Zte ZXR10 8900E series - System Security; Table 5-10 System Security

ZXR10 8900E series Core Switch Product Description
ZTE Confidential Proprietary
© 2013 ZTE CORPORATION. All rights reserved.
105
Features Description
Reliability
MPLS-TE end-to-end Path protection
MPLS-TE FRR
IP FRR
LDP FRR
Multicast FRR
BFD for Static Routing, LDP, OSPF, ISIS, BGP, RIP, VRRP,
LSP, FRR, PIM DR, Super VLAN
Graceful Restart
NSF
VRRP
Protection against loops for VPLS
ESRP+ Ethernet ring protection
Dual uplink dual homing protection
ECMP
UDLD
LLDP
LACP, MC-ELAM
5.3.8 System security
Table 5-10 System security
Features Description
System
security
Anti Attacks
Defend against attacks of DoS, MAC flood, ARP
Spoof, IP Spoof, SYN flood of TCP, UDP flood, PING
flood, Ping of Death, LAND, SMURF, Session
hijacking, broadcast storms, IP fragment and large
traffic
BPDU guard, root guard, and loop guard
IPv4 uRPF
Hierarchical protection of command lines to prevent
unauthorized users and grant different configuration
rights to different levels of users
CPU
protection
CPU channel guard by rate limiting of the messages
sent to CPU
Filter of the messages sent to CPU
Priority Assignment of the messages sent to CPU
Advanced
Security
Log record
Broadcast storm auto suppression
Hybrid ACL with L2, L3 and L4 fields filtering
OSPF, RIP, and BGP MD5 authentication
IP source guard/DAI
ND Security
DPI
FIREWALL