Zte ZXR10 2900E Series - Page 13

Chapter2SystemOverview
àItsupportsMAC/IP/VLAN/Portcombinationatrandom,whicheffectivelyprevents
illegalusersfromaccessingthenetwork.
àPortisolationensuresthatausercanneithermonitortrafcofanotheruseron
thesameswitchnorobtaintheuser'sinformation.
àItsupportstheGuestVlanandanti-proxyfunction,whichfacilitatesitsapplications
ineducationalnetworksandothercomplexnetworkenvironments.
àDynamicHostCongurationProtocol(DHCP)monitoringpreventsmalicious
usersfromdeceivingtheDHCPserverandsendingspuriousaddressinformation.
ItcanalsoenableIPsourceprotectionandcreateabindingtablefortheIP
address,MACaddress,andportoftheclientandtheVLANtopreventauser
fromaccessingorusingtheIPaddressofanotheruser.
lEquipment-levelsecuritycontrol
àTheCPUsecuritycontroltechnologypreventsDenialofService(DoS)attacks.
àTheSecureShell(SSH)/SimpleNetworkManagementProtocol(SNMP)v3
ensuresnetworkmanagementsecurity.
àMulti-levelaccesssecurityoftheconsolepreventsunauthorizedusersfrom
changingtheswitchconguration.
àTheRemoteAuthenticationDialInUserService(RADIUS)/T erminalAccess
ControllerAccess-ControlSystemPlus(TACACS+)identicationauthentication
putstheswitchundercentralizedcontrolandpreventsunauthorizedusersfrom
modifyingtheconguration.
lNetworksecuritycontrol
àTheAccessControlList(ACL)basedonportsandVLANsmakesitpossiblefor
userstoapplysecuritystrategiestoeachportortrunkoftheswitch.
àMACaddressbindingandsource-ordestination-basedlteringprovideeffective
address-basedtrafccontrol.
àTheportmirroringfunctionprovidesaneffectivetoolfornetworkmanagement
analysis.
QoSGuarantee
TheZXR102900EprovidesthefollowingapplicationsofQualityofService(QoS):
lProvidesStandard802.1pClassofService(CoS)andDifferentiatedServicesCode
Point(DSCP)eldsorting.Singlegroup-basedlabelingandre-sortingcanbe
performedbyusingsourceanddestinationIPaddresses,sourceanddestination
MACaddresses,andTransferControlProtocol(TCP)/UserDatagramProtocol
(UDP)portnumbers.
lProvidesqueueschedulingalgorithmsincludingStrictPriority(SP)andWeighted
RoundRobin(WRR).
lSupportstheCommittedAccessRate(CAR)function.Itmanagesasynchronous
uplinkanddownlinkdataowsfromuplinksbyingressstrategycontrolandegress
2-3
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential