GB/T 38798-2020 in English
VALIDTechnical requirements for security of integrated broadband access network
- Issued on:2020-04-28
- Implemented on:2020-11-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$175.00
| Standard No: | GB/T 38798-2020 |
| Document status: | VALID |
| Title in English: | Technical requirements for security of integrated broadband access network |
| Title in Chinese: | 综合宽带接入网安全技术要求 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 1~3 business days |
| Issued on: | 2020-04-28 |
| Implemented on: | 2020-11-01 |
| ICS Classification: | 33.040.50-Lines, connections and circuits |
| Chinese Classification: | M42-Communication line and equipment |
| Professional Classification: | GB-National Standard |
| Related Keywords: | security protection
typical configuration user plane security adjustable multicast suppression rate traffic packet three-dimensional security protection system integrated broadband access networks third-party security certification |
| Related Topics: | GBT38798
GB/T 38798-2020 |
《GB/T 38798-2020综合宽带接入网安全技术要求》由TC485（全国通信标准化技术委员会）归口，主管部门为工业和信息化部（通信）。
Introduction
Analysis of the core content of the standard
The GB/T38798-2020 standard builds a three-dimensional security protection system for integrated broadband access networks: user plane (frame filtering, message suppression), control plane (equipment authentication, anti-DOS attack), and management plane (access control, role management). For the first time, the standard includes electrical safety (insulation resistance <50MΩ) and environmental monitoring as mandatory requirements.
Comparison of key technical requirements
| Security dimension | Core indicators | Detection method | Typical configuration |
|---|---|---|---|
| User plane security | Adjustable multicast suppression rate | Traffic packet filling test | Uplink suppression is enabled by default |
| Control plane security | ARP proxy response time ≤50ms | Protocol analyzer | Layer 3 device forced to enable |
| Management plane security | SNMPv3 encryption strength | Packet capture decryption verification | Getting Started with AES-128 |
Implementation Difficulties and Solutions
Case: Controllable Multicast Implementation
When deploying Huawei MA5800 equipment, an operator increased the interception rate of illegal multicast sources to 99.6% through the combination of IGMP snooping + static multicast table. Specific configuration includes:
- Enable VLAN-based multicast filtering
- Set a whitelist of legal multicast sources
- Limit the multicast flow rate to 1Gbps/port
Analysis of standard evolution
Compared with the 2015 draft, the 2020 version mainly strengthens:
- Added SIP protocol two-factor authentication requirements
- Refer to the mandatory configuration of TLS1.2 for TR-069 channels
- Specify that the power switching service interruption time is ≤50ms
Compliance implementation recommendations
Phase-by-phase implementation path:
| Phase I (3 months) | Complete the deployment of basic security functions (MAC control, protocol speed limit) |
| Phase II (6 months) | Implement enhanced protection (SNMPv3 migration, role permission segmentation) |
| Phase III (12 months) | Pass third-party security certification (ISO27001/Level 2.0 Security Protection) |
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 44816.2-2024 in English
Technical requirements for interoperability of access network system—Part 2：10Gbit/s symmetric passive optical networks (XGS-PON)
2024-10-26 -
GB/T 37172-2018 in English
Test methods for access network equipment -- Interoperability of EPON system
2018-12-28 -
GB/T 46463-2025 in English
Test methods for access network equipment—10-Gigabit-Capable symmetric passive optical network (XGS-PON)
2025-10-31 -
GB/T 28509-2012 in English
Ultrafine coaxial cables with insulation diameter below 1 mm and cable assemblies
2012-06-29 -
GB/T 39577-2020 in English
Technical requirements for access network—10-Gigabit-capable passive optical networks (XG-PON)
2020-12-14
