Zte ZXR10 ZSR V2 Series - Page 45

ZXR10 ZSR V2 Series Router Product Description
ZTE Confidential & Proprietary 43
AAA supports four authorization types:
 Direct trust authorization: Directly authorized without account.
 Local account authorization: make authorization based on locally configured
user account
 TACACS+ authorization: TACACS+ can divide authentication and authorization.
TACACS+ server can authorize the users.
 Authorization after successful RADIUS authentication: RADIUS protocol
authentication and authorization cannot be divided.
Protocol Security Verification
ZXR10 ZSR V2 implements complete protocol security verification for SSH, PPP, routing
protocol, and SNMP protocols based on different protocol security verification
requirements.
SSH protocol security verification:
 It supports MD5-based cipher text authentication
 It supports SHA1-based cipher text authentication
PPP access security verification
 It supports PAP-based verification
 It supports CHAP verification
Routing Protocol security verification
 RIP v2, OSPF, and IS-IS support plain text authentication
 RIP v2, OSPF, IS-IS, and BGP support MD5-based cipher text authentication
 RIPng, OSPFv3, and BGP-4+ support MD5-based cipher text IPSec AH
authentication
 RIPng, OSPFv3, and BGP-4+ support SHA1-based cipher text IPSec AH
authentication
SNMP security verification:
 SNMPv3 encryption and authentication.