ZXR10 ZSR V2 Series Router Product Description
44 ZTE Confidential & Proprietary
3.7.6 URPF
ZXR10 ZSR V2 supports uRPF (Unicast Reverse Path Forwarding) to prevent network
attack based on source address spoofing. Among the common DoS attacks, there’s one
source address spoofing. The attacker spoofs a source address (usually the address of a
legal network) to get access to the attacked equipment so as to prevent the attacked
equipment from providing normal services. uRPF can effectively prevent this attack.
ZXR10 ZSR V2 supports the following uRPF features:
It supports Strict RPF check
It supports loose RPF check
It supports loose RPF check that ignores default route
It supports ACL check
3.8 Network Reliability
3.8.1 Ping Detect
Ping Detect is also called automatic detect. It uses request/response packet of ICMP to
detect the reachability of the destination, and returns the detect result to the backup
function unit that associated with it, so as to trigger the main/standby switching and
provides backup based on the reachability of network layer application.
Ping Detect solves this problem. Ping Detect uses request/response packet of ICMP to
detect the destination reachability of the network application. The result (reachable or
unreachable destination ICMP) can be returned to the associated unit such as static
route backup, dial backup or VRRP to trigger the corresponding main/standby switching.
3.8.2 BFD
An important function of network equipment is to quickly detect the communication failure
between the adjacent systems, and to create other paths as soon as possible. BFD
(Bidirectional Forwarding Detection) protocol perfectly achieves this goal. The main
function of BFD is to provide a low-load quick failure detection mechanism for the
To Next Page
Loading...
