H12-351_V1.0 Questions and Answers

According to the Huawei documents and resources, the HLD phase is the high-level design phase of a WLAN project. It involves the following items:

• Capacity planning: Determines the number and types of devices required for the WLAN network based on the customer’s requirements and network scale.
• Network design: Designs the network topology, IP addressing scheme, VLAN division, security policies, and other network parameters for the WLAN network.
• Deployment planning: Plans the deployment sequence, schedule, resources, and risks for the WLAN project.

AP position planning is not involved in the HLD phase. It is part of the LLD phase, which is the low-level design phase of a WLAN project. It involves the detailed design of AP positions, antenna types, channel allocation, power adjustment, and other wireless parameters for the WLAN network. Therefore, C is the correct answer. References: : https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/wlan-project-design

C is false because HTTPS redirection is not required for Portal authentication to work properly.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/troubleshooting-portal-authentication-failures

According to the Huawei documents and resources, the chronological order during the 802.11r fast roaming process between WACs is as follows:

2.The STA accesses the network through API. This is the initial association process before roaming.

1.The STA initiates an 802.11 FT authentication request to AP2. This is the first step of the roaming process when the STA moves to a new AP.

3.AP2 starts the reassociation timer, and sends an 802.11 FT authentication response to the STA. This is the second step of the roaming process when AP2 responds to the STA’s request and sets a timer for reassociation.

4.The STA generates and installs a P TK based on the information contained in the response frame. This is the third step of the roaming process when the STA derives a new pairwise key for encryption.

5.The STA sends a reassociation request to AP2. This is the fourth step of the roaming process when the STA requests to reassociate with AP2.

6.AP2 generates and installs a PTK according to PMK-RI and information contained in the request frame. This is the fifth step of the roaming process when AP2 derives the same pairwise key as the STA.

7.After receiving the reassociation request, AP2 disables the reassociation timer, and then sends a reassociation reg onse to the STA. This is the sixth step of the roaming process when AP2 confirms the reassociation with the STA and stops the timer.

8.The STA receives the response frame of AP2. The roaming process is complete. This is the final step of the roaming process when the STA completes the handover to AP2.

Therefore, 2, 1, 3, 4, 5, 6, 7, 8 is the correct answer. References: https://support.huawei.com/enterprise/en/doc/EDOC1100169459/8d79210e/configuring-wireless-mesh-networking

C is not a tool commonly used for WLAN network planning, acceptance, or health evaluation. eDesk is a tool for remote fault diagnosis and rectification on WLAN networks.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/wlan-planner https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/imaster-nce-campusinsight https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/cloudcampus-app

B is false because disabling radio 1 of APs does not affect the Internet connection speed of STAs that use radio 2.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/troubleshooting-slow-internet-connection

 In a multicast solution, there must be reachable unicast routes between multicast sources and receivers, because multicast routing protocols use unicast routing information to build multicast forwarding trees.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/multicast

According to the Huawei documents and resources, the troubleshooting operations for the AP onboarding failures are as follows:

• APS fail to be authenticated by the WAC: Whitelist the APS. The WAC can authenticate APs based on their MAC addresses or SNs. If an AP is not whitelisted on the WAC, it cannot be authenticated and onboarded.
• License resources on the WAC are insufficient: Expand the license capacity. The WAC can manage a limited number of APs based on its license. If the license resources are insufficient, some APs cannot be onboarded.
• APS fail to obtain IP addresses: Check the DHCP server. The APs need to obtain IP addresses from a DHCP server before they can communicate with the WAC. If the DHCP server is not configured or reachable, the APs cannot obtain IP addresses and onboard.
• APS fail to ping the WAC: Check the network between the WAC and APS. The APs need to ping the WAC to discover its IP address and establish a CAPWAP tunnel. If there is a network problem between the WAC and APs, such as incorrect VLAN configuration or firewall blocking, the APs cannot ping the WAC and onboard.

Therefore, APS fail to be authenticated by the WAC - c, License resources on the WAC are insufficient - b, APS fail to obtain IP addresses - d, APS fail to ping the WAC - a is the correct answer. References: : https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/ap-onboarding-failures

According to the Huawei documents and resources, EAP termination and EAP relay are typical 802.1X authentication modes between the access device and authentication server. In EAP termination mode, the access device terminates EAP packets and encapsulates them into RADIUS packets. In EAP relay mode, the access device directly encapsulates the received EAP packets into RADIUS using EAP over RADIUS (EAPoR) packets2. Therefore, A and B are the correct answers. References: 2: https://support.huawei.com/enterprise/en/doc/EDOC1100086527

WPA3 has the following advantages over WPA and WPA2:

• Supports WPA3-SAE, which provides more secure authentication and key management than PSK.
• Provides a more secure handshake protocol than 802.11i, which can resist offline dictionary attacks and protect forward secrecy.
• Enhances the algorithm strength from AES-128 to AES-192 or AES-256.
• Supports Suite A cryptography, which provides higher security levels for government or military networks.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/wpa3

Huawei’s CloudCampus Solution supports three user access authentication modes: 802.1X authentication, MAC address authentication, and Portal authentication.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/user-access-authentication-modes

B is false because calculated data can be displayed on iMaster NCE-CampusInsight without loading a license on the device management page. The license only affects the number of devices that can be managed by iMaster NCE-CampusInsight.

D is false because the UTC time of iMaster NCE-CampusInsight does not need to be the same as that of its managed devices. However, it is recommended that they use the same time zone to avoid confusion.

References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/data-collection