NOTE
The AR500 series support only CPCAR.
PKI
The public key infrastructure (PKI) is a system that generates public keys and digital
certificates, and verifies identities of certificate subjects to ensure information security. PKI
issues digital certificates that bind public keys to respective user identities by means of a
certificate authority (CA).
NOTE
The AR500 series (except , AR502CG-L and AR502EGW-L) does not support PKI function.
AAA
The AR500&AR510&AR530&AR550&AR2500 supports Authentication, Authorization, and
Accounting (AAA).
l Authentication
Verifies users' identities.
l Authorization
Grants different rights for different users to restrict the services that can be used by users.
l Accounting
Records information about network service usage of users, including service type, start
time, and traffic volume.
For details about security features, see Security Configuration Guide.
3.2.4 QoS
Traffic Policing
Traffic policing discards excess traffic to limit the traffic within a specified range and to
protect network resources as well as the carriers' interests.
The AR500&AR510&AR530&AR550&AR2500 uses committed access rate (CAR) to
perform traffic policing. They support dual-rate-three-color markers and precise bandwidth
management.
Traffic Shaping
When the rate of an interface on a downstream device is slower than that of an interface on an
upstream device or burst traffic occurs, traffic congestion may occur on the downstream
device interface. Traffic shaping can be configured on the interface of an upstream device so
that outgoing traffic is sent at even rates and congestion is avoided.
The AR500&AR510&AR530&AR550&AR2500 supports traffic shaping adaptation and
level-3 traffic shaping. Three-level shapers include the flow queue shaper, subscriber queue
shaper, and port queue shaper.
Huawei AR500&AR510&AR530&AR550&AR2500
Series Industrial Switch Routers
Product Description
3 Product Characteristics
Issue 02 (2016-11-25) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
37