Huawei 02354132 Datenblatt PDF herunterladen (Seite 35)

Packet Filtering

Packet filtering is used to filter out invalid or unwanted packets.

The S3700 filters packets based on user-defined rules. For example, it filters packets by checking

the MAC address, IP address, port number, and VLAN ID of packets. Packet filtering does not

check the session status or analyze the data. By filtering packets, the S3700 can effectively

control the packets passing through it.

4.6.3 Security Authentication

The 802.1x protocol is a port-based network access control protocol. It authenticates and controls

access devices on a LAN based on interfaces. A user device can access resources on the LAN

only after it passes the authentication on the access interface.

MAC address-based authentication controls the network access authority of a user based on the

access interface and MAC address of the user. The user does not need to install any authentication

client software. After detecting the MAC address of the user for the first time, the device starts

authenticating the user. During the authentication, the user does not need to enter the user name

or password.

4.7 MAC-Forced Forwarding

The access layer provides network connections between the user-side hosts and the enterprise-

side access routers (ARs), especially the reliable connections between the hosts with the Internet

or other IP networks.

The access layer can be divided into the user network and convergence network. The user

network is connected to the access node (AN) through a subscriber line, which is a physical line

and usually called "the first mile."

The subscriber line is then connected to the convergence network through the AN. In this manner,

the AN is the border between the subscriber line and the convergence network. User traffic is

centralized and aggregated on the convergence network, which is usually called "the second

mile." For details, see Figure 4-1.

Figure 4-1 Connections at the access layer

Aggregation

Network

Access

Routers

Access

Nodes

Subscriber

Lines

Customer

Premises

Networks

S3700HI Ethernet Switches

Product Description 4 Service Features

Issue 05 (2012-10-20) Huawei Proprietary and Confidential

1 2 ... 30 31 32 33 34 35 36 37 38 39 40 ... 59 60

Keine Kommentare

Huawei 02354132 Datenblatt Seite 35