ZXR102900ESeriesCongurationGuide
Reliability
TheZXR102900Eensurestheredundancybackupandfastswitchthrough
STP/RSTP/MSTP.Theseswitchessupportthe802.3adLACPfunctionanditsupplies
loadsharingandlinkbackup.ItsupportsZESREthernetringnetworkmodetoprovide
fastprotectionswitching,whichensuresthattheuserservicewillnotbeinterrupted.
ServiceCharacteristics
Operationcharacteristicsandcontrolsareasfollows:
lItprovidesexibleVLANclassicationmode.Itcanbeclassiedbytypesofport,
protocol,MACaddressandsoon.
lItprovidesVPNonlayer-2whichexiblycontrolsouterlayerlabelandmakes
operationandplanconvenient.
lItprovidesuserportlocationtechnologysuchasVBAS,DHCPOption82andPPPoE+.
lItprovidesL2multicasttechnologyincludingIGMP-snoopingandproxyfunction,
fast-leavingcharacteristicandMulticast-VlanSwitching(MVS)function,which
supportsforopeningIPTVservice.
SecurityControl
Thefunctionsofsecuritycontrolarelistedbelow.
lUserlevelsecuritycontrolisprovided.
àIEEE802.1ximplementsdynamicandport-basedsecurity,whichprovidesthe
userIDauthenticationfunction.
àItsupportsMAC/IP/VLAN/PORTcombinationatrandom,whichpreventsillegal
userfromaccessingthenetworkeffectively.
àPortisolationishelpfultomakesurethatuserscannotmonitororaccesstoother
usersonthesameswitch.
àItsupportsGuestVlanandanti-proxyfunction,whichhelpstheapplicationinthe
educationnetworkandothercomplicatednetworkingenvironment.
àDHCPmonitoringpreventsspitefulusersdeceivingtheserverandsending
spuriousaddress,soitcanstartIPsourceprotectionandcreateabindingtable
fortheIPaddressoftheuser,MACaddress,portsandVLANtopreventuser
deceivingorusingIPaddressofotherusers.
lEquipmentlevelsecurityisprovided.
àCPUsecuritycontroltechnologycanresistDoSattackfromCPU.
àSSH/SNMPv3protocolsuppliesnetworkmanagementsecurity.
àMultilevelsecurityofconsolecanpreventunauthenticateduserschangingthe
switchconguration.
àRADIUS/TACACS+identicationauthenticationputstheswitchunderthe
centralizedcontrolandpreventsunauthorizeduserfrommodifyingconguration.
1-2
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential