Zte ZXR10 M6000 Series - Physical Scope

ZXR10M6000&T8000&8900ESecurityTarget
ControlPlane
Thecontrolplanereceivescongurationcommands,protocolinformationandkeep-alive
packetsfromotherplanestoimplementsthefollowingfunctions:
lCongurationofcommandparameter,displayingstatisticsandstatusinformation.
lLocalauthentication,RADIUSauthenticationandTACACS+authentication
lAuditloggingandSNMPtrappingandpreciseclocksynchronization
lGenerationofvarietyofcongurationitemssuchasroutingtables,IPandMAC
bindingtable,ACLtable,etc.
lImportantprotocolssuchasBGPv4/RIPv2/IS-IS/OSPFv2supportsvariety
ofauthenticationmethods(noauthentication,cleartextauthentication,MD5
authentication),.
Controlplanesendsprotocolpacketandtableentriestotheotherplane.
ForwardingPlane
Theforwardingplaneforwardstheuserdata,receivesprotocolpackets,keep-alive
packetsandcongurationtableentriesfromotherplanes.Theprotocolinformationand
keep-alivepacketaresenttothenetworkaccordingtotheirpriorities.TopreventIP
addresstheftfromleased-lineusers,theleased-lineIPaddressesareboundtospecic
MACaddresses.TorestricttheunknownuserstoaccesstheTOE,theACLisassigned
tothenetworkinterface.ByspecifyingtheURPFtotheimportingnetworkinterface
andcheckingtheconsistencyofthesourceroutingaddressandtheincominginterface,
TheTOEcanpreventIPspoongattacks.TopreventDoSattacks,theTOElimitsthe
up-sendingow,thetrafctocontrolplane,ratetoprotecttheCPUwhenthedataow
exceedingtheconguredthreshold,theexceededtrafcwillbedropped.ThentheTOE
dispatchesincomingpacketstocontrolplane.
Theforwardingplanealsoprovidesstatisticalinformationtotheotherplane.
1.4.1Physicalscope
TheTOEconsistsof:
laM6000seriesSR
laT8000seriesCR
la8900EseriesESS
lacopyofZXROSNGV1.00.20:locatedonacompactashcard/disk,whichcanbe
insertedintheSR/CR/ESSandisshippedwiththeSR/CR/ESS.Thecompleteversion
informationofZXROSNGV1.00.20areasfollows:
1-6
SJ-20110815105844-030|2011/08/19（R1.6）ZTECORPORATION