Zte ZXR10 M6000 Series - Fia_Uau.2; Fia_Uau.5; Fia_Uid.2; Fmt_Mof.1

ZXR10M6000&T8000&8900ESecurityTarget
5.1.2.13FIA_UAU.2Userauthenticationbeforeanyaction
FIA_UAU.2.1TheTSFshallrequireeachadministratortobesuccessfullyauthenticated
beforeallowinganyotherTSF-mediatedactionsonbehalfofthatadministrator.
5.1.2.14FIA_UAU.5Multipleauthenticationmechanisms
FIA_UAU.5.1TheTSFshallprovide[clientRADIUS,TACACS+,andlocalauthentication
mechanisms]tosupportuserauthentication.
FIA_UAU.5.2TheTSFshallauthenticateanyuser'sclaimedidentityaccordingtothe
[authenticationmechanismspeciedbytheauthoriseduser].
5.1.2.15FIA_UID.2Useridentificationbeforeanyaction
FIA_UID.2.1TheTSFshallrequireeachusertobesuccessfullyidentiedbeforeallowing
anyotherTSF-mediatedactionsonbehalfofthatuser.
5.1.2.16FMT_MOF.1Managementofsecurityfunctionsbehaviour
FMT_MOF.1.1TheTSFshallrestricttheabilityto[determinethebehaviourof]the
functions[TOEmanagement/administration/securityfunctionslistedbelowlistedbelow]
to[theAdministrator].
1.ConguringAdministrators;
2.ConguringLogincontrol;
3.Conguringlocal/RADIUS/TACACS+authentication;
4.ConguringPasswordManagementParameters;
5.ConguringACL;
6.ConguringEventlogs;
7.ConguringSNMP/SYSLOG;
8.ConguringNTP;
9.Conguringanti-DoSattack;
10.ConguringURPF;
11.ConguringCPUProtectionPolicies;
5.1.2.17FMT_MSA.1Managementofsecurityattributes
FMT_MSA.1.1TheTSFshallenforcethe[unauthenticatedSFPandEXPORTSFP]to
restricttheabilityto[changedefault,query,modify,delete]thesecurityattributes[dened
inFDP_IFF.1.1(1)andFDP_IFF.1.1(2)]to[Administrator].
5.1.2.18FMT_MSA.3Staticattributeinitialization
FMT_MSA.3.1TheTSFshallenforcethe[unauthenticatedSFPandEXPORTSFP]to
provide[restrictive]defaultvaluesforsecurityattributesthatareusedtoenforcetheSFP .
5-8
SJ-20110815105844-030|2011/08/19（R1.6）ZTECORPORATION