DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND Joint Interoperability Test Command (JTE) 30 Oct 15

Transcription

1 DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND IN REPLY REFER TO: Joint Interoperability Test Command (JTE) 30 Oct 15 MEMORANDUM FOR DISTRIBUTION SUBJECT: Extension of the Special Interoperability Test Certification of the Cisco 2900 References: (a) Department of Defense Instruction , "DoD Unified Capabilities (UC)," 9 December 2010 (b) Office of the Assistant Secretary of Defense, Department of Defense Unified Capabilities Requirements 2013, Errata 1, 1 July (c) through (e), see Enclosure Certification Authority. Reference (a) establishes the Joint Interoperability Test Command (JITC) as the Joint Interoperability Certification Authority for the UC products. Conditions of Certification. The Cisco 2951 with IOS 15.1(4)M3 is hereinafter referred to as the System Under Test (SUT). The SUT meets all of its critical interoperability requirements for joint use within the Defense Information System Network (DISN) as a High Availability Customer Edge Router (CER). When a CER meets the High Availability CER requirements, it is also certified as a Medium Availability with System Quality Factors (SQF), Medium Availability without SQF, and Low Availability CER. The SUT met the High Availability and Medium Availability with SQF CER requirements in a dual-chassis configuration. The SUT met the critical interoperability requirements set forth in Reference (b), using test procedures derived from Reference (c). The SUT met the critical interoperability requirements for the following Wide Area Network (WAN) interfaces: Institute of Electrical and Electronics Engineers (IEEE) 802.3i (10BaseT), IEEE 802.3u (100BaseT), Digital Signal Level (DS)1 and DS3. The SUT also met the critical interoperability requirements for the following Assured Services Local Area Network (ASLAN) interfaces: IEEE 802.3i (10BaseT), IEEE 802.3u (100BaseT), and IEEE 802.3ab (1000BaseT). The certified SUT components are summarized in Table 1. The Cisco 2921, 2911 and 2901 employ the same software and similar hardware as the SUT. JITC analysis determined these systems to be functionally identical to the SUT for interoperability certification purposes and therefore, they are also certified for joint use. No other configurations, features, or functions, except those cited within this memorandum, are certified by JITC. This certification expires upon changes that could affect interoperability, but no later 25 June 2017, which is the expiration date specified in the Unified Capabilities (UC) Approved Products List (APL) memorandum.

2 Desktop Review (DTR) 5 was requested to update the SUT from IOS 15.4(3)M2 to IOS 15.5M. See Test Details paragraph for additional information. Table 1. UC APL Product Summary Cisco 2951, 2921,2911 and 2901 IOS 15.5M (See notes 1, 2, 3.) Subcomponent Part Number (See note 2.) Description VWIC3-4MFT-T1/E1 VWIC3-2MFT-T1/E1 VWIC3-2MFT-G703 VWIC3-1MFT-T1/E1 VWIC3-1MFT-G703 HWIC-2CE1T1-PRI HWIC-1CE1T1-PRI HWIC-2FE HWIC-1FE HWIC-4T HWIC-2T HWIC-1T NM-1T3/E3 HWIC-1DSU-T1 SM-ES3G-24-P SM-ES3-24-P SM-ES2-24-P SM-ES2-24 SM-ES3G-16-P SM-ES3-16-P SM-ES2-16-P NM-1T3/E3 SM-NM-ADPTR 4-Port T1/E1 Multiflex Trunk Voice/WAN Interface Card 2-Port T1/E1 Multiflex Trunk Voice/WAN Interface Card 1-Port G.703 Multiflex Trunk Voice/WAN Interface Card 1-Port T1/E1 Multiflex Trunk Voice/WAN Interface Card 1-Port G.703 Multiflex Trunk Voice/WAN Interface Card 2 port channelized T1/E1 and PRI HWIC (data only) 1 port channelized T1/E1 and PRI HWIC (data only) Two 10/100 routed port HWIC One 10/100 routed port HWIC 4-Port Serial HWIC 2-Port Serial HWIC 1-Port Serial HWIC One port T3/E3 network module 1-Port CSU/DSU T1 HWIC Enhanced EtherSwitch SM, Layer 2/3 switching, 24 ports GE, POE capable Enhanced EtherSwitch SM, Layer 2/3 switching, 23 ports FE, 1 port GE, POE capable Enhanced EtherSwitch SM, Layer 2 switching, 23 ports FE, 1 port GE, POE capable Enhanced EtherSwitch SM, Layer 2 switching, 23 ports FE, 1 port GE Enhanced EtherSwitch SM, Layer 2/3 switching, 16 ports GE, POE capable Enhanced EtherSwitch SM, Layer 2/3 switching, 15 ports FE, 1 port GE, POE capable Enhanced EtherSwitch SM, Layer 2 switching, 15 ports FE, 1 port GE, POE capable One port T3/E3 network module Network Module Adapter for SM Slot on Cisco 2900, 3900 ISR NOTES: 1. The SUT was updated from IOS 15.1(4)M3 to IOS 15.1(4)M5with DTR 1. The SUT was updated from IOS 15.1(4)M5 to IOS 15.2(4)M with DTR 2. The SUT was updated from IOS 15.2(4)M5 to IOS 15.4(3)M2 with DTR 4. The SUT was updated from IOS 15.4(3)M2 to IOS 15.5M with DTR Components bolded and underlined were tested by JITC. The other components in the family series were not tested; however, they utilize the same software and similar hardware and JITC analysis determined them to be functionally identical for interoperability certification purposes and they are also certified for joint use. 3. The high availability and medium availability with SQF solutions include the SUT in a dual-chassis configuration. The medium availability without SQF and low availability solutions do not require redundancy and are certified in a single-chassis configuration. LEGEND: APL Approved Products List DTR Desktop Review E1 European Basic Multiplex Rate (2.048 Mbps) E3 European Multiplex Rate ( Mbps) FE Fast Ethernet GE Gigabit Ethernet HWIC High-Performance WAN Interface Card IOS Internetwork Operating System ISR Integrated Services Router JITC Joint Interoperability Test Command Mbps Megabits per second MFT Multiflex Trunk NM POE PRI SM SQF SUT T1 T3 UC VWIC WAN Network Module Power-Over-Ethernet Primary Rate Interface Service Module System Quality Factors System Under Test Digital Transmission Link Level 1 (1.544 Mbps) Digital Transmission Link Level 3 ( Mbps) Unified Capabilities Voice/Wide Area Network Interface Card Wide Area Network Interoperability Status. The interface, Capability Requirement (CR) and Functional Requirement (FR), and component status of the SUT are listed in Tables 2 and 3. The threshold 2

3 CR/FRs for CERs are established by Section of Reference (b) and were used to evaluate the interoperability of the SUT. Interface 10Base-X 100Base-X 1000Base-X 10GBase-X Critical Yes Yes No No Table 2. SUT Interface Interoperability Status UCR Reference Threshold CR/FR Status (See note.) ASLAN Interfaces 1-3 Not Tested WAN Interfaces Remarks IEEE 802.3i (10BaseT) interface. IEEE 802.3u (100BaseT) interface. IEEE 802.3ab (1000BaseT) interface. 10Base-X Yes IEEE 802.3i (10BaseT) interface. 100Base-X Yes IEEE 802.3u (100BaseT) interface. 1000Base-X No 1-3 Not Tested 10GBase-X No 1-3 Not Tested The SUT met all critical CRs and FRs for this DS1 No 1-2 Certified interface. DS3 No 1-2 Not Tested The SUT met all critical CRs and FRs for this interface. E1 No 1-2 Not Tested This interface is supported; however, it was not tested and is not E3 No 1-2 Not Tested This interface is supported; however, it was not tested and is not EIA-530 No 1-2 Not Tested OC-X No 1-2 Not Tested 10Base-X Yes Certified IEEE 802.3i (10BaseT) interface. 100Base-X Yes Certified IEEE 802.3u (100BaseT) interface. 1000Base-X No Certified IEEE 802.3ab (1000BaseT) interface. NOTE: The annotation of required refers to a high-level requirement category. The applicability of each sub-requirement is provided in Reference (d), Enclosure 3. The system under test does not need to provide conditional requirements. However, if a capability is provided, it must function according to the specified requirements. LEGEND: 802.3ab 1000BaseT Gbps Ethernet over twisted pair at 1 Gbps (125 Mbps) 802.3i 10BaseT Mbps over twisted pair 802.3u Standard For Carrier Sense Multiple Access With Collision Detection At 100 Mbps ASLAN Assured Services Local Area Network CR Capability Requirement DCE Data Circuit-Terminating Equipment DS1 Digital Signal Level 1 (1.544 Mbps) DS3 Digital Signal Level 3 DTE Data Terminal Equipment E1 European Digital Multiplex Rate (2.048 Mbps) EIA Electronic Industries Alliance EIA-530 Standard for 25-position interface for DTE and DCE employing serial binary data interchange FR Functional Requirement Gbps Gigabits per second IEEE Institute of Electrical and Electronics Engineers LoC Letter of Compliance Mbps Megabits per second OC Optical Carrier SUT System Under Test UCR Unified Capabilities Requirements WAN Wide Area Network 3

4 Table 3. SUT CRs and FRs Status CR/FR ID 1 2 Applicability Capability/Function (See note 1.) Product Interface Requirements UCR Reference Status Remarks Internal Interface Requirements Required Met The SUT met all critical CRs and FRs. External Physical Interfaces between Network Components Required Met The SUT met all critical CRs and FRs. IP Queue Control Capabilities Required para 1 Met The SUT met all critical CRs and FRs. DSCP Required Met The SUT met all critical CRs and FRs. VVoIP Per-Hop Behavior Requirements Required Met The SUT met all critical CRs and FRs. Traffic Conditioning Requirements Required Met The SUT met all critical CRs and FRs. CER Requirements Traffic Conditioning Required Met The SUT met all critical CRs and FRs. Differentiated Services Support Required Met The SUT met all critical CRs and FRs. Per Hop Behavior Support Required Met The SUT met all critical CRs and FRs. Interface to the LSC/MFSS for Not The SUT does not support this feature and it Conditional Traffic Conditioning Tested is not Interface to the LSC/MFSS for Not The SUT does not support this feature and it Conditional Bandwidth Allocation Tested is not The SUT met all critical CRs and FRs. The Availability Required Met SUT met High Availability CER requirements. (See note 2.) Packet Transit Time Required Met The SUT met all critical CRs and FRs. CER Interfaces and Throughput Support Required Met The SUT met all critical CRs and FRs. Assured VVoIP Latency Required Met Assured VVoIP CE Latency Required Met Assured VVoIP CER-to-CER Required Met Latency Assured VVoIP CER-to-CER Required Met Jitter Assured VVoIP CE Jitter Required Met Assured VVoIP CER-to-CER Required Met Packet Loss Assured VVoIP CE Packet Required Met Loss End-to-End Availability Required Met Availability Design Factors Required Met Product Quality Factors Required Met Layer 1 Physical Layer Required Met Layer 2 Data Link Layer Required Met Provisioning Required Met IP Routing Protocols Required Met The SUT met this requirement with Static Routing, BGP-4, IS-IS, OSPFv2, OSPFv3, and VRRP. Voice Grade of Service Required Met 4

5 Table 3. SUT CRs and FRs Status (continued) CR/FR ID Applicability Capability/Function (See note 1.) CER Requirements (continued) UCR Reference Survivability Required IPv6 Requirements Status Not Tested Remarks This is an E2E engineering requirement and is not testable in a lab environment. (See note 4.) IPv6 Required Met The SUT met all critical CRs and FRs. Product Requirements Required Met The SUT met all critical CRs and FRs with the following minor exception: The SUT does not support the following RFCs 4301 and (See note 5.) NM Requirements VVoIP NMS Interface Requirements Required Met NM Requirements for CERs Required Met NM Required Met 10/100/1000BaseT interfaces. This was met by the vendor s LoC. 10/100/1000BaseT interfaces. This was met by the vendor s LoC. 10/100/1000BaseT interfaces. This was met by testing and the vendor s LoC. NOTES: 1. The annotation of required refers to a high-level requirement category. The applicability of each sub-requirement is provided in Reference (d), Enclosure If a CER meets the High Availability CER requirements, it meets all of the lesser requirements for Medium Availability with and without SQF and Low Availability. The Cisco 2951 meets the High Availability with a dual-chassis configuration. The Cisco 2921, 2911 and 2901 CERs were not tested; however, they employ the same software and similar hardware as the Cisco JITC analysis determined these systems to be functionally identical to the 2951 for interoperability certification purposes and therefore, they are also certified for joint use. 3. This requirement was verified in an emulated operational environment. To meet E2E requirements, the SUT must be deployed IAW its deployment guide and the engineering guidelines provided in UCR 2008, Change 3, section This requirement was verified in an operational emulated environment. To meet E2E requirements, the SUT must be deployed in accordance with its deployment guide and the engineering guidelines provided in UCR Section The vendor submitted an IPv6 LoC with the following noted discrepancy: The SUT does not support RFCs 4301 and DISA adjudicated this deficiency as minor because this RFC addresses requirements for IPSec, which is an optional requirement and is not implemented in the certified configuration. LEGEND: BGP Border Gateway Protocol CE Customer Edge CER Customer Edge Router CR Capability Requirement DSCP Differentiated Services Code Point E2E End-to-End FR Functional Requirement IAW in accordance with ID Identification IP Internet Protocol IPv6 Internet Protocol version 6 IS-IS Intermediate System-Intermediate System JITC Joint Interoperability Test Command LoC Letters of Compliance LSC Local Session Controller MFSS Multifunction Softswitch NM Network Management NMS Network Management System POA&M Plan of Actions and Milestones RFC Request for Comments OSPF Open Shortest Path First SQF System Quality Factors SUT System Under Test UCR Unified Capabilities Requirements VRRP Virtual Router Redundancy Protocol VVoIP Voice and Video over Internet Protocol Test Details. The extension of this certification is based upon DTR 5. The original certification, documented in Reference (d), is based on interoperability testing conducted by JITC, review of the vendor's Letters of Compliance (LoC), DISA adjudication of open test discrepancy reports (TDRs), and DISA Certifying Authority (CA) Recommendation of the 5

6 Information Assurance (IA) configuration. Interoperability testing was conducted by JITC, Fort Huachuca, Arizona, from 2 April through 1 May Review of the vendor s LoC was completed on 12 June DISA adjudication of outstanding TDRs was completed on 10 July The DISA CA provided a positive Recommendation based on the security testing completed by DISA-led IA test teams and published in a separate report, Reference (e). This DTR 5 was requested to update from IOS 15.4(3)M2 to IOS 15.5M (specifically, includes software releases through 15.5(3)M). The updates contained in this DTR are to fix software 'bugs' that have been reported and documented by Cisco customers and to provide enhancements for commercial customers such as Smart licensing, Virtual Router Forwarding Awareness, and many others that do not affect the interoperability functionality or change the IA posture of the SUT. Additionally, DISA has approved this DTR to include IOS 15.5M without IA testing. Therefore, JITC supports this DTR without testing. Additional Information. JITC distributes interoperability information via the JITC Electronic Report Distribution (ERD) system, which uses Sensitive but Unclassified IP Data (formerly known as NIPRNet) . Interoperability status information is available via the JITC System Tracking Program (STP). STP is accessible by.mil/.gov users at Test reports, lessons learned, and related testing documents and references are on the JITC Joint Interoperability Tool (JIT) at Due to the sensitivity of the information, the Information Assurance Accreditation Package (IAAP) that contains the approved configuration and deployment guide must be requested directly from the Unified Capabilities Certification Office (UCCO), disa.meade.ns.list.unifiedcapabilities-certification-office@mail.mil. All associated information is available on the DISA UCCO website located at Point of Contact (POC). The JITC point of contact is Mr. Joseph Schulte, commercial telephone (520) , DSN telephone , FAX DSN ; address joseph.t.schulte.civ@mail.mil; mailing address Joint Interoperability Test Command, ATTN: JTE (Mr. Joseph Schulte) P.O. Box 12798, Fort Huachuca, AZ The UCCO tracking number for the SUT is FOR THE COMMANDER: Enclosure a/s for RIC HARRISON Chief Networks/Communications and UC Portfolio Distribution (electronic mail): DoD CIO Joint Staff J-6, JCS 6

7 Distribution (electronic mail) (continued): USD(AT&L) ISG Secretariat, DISA, JTA U.S. Strategic Command, J665 US Navy, OPNAV N2/N6FP12 US Army, DA-OSA, CIO/G-6 ASA(ALT), SAIS-IOQ US Air Force, A3CNN/A6CNN US Marine Corps, MARCORSYSCOM, SIAT, A&CE Division US Coast Guard, CG-64 DISA/TEMC DIA, Office of the Acquisition Executive NSG Interoperability Assessment Team DOT&E, Netcentric Systems and Naval Warfare Medical Health Systems, JMIS IV&V HQUSAISEC, AMSEL-IE-IS UCCO 7

8 ADDITIONAL REFERENCES (c) Joint Interoperability Test Command, Unified Capabilities Test Plan (UCTP), Draft (d) Joint Interoperability Test Command, Memo, JTE, Special Interoperability Test Certification of the Cisco 2900 Series with Internetwork Operating System (IOS) 15.1(4)M3, 6 August 2012 (e) Joint Interoperability Test Command, Information Assurance (IA) Assessment of Cisco 2900 Release (Rel.) 15.1(4)M (Tracking Number ), Draft Enclosure