Alcatel-Lucent 7705 SAR, Руководство по управлению системой

Страница: 35 / 356

Security
7705 SAR OS System Management Guide 35
Exponential Login Backoff
A malicious user can gain CLI access via a dictionary attack: using a script to try “admin”
with any password.
The 7705 SAR increases the delay between login attempts exponentially to mitigate attacks.
It is applied to the console login. SSH and Telnet sessions terminate after four attempts.
Encryption
Data Encryption Standard (DES) and Triple DES (3DES) are supported for encryption.
• DES is a widely used method of data encryption using a private (secret) key. Both
the sender and the receiver must know and use the same private key.
• 3DES is a more secure version of the DES protocol.
802.1x Network Access Control
The 7705 SAR supports network access control of client devices (PCs, STBs, and so on) on
an Ethernet network using the IEEE 802.1x standard. 802.1x is known as Extensible
Authentication Protocol (EAP) over a LAN network or EAPOL.
Refer to the 7705 SAR OS Interface Configuration Guide for more information about IEEE
802.1x.