Huawei H19-424_V1.0 HCSP-Presales-Campus Network Planning and Design V1.0 Exam Practice Test

end. DT4: EVPN VPLS unicast meteor

end.dx2: the L2AC interface used to divert traffic to the egress PE

end. X SID: A link used to direct traffic to a specific node

end SID: Redirects traffic to nodes based on the IP routing table

High-density venues: Huawei's original factory delivery or original factory supervision and delivery (CSP is the delivery entity, and Huawei provides engineering survey, planning, and installation training services)

Wireless backhaul: CSP delivery

Massive indoor/outdoor scattered sites: Demonstration sites (at least 5%) are delivered under the supervision of Huawei's original factory, and the rest of the sites are delivered by CSPs

Campus network: Huawei's original factory/CSP delivery

Support setting the active/standby link based on the application/application group, andintelligently select the link for data forwarding

LTE can only be used as an escape link

The link intelligent handover conditions include packet loss, delay, and jitter

Support bandwidth conditional traffic selection

Portal authentication, MAC address authentication, and 802.1X authentication are supported

Portal page customization is not supported, but it supports docking with third-party Portal servers

The authentication data is transmitted using HTTP2.0 and Radius protocols, and the configuration data is transmitted using the Netconf protocol

Support docking with social media such as Weixin

Support 2G large cache to cope with high burst business traffic.

It can be used as a remote module for the central switch to achieve simplified networking.

It supports advanced features such as VxLAN and MPLS, real-time telemetry data collection, and network O&M visualization, which can be widely used in scenarios such as medium-sized campus aggregation and small campus cores.

3 power supply design, support N+1 redundancy, full 802.3bt90W PoE++ power supply for all ports, and the maximum PoE output power of the whole machine can reach 2268W, adapting to the power supply needs of massive terminals.

AC-WAN

ESIGHT

U2000

uTraffic

Microwave oven

Bluetooth headset

Infrared sensor

Cordless phone working in the 2.4G frequency band

When the authentication point and the group policy execution point are not on the same device, you need to use the policy linkage function.

In the policy linkage scenario, you need to set the downstream port type of the Edge device to Extended Access Switch

The policy linkage function means that no matter where you go, the permission to access resources is the same, and it is decoupled from the IP address.

When the authentication point, access point, and group policy execution point are all connected to the device, the policy linkage function should be used

Global services such as local load tuning and load balancing of the LeaderAP are limited by the performance of the AP, and the specifications of the APs that can be managed by theLeaderAP are limited

If the specifications are exceeded, if APs are not grouped, APs will be randomly grouped, and adjacent APs and APs on the same floor may be assigned to different groups, which will affect global services such as tuning and load balancing

AP groups in the current version are grouped through AP management VLANs, and APs in the same group need to have the same management VLANs

The AP tuning group division will be reflected on the controller of the current version

The COST configuration of the MSTP link of the remote operator is larger, and it is recommended to configure 1000 to avoid traffic bypassing through the WAN link - the test is wrong

The COST configuration of the link of WDM or bare fiber in the same city is the second smallest, and it is recommended to configure 200 to ensure that the route calculation is secondary to the same city link

The COST value of the local link is the smallest, and it is recommended to configure 10 toensure that the route calculation gives priority to the local link test error

The link cost between the RR and the PE is extra-large, and it is recommended to set 10,000 to ensure that the RR device is only responsible for control plane route reflection and does not forward traffic

In the overlay interconnection solution, it is recommended to run the VRRP VRRP virtual address between the two borders as the gateway for wireless users

During wireless centralized forwarding, the WAC and the border need to manage IP communication and service VLAN communication, that is, the underlay and overlay need to be connected.

During wireless local forwarding, only the management IP address needs to be communicated between the WAC and the border, that is, the underlay is connected.

Supported networking: WAC dual-node hot standby (VRRP dual-node hot standby or dual-link hot standby), and dual-border port sub-networking, recommended dual-node VRRP hot standby: In multi-campus interconnection LAN-WAN convergence scenarios, refer to the following topology

The planning and design tool is used for after-sales planning and cannot be used before sales

When the equipment model cannot be used, you can feedback it in the tool platform

The tool can ensure the logical consistency and data consistency of the design

In the case of large or frequent changes in the network, the old project can be retained and the new project can be designed

If the Flag value of the migration attribute in the MAC address route is 1, it indicates a static MAC address, and the static MAC address is preferred.

When a MAC address route is migrated, the large sequence number in the MAC migration attribute is preferred.

and MAC address routes are filled with two labels (that is, both mplslable1 and mplslable2 are valid in packets).

The Route Distinguisher value (RD value) of the MAC route is generated by the value configured by the evpn source-address

CloudEngine S series switches

CE series switches in data centers

WLAN AP

AR series routers

USG series firewalls

Ethernet A-D Route(Type 1)

Ethernet Segment Route(Type4)

MAC/IP Advertisement Route(Type2)

Inclusive Multicast Route(Type3)

O&M capability: support restart operations on distributed switches: support reporting alarms for failed upgrade of distributed switches. Control capability: Configurations can be directly delivered to distributed switches (remote modules).

Control capability: support direct configuration delivery to distributed switches (remote modules).

Management capability: You can view the information of the distributed switch based on the central switch, including the ESN, model, online status, interface directly connected to the central switch, and the port list information of the distributed switch itself.

Monitoring capability: You can view the memory usage, storage space usage, and temperature of distributed switches, as well as the running status, rate, flow rate, packet statistics, and bandwidth utilization of distributed switch ports.

NCE-Campus supports the configuration of firewall security group policies.

When a user passes the NCE-Campus authentication or the permission changes, NCE-Campus synchronizes the user name, IP-group, and IP address information to FW, and FW identifies all user groups based on the mapping relationship between IP address, user name, and IP-group, and executes the corresponding security group policy.

Reuse the current online behavior management process, and add lP-Group information to the synchronization information of NCE-Campus and firewall.

When the user goes online and ages in FW, FW actively queries the online user to the NCE-Campus server to keep the IP-Group and other information at both ends synchronized

Load sharing

VPN FRR

PCEP

TE HSB

The maximum number of XSIC slots can reach 4.

The maximum number of WSIC slots can reach 4.

4 SIC slots.

Dual master control and double forwarding

The number of APs is greater than 50 or equal to 0

The number of APs is greater than 100 or equal to 0

When the signal strength in the floor is too low

In the case of insulating obstacles

1

2

3

4

In a virtualized network, different service networks can be distinguished by different VNs

Virtual networks are isolated from each other by default

Independent business units can be used as a separate virtual network

The isolation requirements caused by the difference of user identities in the same department can be realized by dividing different virtual networks

Metal (80mm)

Brick wall (120mm)

Bulletproof glass (120mm)

Wooden door (40mm)

Load the FI license

Load the NCE license

Load the FC license (virtual machine) license

Configuration service exception. Contact maintenance engineere（netconf communication failed）

Service process faied

The service is abormal

Unrecongnizeinformation

CloudEngine S series switches

CE series switches in data centers

WLAN AP

AR series routers

USG series firewalls

Netconf

HTTP

HTTP2.0

HTTPS

L3 shared exit

L3 exclusive export

L2 shared exit

L2 exclusive export

For the Locator CIDR block planning of SRv6, the appropriate mask should be set according to the number of IPv6 SIDs that may be used by the device.

loatos svV6_locator ipu6-prelix21.DB8ABCD: .b4 static 32, Locator is 2001.DB8.ABCD:, length 64 bits, static segment occupies 32 bits, dynamic segment occupies 32 bits args field occupies O bits. The starting value of the state segment is: 2001:DB8:ABCD:0000:0000:0000:C

Locator SID supports static configuration or dynamic allocation, end-op and end-m must be statically configured, and static configuration is also recommended for end and end.x, which is convenient for network O&M. Other SIDs can be assigned dynamically.

Devices at the same site belong to the same large network segment with the same prefix, and different devices are assigned to the small network segment with the same prefix in the large network segment.

The HRP backup tunnel replaces the original V5HSB backup tunnel, supports multiple HRP tunnels, and the HRP multi-tunnel is redundant and highly reliable: supports configuration synchronization.

HRP supports fast switching to detect heartbeat vlanif down and achieve second-level switching.

HRP independently completes the active/standby state negotiation, and the HRP protocol forwarding plane is unloaded with high-priority protection to prevent the active/standby state oscillation in overload conditions.

Tunnel-level security encryption, support AES256 tunnel encryption, business data does not need to be encrypted by yourself.

Delete it directly in NCE-Campus

Add the command line on the device, and then delete it through NCE-Campus

No other operations are required, NCE-Campus will reconcile

ZIP file

LLD files

Configure the script

Project acceptance documents