System Description
XSR Getting Started Guide 1-5
Security
•
Stateful inspection firewall engine
•
FTP, H.323, and RPC (SUN and Microsoft) ALG support
•
Application commands for FTP, SMTP, & HTTP
•
Firewall logging and authentication
•
Firewall interaction with NAT & VPN
•
Standard and Extended Access Control Lists
•
Denial of Service (DoS) protection
•
AAA for firewall, Console, Telnet, SSHv2, PPP and VPN users
•
AAA per-interface configuration
•
AAA debugging
•
Dynamic Firewall configuration
•
Onboard URL filtering
PPP
•
Sync and asynchronous communications modes accepted
•
Authentication of peer entities via Password Authentication Protocol (PAP)
•
Challenge Handshake Authentication Protocol (CHAP)
•
Microsoft Challenge Handshake Authentication Protocol (MS-CHAP)
•
IP Address can be assigned from remote device, and the device will support IP address
assignment to a remote device. Pools can be configured locally or from a separate server
(DHCP).
•
Multilink PPP (MLPPP): RFC-1990
•
Multi-Class MLPPP: RFC-2686
•
Point-to-Point Protocol over Ethernet (PPPoE) and sub-interface monitoring
•
Remote Auto Install over PPP
Frame Relay
•
DTE support for User Network Interface (UNI) over Frame Relay PVC connections
•
10-bit DLCI addressing using a 2-byte DLCI header
•
Per DLCI IP QoS support
•
Rate enforcement (CIR) with automatic rate fallback via traffic/adaptive shaping when the
network is congested. Automatically restores normal rates when congestion removed
•
Congestion control: Backward and Forward Explicit Congestion Notification (BECN/FECN)
•
Standard LMIs: ILMI, ANSI Annex D, CCITT Annex A and:
•
Auto
option for LMI detection/adaptation
•
None
option for directly connecting XSRs
