the service type and security vulnerability of the system and prepare for further
intrusion to the system.
– Malformed packet attack
The malformed packet attack is to send malformed packets to the system. If such an
attack occurs, the system breaks down when processing the malformed IP packets.
Malformed packet attacks include Ping of Death and Teardrop.
NOTE
l The AR2500 series do not support Firewall in HSB Mode.
ARP Security
There are various ARP attacks on networks, including attacks targeting hosts and gateways,
address spoofing attacks and violent attacks, virus attacks, and malicious software attacks.
Address Resolution Protocol (ARP) security uses various ARP-based security mechanisms,
such as strict ARP learning, ARP entry protection, and ARP packet rate limiting, to protect
the network from attacks to the ARP protocol and ARP-based network scanning attacks.
NOTE
The AR500 series do not support ARP security.
IP Source Guard
Some attacks on networks aim at source IP addresses by accessing and using network
resources through spoofing IP addresses. The attacks block authorized users from accessing
networks or information leaks.
The AR500&AR510&AR530&AR550&AR2500 series routers support Unicast Reverse Path
Forwarding (URPF). URPF blocks packets sent from bogus source addresses.
NOTE
The AR500 series do not support IP source guard.
Local Attack Defense
The Internet technology and size develop quickly and various network applications emerge.
Many enterprises try to boost their own development by using their networks. They are
concerned about how to protect confidential data and resources in an open network
environment. Some unconscious operations may attack network devices and degrade device
performance or even cause device failure.
A large number of packets including valid packets and malicious attack packets on a network
must be processed by devices' CPUs. The malicious attack packets affect services and may
even cause a system breakdown. In addition, excessive normal packets can also lead to high
CPU usage, which degrades the CPUs' performance and interrupts services. Therefore,
protecting the CPU is a necessary and important factor for processing services and system
response.
The local attack defense and source tracing functions protect the
AR500&AR510&AR530&AR550&AR2500 against attacks. When an attack occurs, these
functions ensure nonstop service transmission and minimize the impact of the attack on
network services.
Huawei AR500&AR510&AR530&AR550&AR2500
Series Industrial Switch Routers
Product Description
3 Product Characteristics
Issue 02 (2016-11-25) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
36
To Next Page
Loading...
Need help?
General
