Zte ZXDSL 9210 (V3.1), Техническое руководство

Страница: 91 / 182

Chapter Erro! Estilo não definido. Erro! Estilo não definido.
5-5
4. SNMP PROXY module
This module is responsible for unified management of multiple pieces of
equipment and forwards SNMP-related messages between the SCBF and
embedded BAS.
5.4.2 Subscriber Management Subsystem
The subscriber management subsystem provides authentication and authority
capabilities over VDSL and ADSL access subscribers, and delegates authorities for
access to subscriber connection access ports according to the RADIUS Server
authentication result. The subsystem provides WEB authentication and 802.1x
authentication modes, and supports accounting by the bandwidth, duration and port.
The subscriber management subsystem consists of the 802.1x authentication module
and Radius Client module. They are described as follows:
1. 802.1x authentication module
This module implements Client PAE and authentication system PAE functions
stipulated in 802.1x Standards. In initial status, the authentication function of the
system and that of each physical port are both disabled. When the authentication
functions of the system and ports are enabled, service functions of ports
connected with end subscribers are disabled and only EAPOL data are allowed
to pass the switch port. Users log on to the switch via Client software and the
switch sends the ID and password provided by users to the RADIUS server. If
the user ID and password are successfully authenticated, the service functions of
corresponding switch ports of the will be enabled to allow users to gain normal
access to network. The 802.1x authentication module is implemented on the
SCBF.
2. Radius Client module
Remote Authentication Dial-In User Service (RADIUS) is a centralized remote
AAA protocol used extensively. It provides AAA functions for dial-up PPP and
terminal service access and is applicable to user management of the NAS
equipment, routers, and Ethernet switch. The RADIUS protocol adopts
Client/Server structure, adopts UDP as its transmission protocol, and is located
at the application layer of the TCP/IP stack.