Zte ZXR10 5900 Product Description page 66

ZXR10 5900 5200 Product Description
router, and it can receive commands from the Operation & Maintenance subsystem.
Both FTP and TFTP supports server/client function. The server can receive the
connections from other clients and instructions and perform file transfer. The client
function allows the router system to communicate with the hosts (routers) with the server
function, for performing such tasks as software file transfer.
TELNET provides services for the Operation & Maintenance subsystem, to allow the
maintenance personnel of the router to manage the router via TELNET. Both TELNET
and FTP use primitives provided by the lower-layer TCP to receive and transmit packets.
TFTP uses the primitives provided by the lower-layer UDP to receive and transmit
packets.
4.3.3.8 Statistics and Alarm Subsystem
The statistics and alarm subsystem is also a function that the ZXR10 59/52 must provide.
This subsystem interacts with all other subsystems of the software. This system receives
statistics and alarm configuration information from management and maintenance
subsystem. All software subsystems send related statistics and alarm information to the
statistics and alarm subsystem, which performs appropriate operations according to the
configuration information of the statistics and alarm based on the alarm levels. For
example, it may write logs to store alarm information through file operation primitives
provided by ROS or notify the maintenance terminals to display the alarms, or send the
IP information of the alarms to the specified destination address via the IP route
subsystem. It stores the statistics and provides the interface by which the maintenance
and management subsystem can query it.
4.3.3.9 Security Subsystem
For protection from virus on the network, the ideal conditions would be that user-level
virus detection can be provided, so it is expected that the user can install patches and
anti-virus software. However, in many cases, users cannot accomplish this task, so the
switch is required to provide network-level virus detection and alarming.
In addition, the switch must enhance its protection against attacks from malicious users,
so as to avoid switch and network security breach. ZXR10 59/52 supports network-
based security protection mechanisms. Therefore, in our system, security detection
function is distributed among the modules, instead of providing a dedicated IDS module.
In ZXR10 59/52 series, the security subsystem performs the following functions:
 Detects viruses that can cause network traffic surge such as "SQL worm", "code
red" and "Blast", and produces appropriate alarm or shuts down the user port
Prevents ARP Spoofing from users

 MAC address flood protection, for which it limits the number of MAC addresses of
the ports
 Setup broadcast packet threshold of the ports
Mixed ACL filtering of L2, L3, and L4

60 © 2010 ZTE Corporation. All rights reserved. ZTE Confidential Proprietary