Huawei Carrier Grade Platform (CGP) Version 1 Release 5 (Unique version identifier: CGP V100R005C01) patch V100R005C01SPC506

  • Category: Network management tools
  • Manufacturer: Huawei Technologies Co., Ltd.
  • Type: Product
  • Evaluating laboratory: Applus Laboratories
  • Certification Status: Certified
  • Certification Date: 2015-03-06
  • Standard Version: Common Criteria 3.1 release 3
  • Evaluation Level: EAL3

The TOE is Huawei’s Carrier Grade Platform, a software for the management of (cellular) core network devices, such as Home Location Registers, Mobile Softswitch
Centers, Service GPRS Support Nodes, or Call Session Control Functions. It is commonly used as a component throughout a number of Huawei networking products to offer management functionality for these products.

The central (server) side of CGP runs within a physical Operation and Management Unit (OMU) on top of a Linux operating system. OMUs are boards (blades) that get
inserted into network device cabinets (racks) which also contain application-specific boards, resulting in a product offering. Remote clients (a GUI, called LMT client) are available for management access to the server.

The major security features implemented by CGP and subject to evaluation are:
• Authentication. Operators using the GUI client to access the TOE in order to execute device management functions are identified by individual user names and authenticated by passwords.
• Role-based access control. CGP implements role-based access control, limiting access to different management functionality to different roles as defined in administrator-defined access control associations.
• Communications security. CGP offers SSL/TLS channels for FTP, and SOAP access to the OMU, as well as the encryption of X1/X2 channels for LIG communication. This includes the possibility to restrict remote sessions to the CGP server to specific client IP addresses.
• Auditing. Audit records are created for security-relevant events related to the use of CGP.
• Security function management. The TOE offers management functionality for its security functionality.


  • Declaración de Seguridad / Security Target:

    2012-04-ST pdf | 660.99 KB