Principle Of Security Data Plan - Huawei SmartAX MA5603T Configuration Manual

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
Protocol Type Protocol Description
VTP/CDP
Unknown
multicast
Remarks 1: The configurations take effect only after the configured VLAN service profile is
bound to a VLAN. Command: vlan bind service-profile vlan-id profile-id

13.2.5 Principle of Security Data Plan

Security planning covers planning of system security, user security, and service security data.
An appropriate security plan ensures normal running of services.
NOTE
l The device provides complete security measures, but not all security measures need to be deployed. Only
the security measures that meet the following requirements need to be deployed:
l The security measures can be used on the live network.
l The security measures are easy to deploy.
l The security measures are effective.
l Different ONUs support different security features. Select the security feature recommended in this topic
according to actual ONU capabilities.
Issue 01 (2014-04-30)
OSPF
RIP
VTP/CDP protocol is a
proprietary protocol of
other vendors. It is used
to discover neighbors
and establish neighbor
relationship.
Planned by carriers for
special purposes
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
13 FTTO Configuration (Large-sized Enterprise Access)
Configuration (remarks 1)
The function of transparently transmitting
OSPF packets must be enabled.
Configuration example:
huawei(config)#vlan service-profile
profile-id 1
huawei(config-vlan-srvprof-1)#ospf
tunnel enable
The function of transparently transmitting RIP
packets must be enabled.
Configuration example:
huawei(config)#vlan service-profile
profile-id 1
huawei(config-vlan-srvprof-1)#rip tunnel
enable
The function of transparently transmitting
VTP/CDP packets must be enabled.
Configuration example:
huawei(config)#vlan service-profile
profile-id 1
huawei(config-vlan-srvprof-1)#vtp-cdp
tunnel enable
The function of transparently transmitting
unknown multicast packets must be enabled.
Configuration example:
huawei(config)#multicast-unknown policy
service-port 1 transparent
1264