Zte ZXR10 5900 Series - Command Configuration; Control Plane Security Configuration; Control Plane Security Overview

ZXR105900/5200SeriesUserManual(BasicCongurationVolume)
ControlPlaneSecurity
Configuration
ControlPlaneSecurityOverview
InternetandIPtechnologywildspreadapplicationbringthegreat
changetotheworld.WithIPnetworkbeingdevelopedwidelyand
deeply,networkattackandvirusarebecomingmoreandmore
frequent,whichbringspeoplemuchvisibleandinvisibleloss.The
previousnetworkattackandvirusmostlytakePCorserverhost
asmajorattackobjects.Butnowterminalenduseranti-virus
capabilityandvirusmakercapabilityincreasesdaybyday,the
networkdevicessuchasrouterandswitchbecometheobjectthat
virusattacks.
Accordingtoknownorpredictableattackandvirusontheswitch,
wecantakemanykindsofmeasurestomakeswitchhaveself-pro-
tectionandsafeguardingnetworksecuritycapability.Themain
functionofcontrolplanesecurityistomonitorthepacketupload-
ingrate,generatealarmonabnormalrateuploadingpacketand
remindnetworkmanagertopayattentiontopossiblepacketattack
toCPU.Sothatnetworkmanagercandecideifdiscardthispacket
ontheinterfaceorlimitspeedandlterunreasonablepacket.
CommandConfiguration
1.Toenable/disablecontrol-plane-securityfunction,usethefol-
lowingcommand.
CommandFunction
ZXR10(config)#control-plane-security{enable|
disable}
Thiscommandiscontrol-plane-
securityfunctionglobalswitch.
Itisusedtoopenorclose
control-plane-securityfunction,
thedefaultisenabled.
2.Todiscardorpassprotocolpacket,usethefollowingcommand.
CommandFunction
ZXR10(config-gei_1/x)#protocol-protectmode
<protocolname>{enable|disable}
Thispasses/discardsprotocol
packet.
Thiscommandisconguredintheinterfacemode.Congura-
tiondecidesifacertainprotocolpacketwillbediscardedina
physicalport.AsfortheportwhoseportcongurationisNNI,
allconguredprotocolpacketsareenabledindefault.Butas
fortheportwhoseportcongurationisUNI,thedefaultvalue
174CondentialandProprietaryInformationofZTECORPORATION