and MPC7E-10G MACSec Card
Caveat
When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Juniper Networks MX Series is a robust portfolio of SDN enabled routing and switching platforms that provide industry leading system capacity,density,security and performance. MPC7E-10G supports 40 ports of 10gbps with GCM-AES-256 MACSEC encryption.
Approved Algorithms
| AES |
Certs. #3969, #A2285, #A2286 and #A2287 |
| CVL |
Cert. #A2286 |
| DRBG |
Certs. #A2283, #A2286 and #A2287 |
| ECDSA |
Cert. #A2286 |
| ENT |
NP |
| HMAC |
Certs. #A2283, #A2284, #A2286 and #A2287 |
| KAS |
KAS-SSC Cert. #A2286, CVL Cert. #A2286 |
| KAS-SSC |
Cert. #A2286 |
| KBKDF |
Cert. #A2285 |
| KTS |
AES Cert. #A2285, key establishment methodology provides 128 bits of encryption strength |
| KTS |
AES Cert. #A2286 and HMAC Cert. #A2286; key establishment methodology provides between 128 and 256 bits of encryption strength |
| RSA |
Cert. #A2286 |
| SHS |
Certs. #A2283, #A2284, #A2286 and #A2287 |
Hardware Versions
MX240, MX480, MX960 with components identified in Security Policy Table 1
Firmware Versions
Junos OS 20.3X75
