Fips Mode Enable - Cisco Nexus 7000 Series Command Reference Manual

Hide thumbs Also See for Nexus 7000 Series:

Table of Contents

fips mode enable

To enable Federal Information Processing Standards (FIPS) mode, use the fips mode enable command. To

disable FIPS mode, use the no form of this command.

fips mode enable

no fips mode enable

Syntax Description

This command has no arguments or keywords.

Command Default

Command Modes

Global configuration (config)

Command History

Usage Guidelines

Before enabling FIPS mode, ensure that you are in the default virtual device context (VDC).

FIPS has the following prerequisites:

• Disable Telnet. Users should log in using Secure Shell (SSH) only.

• Disable SNMPv1 and v2. Any existing user accounts on the device that have been configured for SNMPv3

• Delete all SSH server RSA1 key-pairs.

• Enable HMAC-SHA1 message integrity checking (MIC) for use during the Cisco TrustSec Security

This command does not require a license.

This example shows how to enable FIPS mode:

switch# configure terminal

switch(config)# fips mode enable

FIPS mode is enabled

This example shows how to disable FIPS mode:

switch# configure terminal

switch(config)# no fips mode enable

should be configured only with SHA for authentication and AES/3DES for privacy.

Association Protocol (SAP) negotiation. To do so, enter the sap hash-algorithm HMAC-SHA-1 command

from the cts-manual or cts-dot1x mode.

Modification

This command was introduced.

Cisco Nexus 7000 Series Security Command Reference

fips mode enable