Huawei Technologies Co. Ltd EM820W 사용자 설명서
The local attack defense and source tracing functions protect the ARs against attacks. When an
attack occurs, these functions ensure non-stop service transmission and minimize the impact of
the attack on network services.
attack occurs, these functions ensure non-stop service transmission and minimize the impact of
the attack on network services.
PKI
The public key infrastructure (PKI) is a system that generates public keys and digital certificates,
and verifies identities of certificate subjects to ensure information security. PKI issues digital
certificates that bind public keys to respective user identities by means of a certificate authority
(CA).
and verifies identities of certificate subjects to ensure information security. PKI issues digital
certificates that bind public keys to respective user identities by means of a certificate authority
(CA).
AAA
The ARs support Authentication, Authorization, and Accounting (AAA).
l
Authentication
Verifies users' identities.
Verifies users' identities.
l
Authorization
Grants different rights for different users to restrict the services that can be used by users.
Grants different rights for different users to restrict the services that can be used by users.
l
Accounting
Records information about network service usage of users, including service type, start
time, and traffic volume.
Records information about network service usage of users, including service type, start
time, and traffic volume.
For details about security features, see Feature Description - Security.
3.2.5 QoS
Traffic Policing
Traffic policing discards excess traffic to limit the traffic within a specified range and to protect
network resources as well as the carriers' interests.
network resources as well as the carriers' interests.
The ARs use committed access rate (CAR) to perform traffic policing. They support dual-rate-
three-color markers and precise bandwidth management.
three-color markers and precise bandwidth management.
Traffic Shaping
When the rate of an interface on a downstream device is slower than that of an interface on an
upstream device or burst traffic occurs, traffic congestion may occur on the downstream device
interface. Traffic shaping can be configured on the interface of an upstream device so that
outgoing traffic is sent at even rates and congestion is avoided.
upstream device or burst traffic occurs, traffic congestion may occur on the downstream device
interface. Traffic shaping can be configured on the interface of an upstream device so that
outgoing traffic is sent at even rates and congestion is avoided.
The AR supportstraffic shaping adaptation and level-3 traffic shaping. Three-level shapers
include the flow queue shaper, subscriber queue shaper, and port queue shaper.
include the flow queue shaper, subscriber queue shaper, and port queue shaper.
Congestion Management
If a network transmitting both delay-sensitive and delay-insensitive services is congested
intermittently, congestion management is required. However, if a network is always congested,
bandwidth needs to be increased. Congestion management sends packet flows by using queuing
and scheduling.
intermittently, congestion management is required. However, if a network is always congested,
bandwidth needs to be increased. Congestion management sends packet flows by using queuing
and scheduling.
An interface on AR has four or eight default queues for outgoing packets. A fixed FE interface
on AR1220 has four default queues and each of other interfaces has eight. LAN-side interfaces
on AR1220 has four default queues and each of other interfaces has eight. LAN-side interfaces
Huawei AR G3 Series Enterprise Routers
Product Description
Product Description
3 Product Characteristics
Issue 02 (2012-04-20)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
27