Zte ZXR10 M6000 Series - Page 36

ZXR10M6000&T8000&8900ESecurityTarget
1.RADIUSauthenticationgroupisunreachable
2.RADIUSaccountingservergroupisunreachable
3.RADIUSbufferqueueexceedsthethreshold
lNTPalarmlog
1.TheclockofNTPserverandclientarenotsynchronizedACLalarm
lACLalarm
1.ACLaggregationistoolarge
lRIP/OSPF/IS-IS/BGPalarm
1.authenticationsuccess
2.authenticationfailure
Commandlogging:allactivitiesperformedbytheadministratorarerecordedinthe
Commandlog.
TheTOEisconguredtorecordallauditableevents.Logsareconguredinthefollowing
contexts:
1.Logle—Loglescontainlogeventmessagestreams.
2.SNMPtrapgroups—SNMPtrapgroupscontainanIPaddressandcommunitynames
whichidentifytargetstosendtrapsfollowingspeciedevents.
3.SYSLOG—InformationissenttoaSYSLOGhostthatiscapableofreceivingselected
SYSLOGmessagesfromanetworkelement.
4.Eventlters—Aneventlterdeneswhethertoforwardordropaneventortrapbased
onmatchcriteria.
LoglevelisassociatedwiththeAlarmlogtocontrolwhicheventswillbeloggedinthe
eventlogbasedonseveritywhereloglevelshallbeconguredatleast6(basicloglevel).
lFAU_GEN.2Useridentityassociation
TheTOEisabletoassociateeachauditableeventwiththeidentityoftheadministrator
thatcausedtheevent.TheCommandlogrecordisassociatedwithanadministrator.
Othertypesoflogsareassociatedwithunauthenticateduser/application.
lFAU_SAR.1Auditreview
Theadministratorreadsalltheinformationinthelogdestinations(i.e.,memory,ora
leonthelocallesystem)viaCLIcommands.
Theadministratorexecutesthefollowinglogcommands:
1.CongurationCommands;
2.LogFileCommands;
3.AlarmlevellterCommands;
4.SYSLOGCongurationCommands;
5.SNMPTrapGroups;
6.ShowCommands;
lFAU_STG.1,FAU_STG.4ProtectedaudittrailstorageandPreventionofauditdata
loss
TheTOEprotectsstoredauditrecordsstoredinsidetheTOEfromunauthorized
deletionandmodicationsbyonlyallowauthenticatedandauthorizedadministrator
6-2
SJ-20110815105844-030|2011/08/19（R1.6）ZTECORPORATION