Zte ZXR10 8900E series - System security

ZXR10 8900E series Core Switch Product Description
ZTE Confidential Proprietary
© 2013 ZTE CORPORATION. All rights reserved.
95
Figure 4-34 New-generation ZXROS V5.0 software platform system architecture
ZXROS V5.0 software platform includes the following subsystems:
 Route subsystem: including unicast routing protocol and multicast routing protocol;
 L2 subsystem: include all L2 functional protocols;
 MPLS subsystem: include LDP, RSVP and PWE3 functional protocol;
 L3&PSS subsystem: include TCP/UDP, ARP, ND, message receiving/sending,
interface management, routing table, label table management, forwarding table
collection, integration and synchronization;
 Configuration and resource management subsystem: include configuration
management modules such as ACL, route-map, L2VPN and L3VPN and system
resource management such as label and ip pool;
 Application protocol subsystem: include various application protocols such as
Netflow, Radius, NTP and Telnet.
The key and competitive technologies of this software platform reflected in the following
aspects:
 The system kernel resource runs in the highest priority mode and all software
components run in the user state of the micro-kernel system to enhance system
security (up/down isolation);
 Software components belong to different separate process spaces, realizing safe
isolation of illegal operation of application program (left/right separation);
 component functions can be developed independently and independent versions
can be released;
Operating system micro-kernel
Distributed infrastructure
L3&PSS subsystem (message receiving/sending, interface management,
table management, etc.)
Routing protocol
subsystem
Configuration management and
resource maintenance
L2 protocol
subsystem
O
A
M
MPLS subsystem
TACACS+
C
o
n
f
i
g
u
r
a
t
i
o
n
RADIUS
PING
FTP
NTP
NETFLOW
TRACE
. . . . . .
Application protocol subsystem
Software platform