Scenario
Recommended Clock Synchronization Solution
Ethernet base station access
service (in QinQ VLAN
mode)
Synchronous Ethernet clock
1PPS+ToD time (remark 1)
1588v2 time
Remark 1: Ethernet base stations may require time synchronization.
14.2.5 Principle of Security Data Plan
Security planning involves planning for system security, user security, and service security.
Security policy ensures normal services.
NOTE
l
The device provides complete security measures, but not all security measures need to be deployed. Only
the security measures that meet the following requirements need to be deployed:
l
The security measures can be used on the live network.
l
The security measures are easy to deploy.
l
The security measures are effective.
l
Different ONUs support different security features. Select the security feature recommended in this topic
according to actual ONU capabilities.
System Security
Security
Vulnerability
Solution
Description and Usage
Suggestion
DoS attack
Enable the anti-DoS-attack
function for OLT and
MDU.
After the anti-DoS-attack function is
enabled, control packets are
monitored and those exceeding the
number threshold are discarded.
Use this solution for new site
deployment.
IP attack
Enable the anti-IP-attack
function for OLT and
MDU.
After the anti-IP-attack function is
enabled, a device discards the IP
packets received from the user side
whose destination IP address is the IP
address of the device, and therefore
the system is protected.
Use this solution for new site
deployment.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
14 FTTM Configuration (Base Station Access)
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1372
