Vpn; Security - Huawei AR500 Product Description

Huawei AR500 Industrial Switch Routers
Product Description
Electricity Networking
l
l
l
OAM
An AR500 provides configuration management, terminal maintenance, broadcast timing, and
user management.

3.2.3 VPN

The AR500 provides an IP security (IPSec) mechanism to ensure high-quality, interoperable,
and cryptology-based security for communication processes. The two parties in communication
can encrypt data and authenticate the data source at the IP layer to ensure the confidentiality and
integrity of the data and prevent replay on the network.
IPSec implements these functions by using two security protocols: Authentication Header (AH)
and Encapsulating Security Payload (ESP). Internet Key Exchange (IKE) provides automatic
key negotiation, SA establishment, and SA maintenance functions to simplify IPSec use and
management.
The AR500 supports IPSec VPN and provides high reliability transmission tunnels. In addition,
the AR500 uses Generic Routing Encapsulation (GRE) and Layer 2 Tunneling Protocol (L2TP)
to support the following VPN services:
l
l
l
l
l
l
l
For details about VPN features, see Feature Description - VPN.

3.2.4 Security

ACL
An access control list (ACL) defines a series of filtering rules based on a certain policy, the ACL
permits or forbids the passage of data packets.
The AR500 can use ACL rules to filter packets.
Firewall
l
Issue 01 (2013-5-10)
An AR500 can connect to downstream smart meters through RS485 lines.
AR500s can be connected through FE.
An AR500 can connect to upstream front end processors through FE/SFP lines.
GRE VPN
IPSec VPN
SSL VPN
L2TP VPN
DSVPN
GRE over IPSec VPN
L2TP VPN over IPSec VPN
ACL-based packet filtering
ACL-based packet filtering is used to analyze the information of the packets to be
forwarded, including source/destination IP addresses, source/destination port numbers, and
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 Product Characteristics
14