Chapter2SystemOverview
address,MACaddress,andportoftheclientandtheVLANtopreventauser
fromaccessingorusingtheIPaddressofanotheruser.
lEquipment-levelsecuritycontrol
àTheCPUsecuritycontroltechnologypreventsDenialofService(DoS)attacks.
àTheSecureShell(SSH)/SimpleNetworkManagementProtocol(SNMP)v3
ensuresnetworkmanagementsecurity.
àMulti-levelaccesssecurityoftheconsolepreventsunauthorizedusersfrom
changingtheswitchconguration.
àTheRemoteAuthenticationDialInUserService(RADIUS)/TerminalAccess
ControllerAccess-ControlSystemPlus(TACACS+)identicationauthentication
putstheswitchundercentralizedcontrolandpreventsunauthorizedusersfrom
modifyingtheconguration.
lNetworksecuritycontrol
àTheAccessControlList(ACL)basedonportsandVLANsmakesitpossiblefor
userstoapplysecuritystrategiestoeachportortrunkoftheswitch.
àMACaddressbindingandsourceordestination-basedlteringprovideeffective
address-basedtrafccontrol.
àTheportmirroringfunctionprovidesaneffectivetoolfornetworkmanagement
analysis.
QoSGuarantee
TheZXR105250providesthefollowingapplicationsofQualityofService(QoS):
lProvidesStandard802.1pClassofService(CoS)andDifferentiatedServicesCode
Point(DSCP)eldsorting.Singlegroup-basedlabelingandre-sortingcanbe
performedbyusingsourceanddestinationIPaddresses,sourceanddestination
MACaddresses,andTransferControlProtocol(TCP)/UserDatagramProtocol
(UDP)portnumbers.
lProvidesqueueschedulingalgorithmsincludingStrictPriority(SP)andWeighted
RoundRobin(WRR).
lSupportstheCommittedAccessRate(CAR)function.Itmanagesasynchronous
uplinkanddownlinkdataowsfromuplinksbyingressstrategycontrolandegress
shaping.Theingressstrategycontrolprovidesbandwidthcontrolwiththeminimum
incrementof8kbps.ItcansatisfyQoSrequirementsofpacketloss,timedelayand
jitterevenifnetworkcongestionoccurs,thusavoidingqueuecongestioneffectively.
ManagementModes
TheZXR105250providesthefollowingmanagementmodes:
lSupportstheSNMPv1/v2c/v3andRemoteMonitoring(RMON).
lSupportstheZXNM01uniednetworkmanagementplatform.
2-3
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential