Security Controls; Qos Guarantee - Zte ZXR10 2920 User Manual

Security Controls

User Security The following are user level security control:
Control
Equipment The following are the equipment level security control:
Level Security
Network The following are the network security control:
Security

QoS Guarantee

Applications of QoS are shown below:
IEEE 802.1x implements dynamic and port-based security
provides the user
MAC/IP/VLAN/PORT combines at random, and prevent illegal
user to accessing the network.
Segregating the ports is helpful to make sure that users can
not monitor or access to other users on the same switch.
DHCP monitoring prevents spiteful users deceiving the server
and sending spurious address, so it can start protecting IP
source and create a binding table for the IP address of the
user, MAC address, ports and VLAN to prevent user deceiving
or use IP address of other users.
CPU security control technology can resist DoS attack from
CPU.
SSH/SNMPv3 protocol
security.
Multilevel security of console can prevent unauthenticated
users changing the switch configuration.
RADIUS authentication may carry on the common control to
the switchboard.
ACL based on port or Trunk makes it possible for users to
apply security strategy to the ports of switches or Trunk.
Binding MAC address and the filtration based on source or
destination supply effective control over the flux based on
address.
Port MIRROR function is an effective tool for network
management analyses.
Standard 802.1p QoS and DSCP field sort label and sort
again based on single group with source and destination IP
address, source and destination MAC address, and TCP/UDP
port number.
Queue schedule arithmetic, Strict Priority(SP) & combination
schedule.
Support CAR（Committed Access Rate）function. Manage the
asynchronous upward and downward data stream from end
Confidential and Proprietary Information of ZTE CORPORATION
Chapter 2 System Overview
ID authentication
supplies network
function and
management
5