No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR500, AR510, AR531, AR550, AR1500, and AR2500 Security Hardening And Maintenance Guide

This document provides guidance for strengthening network and device security in terms of network security risks, security architecture, and security hardening policies. It also provides guidance for routine maintenance of device security in terms of the management, control, and forwarding planes.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Security Defense Capabilities of the Management Plane

Security Defense Capabilities of the Management Plane

To ensure the normal running of the operating system and management applications, the management plane of AR devices provides the following security defense capabilities:
  • System right management and control
  • Account right management and control
  • Log recording system
  • Security management channel using Simple Network Management Protocol Version 3 (SNMPv3), Secure Shell (SSH), or Secure File Transfer Protocol (SFTP)
  • Advanced encryption algorithm
  • Multi-level information isolation
  • Terminal Access Controller Access Control System (TACACS) authorization management
  • Authentication, Authorization and Accounting (AAA)

The management plane controls user rights based on roles to ensure that users at different levels have different rights.

AAA can be used to control system rights in different application scenarios.

AR devices have a complete log system. The log system can record all system configurations and all exceptions in the running system, which facilitates subsequent audit.

Updated: 2019-05-06

Document ID: EDOC1000097300

Views: 5155

Downloads: 72

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next