Descripción del producto
24
2.8.4 Security
The OLT equipment enables a group of features that avoid anti-DOS (Denial of Service) attacks and fake customer Trojan mechanisms, namely:
ACL’s
White list support
IP Source Guard
MAC duplication
MAC/IP spoofing
Broadcast rate control
User isolation
2.8.4.1 ACL - Access Control Lists Support
ACL’s (Access Control Lists) avoid the customers to use certain MAC or IP addresses in order to avoid them to reach certain networks MAC/IP
groups. This feature is made by applying filters to source and/or destination MAC/IP addresses. These filters can be used to allow or drop the
packets from a user attendance.
ACLs limits
Up to 99 supported ACLs
Up to 128 supported rules
Up to 128 supported ACL Service Apply
Up to 128 supported ACL Port Apply
2.8.4.2 White List for Multicast Group Addresses
The OLT supports white list for multicast group addresses.
This list is used to select the upstream multicast service (VLAN) when a particular client requests a group address.
The maximum number of groups is currently limited to 1024, but can go up to 4096 in the future;
2.8.4.3 IP Source Guard
IP Source Guard provides source IP address filtering on a Layer 2 port to prevent a malicious host from impersonating a legitimate host by assuming
the legitimate host’s IP address. The feature uses dynamic DHCP snooping and static IP source binding to match IP addresses to hosts on untrusted
Layer 2 access ports.
IP Source Guard Limits
Up to 1024 supported entries
2.8.4.4 MAC Duplication
MAC duplication is used to check and control if a specific customer is trying to use other MAC addresses different from its addressed one. This is
a mechanism that detects duplicate MAC addresses. In order to avoid a copy of the BRAS, IPTV platform or other server MAC address, the system
gives priority to the MAC address learnt in the uplink ports (network side). If the duplicate MAC addresses are both in the client side, the system
forwards the traffic to the first customer that is using that MAC address.
Содержание OLT 769401
Страница 1: ...GPON OLT 8xPON 8xGbE 2x10GbE EN Ref 769401 User Manual w w w t e l e v e s c o m ...
Страница 2: ......
Страница 9: ...EN 9 ...
Страница 11: ...EN 11 ...
Страница 139: ...EN 139 Figure 6 9 SFP Module detailed information Figure 6 10 GPON Interfaces Status ...
Страница 149: ...EN 149 Figure 6 20 DHCP counters ...
Страница 473: ...EN 473 ...
Страница 474: ......
Страница 475: ......
Страница 476: ......
Страница 477: ...EN 477 ...
Страница 478: ...Descripción del producto 478 ...
Страница 479: ...EN 479 ...
Страница 480: ...Descripción del producto 480 ...
Страница 481: ...EN 481 ...
Страница 482: ...Descripción del producto 482 ...