Security
Vulnerability
Solution
Description and Usage
Suggestion
MAC attack
Enable the anti-MAC
spoofing function for OLT
and MDU.
After anti-MAC spoofing is enabled,
the system can prevent users from
forging IP addresses to perform
malicious attacks.
Use this solution for new site
deployment.
IP spoofing
Enable the anti-IP spoofing
function for MDU.
After anti-IP spoofing is enabled, the
system can prevent users from forging
IP addresses to perform malicious
attacks.
Use this solution for new site
deployment.
Service Security
Security
Vulnerability
Solution
Description and Usage
Suggestion
Unauthorized
broadband access of
small enterprises
(IPoE)
DHCP option 82 is enabled
on OLT and MDU, and the
BRAS implements user
authentication based on the
RAIO information.
In the DHCP option 82 mode, user's
physical location is added to the
option 82 field carried in the DHCP
request packet initiated by a user. The
physical location, used for user
authentication on the upper-layer
authentication server, can help
implement the following functions:
l
The DHCP relay forwards DHCP
response packets to devices with
specified CID and RID.
l
Prevents DHCP address
exhaustion.
l
Achieves static allocation of
DHCP addresses.
l
Implements anti-IP spoofing.
l
Implements anti-user ID spoofing.
l
Implements anti-MAC spoofing.
Use this solution for the DHCP
Internet access service.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
12 FTTO Configuration(SOHO and SME)
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1093
