Chapter 2 System Overview
Confidential and Proprietary Information of ZTE CORPORATION 5
Security Controls
The following are user level security control:
îš„ IEEE 802.1x implements dynamic and port-based security
provides the user ID authentication function and
MAC/IP/VLAN/PORT combines at random, and prevent illegal
user to accessing the network.
îš„ Segregating the ports is helpful to make sure that users can
not monitor or access to other users on the same switch.
îš„ DHCP monitoring prevents spiteful users deceiving the server
and sending spurious address, so it can start protecting IP
source and create a binding table for the IP address of the
user, MAC address, ports and VLAN to prevent user deceiving
or use IP address of other users.
The following are the equipment level security control:
îš„ CPU security control technology can resist DoS attack from
CPU.
îš„ SSH/SNMPv3 protocol supplies network management
security.
îš„ Multilevel security of console can prevent unauthenticated
users changing the switch configuration.
îš„ RADIUS authentication may carry on the common control to
the switchboard.
The following are the network security control:
îš„ ACL based on port or Trunk makes it possible for users to
apply security strategy to the ports of switches or Trunk.
îš„ Binding MAC address and the filtration based on source or
destination supply effective control over the flux based on
address.
îš„ Port MIRROR function is an effective tool for network
management analyses.
QoS Guarantee
Applications of QoS are shown below:
îš„ Standard 802.1p QoS and DSCP field sort label and sort
again based on single group with source and destination IP
address, source and destination MAC address, and TCP/UDP
port number.
îš„ Queue schedule arithmetic, Strict Priority(SP) & combination
schedule.
 Support CAR（Committed Access Rate）function. Manage the
asynchronous upward and downward data stream from end
User Security
Control
Equipment
Level Security
Network
Security
To Next Page
Loading...
Need help?
General