Zte ZXR10 M6000 Series - Page 40

ZXR10M6000&T8000&8900ESecurityTarget
TheeventlogisconguredtosendeventstooneSYSLOGdestination.SYSLOG
destinationshavethefollowingproperties:
1.SYSLOGserverIPaddress.
2.TheUDPportusedtosendtheSYSLOGmessage.
3.TheSYSLOGFacilityCode(0-23):default16(local0).
4.TheSYSLOGSeverityThreshold(0-7)-eventsexceedingtheconguredlevelwill
besent.
TheAdministratorusesCLIsyntaxtoconguretheTOEtosendSNMPtrap.
Subjectandinformationsecurityattributesusedare:
1.Sourcesubjectsecurityattributes:and
2.Destinationsubjectsecurityattributes:
3.IPaddressoftheSNMPtrapreceiver;
4.UDPportusedtosendtheSNMPtrap;
5.SNMPv3usedtoformattheSNMPnotication;and
6.SecuritynameandlevelforSNMPv3trapreceivers;
lFMT_MSA.3Staticattributeinitialization
Bydefault,thereisnorouting/lterruleconguredontherouterforUNAUTHENTICATED
SFP ,alsothereisnologserversetupforEXPORTSFP .
lFMT_SMF.1Specicationofmanagementfunctions
TheAdministratorperformsthefollowingsecuritymanagementfunctions:
1.start-upandshutdown;
2.create,modify,delete,andviewcongurationdata
3.empty,andreviewtheauditlog
4.create,delete,modify,andviewlteringrules;
5.performcongurationbackupandrestore;
6.useraccountmanagement;
7.modifydate/time;
8.trustedroutermanagementand
9.securitymanagementfunctionslistedinFMT_MOF .1Managementofsecurity
functionsbehavior.
FMT_SMR.1Securityroles
TheTOEallowsallauthorizedadministratorswiththeneededauthoritytocongureand
controltheassociatedfeatures.Onlyauthenticatedadministratorsarepermittedtouse
ormanagetheTOEresources.OnlyauthenticatedadministratorsexecutecertainCLI
commands.Authorizationfeaturesallowadministratorstocongureadministratorproles
whichareusedtolimitwhatCLIcommandsareexecutedbythespecicauthenticated
administrator.OnceanadministratorhasbeenauthenticatedtheTOEisconguredto
performauthorization.Eachcommandhasacorrespondingprivilegelevel(0-15)which
canbemodiedbytheadministrator.Theselevelsassociatewithusers.Anauthenticated
usermustbelongtoacertainprivilegelevel.Anauthenticatedadministratorshallonly
6-6
SJ-20110815105844-030|2011/08/19（R1.6）ZTECORPORATION