Huawei H19-424_V1.0 HCSP-Presales-Campus Network Planning and Design V1.0 Exam Practice Test

L3 shared exit

L3 exclusive export

Shared export

L2 exclusive export

NCE-Campus supports the configuration of firewall security group policies.

When a user passes the NCE-Campus authentication or the permission changes, NCE-Campus synchronizes the user name, IP-group, and IP address information to FW, and FW identifies all user groups based on the mapping relationship between IP address, user name, and IP-group, and executes the corresponding security group policy.

Reuse the current online behavior management process, and add lP-Group information to the synchronization information of NCE-Campus and firewall.

When the user goes online and ages in FW, FW actively queries the online user to the NCE-Campus server to keep the IP-Group and other information at both ends synchronized

The RR must be redundant, and at least two RR devices must exist on the live network. Prevent network-wide service interruption caused by the failure of only one RR device on the entire network.

Try to choose an independent RR, which can be deployed on a single device in the independent RR scenario.

Use the RR model recommended in the specification list;

The Edge should be dual-uplink to the two RR devices to achieve egress backup;

All backbones P(P) 1 group

1 GROUP OF PE (BR-PE) in all branches

1 GROUP OF PE (DC-PE) for all data centers

1 group for all RR devices (RR).

Router Node

FW Node

Border Node

Edge Node

ORIGIN

MED

LocalPre

AS_PATH

AC_VI

AC_bk

AC_BE

AC_VO

A1::1-A1::FFFF:FFFF

A1::1-A1:-FFFF

A1:1-A1.. FFFF:FFFF:FFF

A1::1:0:0-A1::FFFF:FFFF:FFFF:FFFF

CloudEngine S series switches

CE series switches in data centers

WLAN AP

AR series routers

USG series firewalls

Four-plane networking

Two-plane networking

Three-plane networking

Through this tool, you can restore the user's existing network networking and service characteristics

It is mainly used to generate configuration scripts in batches

It is mainly used to specify the relocation plan and design the networking structure of the new network

The above statements are correct

Policy service, which provides the ability to configure policies, mainly configures access policies between security groups and security groups, integrates AC3.0, and AC1.0 is optional

Authentication & Portal service, which supports authentication, authorization, and accounting capabilities as an AAA server, is integrated in AC3.0 and AC1.0 is optional, in which billing depends on a third party

The P-Group synchronization service, as the control plane of the IP-Group, provides the collection and distribution of IP and security group correspondence, and is integrated in AC3.0 and AC1.0

Policy execution points and authentication points can be deployed on different physical devices.

If you already have a tool, you can fully trust the tool, and you don't need special skills

I have a relatively high education, and I can solve problems by myself and can use them

The tool is simple, and I have two years of work experience, so there is no problem with it

Have systematic and professional knowledge of data communication network, and have more than two years of experience in data communication equipment development and maintenance

①②③④⑤⑥

⑥⑤①②③④

②⑤③④①⑥

⑥⑤①②④③

Provide 3 product forms: 4 slots, 6 slots and 10 slots.

CloudEngine S8700 is a spruce type device.

It has ultra-high-density GE/10GE/25GE/40GE/100GE full-rate access ports, and has a variety of port types.

Adopt distributed forwarding architecture

Establish an SRv6 Policy Group tunnel group for local and remote devices on the same plane.

The minimum color of the SRv6 Policy Group tunnel group is 1,000,000, and the colors of different VPN services and planes do not need to be distinguished, but can be the same.

Configure an SRv6 Policy Group tunnel group for a VPN service.

Multiple policy tunnels can be planned within the group according to the actual needs of users.

If the Flag value of the migration attribute in the MAC address route is 1, it indicates a static MAC address, and the static MAC address is preferred.

When a MAC address route is migrated, the large sequence number in the MAC migration attribute is preferred.

and MAC address routes are filled with two labels (that is, both mplslable1 and mplslable2 are valid in packets).

The Route Distinguisher value (RD value) of the MAC route is generated by the value configured by the evpn source-address

Maintain the principle of uniformity in the scheduling strategy of the whole network, and use templated deployment as much as possible to facilitate network management

LPQ/WFQ scheduling strategies can be used to avoid low-priority services not being able to obtain bandwidth resources

The current QoS policy needs to take into account the subsequent expansion of the network

Core services and video-voice services should ensure the absolute priority of forwarding and use PQ scheduling

Unless the business has special requirements, some parameters of the scheduling policy should be defaulted as much as possible

For TCP-based services, the queue must be configured with WRED dropping to avoid TCP global synchronization

AC side-attached data is forwarded directly

AC side-attached data tunnel forwarding

Layer 3 networking data is forwarded directly

Layer 2 networking data is forwarded directly

The static Opcode needs to be configured within the static segment range to prevent conflicts with the Opcode dynamically allocated by the IGP protocol. The static segment length range is determined by the static static-length parameter of the locator command.

end-op, and end-m need to be statically configured

end, end-x, end-dt4, end-dt6, and end-dx2 can be dynamically assigned or statically configured

The SRv6SID format is Locator:Function:Args, where the Args field is also called Opcode

Deploy a VRF instance for each slice

Each VRF instance is configured with a routing policy to color a specific color

After the SRv6Policy tunnel in the slice matches the color, the VRF instance is iterated to the SRv6Policy tunnel in the corresponding slice after the head node matches the color.

FLEX-E technology is recommended for interfaces below 50GE and channelized interface technology for interfaces of 50GE and above.

Support 2G large cache to cope with high burst business traffic.

It can be used as a remote module for the central switch to achieve simplified networking.

It supports advanced features such as VxLAN and MPLS, real-time telemetry data collection, and network O&M visualization, which can be widely used in scenarios such as medium-sized campus aggregation and small campus cores.

3 power supply design, support N+1 redundancy, full 802.3bt90W PoE++ power supply for all ports, and the maximum PoE output power of the whole machine can reach 2268W, adapting to the power supply needs of massive terminals.

PCEP

BGP-LS

Netconf

Telemetry

WLAN product delivery qualification. Such as HCIA or HCIP engineers

Huawei's WLAN project delivery experience

Friend's experience in delivering non-WLAN projects

Competitor WLAN project delivery qualification and experience

PCEP

Netconf

BGP-LS

SNMP

Resources have been planned

Global settings

Set the display items

Scene settings

Portal

TACACS

P2P

802.1X

When the authentication point and the group policy execution point are not on the same device, you need to use the policy linkage function.

In the policy linkage scenario, you need to set the downstream port type of the Edge device to Extended Access Switch

The policy linkage function means that no matter where you go, the permission to access resources is the same, and it is decoupled from the IP address.

When the authentication point, access point, and group policy execution point are all connected to the device, the policy linkage function should be used

LDAP

Radius Token

Social media

SMS gateway

04, 06, and 10 main control boards cannot be shared

The main controller does not provide a business port

The main control and switching are integrated, and the centralized architecture has a lower switching delay

1:1 primary/standby in the frame, primary/standby switchover and packet loss < 5ms

The logical networking initialization diagram is determined by the parameters of the scenario of the solution

Support multi-region, multi-aggregation node design

The working mode supports stand-alone and stacked

You can't manually drag and drop to modify