H19-424_V1.0 Questions and Answers

Data processing node FI

Authentication node ACA

Data acquisition node ACC

Register the inquiry center

Device management node ACM

L3 shared exit

L3 exclusive export

Shared export

L2 exclusive export

Select butterfly wing wave AP wall-mounted bathroom corner, height 2.2~2.5m, a single AP covers the left and right 2 rooms

The AP fixes the radio power and configures the maximum EIRP to improve the downlink coverage of the room through the wall, with the worst 5G downlink RSSI being -65dBm and the worst uplink RSSI being -80dBm

Indoor omnidirectional APs (2*2 models such as 5761-11) are deployed separately in the corridor to ensure roaming continuity

The bathroom relies on 5G for coverage and turns off 2.4G

BGP-LS

PCEP

SNMP

Netconf

The static Opcode needs to be configured within the static segment range to prevent conflicts with the Opcode dynamically allocated by the IGP protocol. The static segment length range is determined by the static static-length parameter of the locator command.

end-op, and end-m need to be statically configured

end, end-x, end-dt4, end-dt6, and end-dx2 can be dynamically assigned or statically configured

The SRv6SID format is Locator:Function:Args, where the Args field is also called Opcode

NCE-Campus supports the configuration of firewall security group policies.

When a user passes the NCE-Campus authentication or the permission changes, NCE-Campus synchronizes the user name, IP-group, and IP address information to FW, and FW identifies all user groups based on the mapping relationship between IP address, user name, and IP-group, and executes the corresponding security group policy.

Reuse the current online behavior management process, and add lP-Group information to the synchronization information of NCE-Campus and firewall.

When the user goes online and ages in FW, FW actively queries the online user to the NCE-Campus server to keep the IP-Group and other information at both ends synchronized

A1::1-A1::FFFF:FFFF

A1::1-A1:-FFFF

A1:1-A1.. FFFF:FFFF:FFF

A1::1:0:0-A1::FFFF:FFFF:FFFF:FFFF

BOQ management

Cabinet layout design

Network equipment connection design

Equipment selection

Support 2G large cache to cope with high burst business traffic.

It can be used as a remote module for the central switch to achieve simplified networking.

It supports advanced features such as VxLAN and MPLS, real-time telemetry data collection, and network O&M visualization, which can be widely used in scenarios such as medium-sized campus aggregation and small campus cores.

3 power supply design, support N+1 redundancy, full 802.3bt90W PoE++ power supply for all ports, and the maximum PoE output power of the whole machine can reach 2268W, adapting to the power supply needs of massive terminals.

L3 shared exit

L3 exclusive export

L2 shared exit

L2 exclusive export

Metal (80mm)

Brick wall (120mm)

Bulletproof glass (120mm)

Wooden door (40mm)

Netconf

HTTP

HTTP2.0

HTTPS

The maximum number of XSIC slots can reach 4.

The maximum number of WSIC slots can reach 4.

4 SIC slots.

Dual master control and double forwarding

Policy service, which provides the ability to configure policies, mainly configures access policies between security groups and security groups, integrates AC3.0, and AC1.0 is optional

Authentication & Portal service, which supports authentication, authorization, and accounting capabilities as an AAA server, is integrated in AC3.0 and AC1.0 is optional, in which billing depends on a third party

The P-Group synchronization service, as the control plane of the IP-Group, provides the collection and distribution of IP and security group correspondence, and is integrated in AC3.0 and AC1.0

Policy execution points and authentication points can be deployed on different physical devices.

Distributed gateway - VxLAN to access, independent AC scenario, for wireless traffic, local forwarding mode is not recommended.

Distributed gateway - VxLAN to access, independent AC scenario, from the edge to the VN, on the edge to execute the service accompanying policy (the edge needs to subscribe to the IP-Group service), the current solution has supported automatic deployment.

The VTEP device is both an L2 gateway and an L3 gateway. The non-gateway node is not aware of the VXLAN tunnel and acts only as the forwarding node for VXLAN packets.

Distributed gateway - VxLAN to aggregation, AC on the board, the wireless traffic service accompanying policy is executed on the edge, and tunnel forwarding is recommended.

The ARR20 version was released.

Support DSVPN feature

Industrial access router.

Fanless design

Rapid deployment, which can support plug-and-play of tenant devices

Remote O&M can be achieved through the NETCONF protocol

In the solution, the NCE platform can provide API interfaces to connect with upper-layer applications

You cannot switch between the local management mode and the cloud management mode of Huawei devices

Pre-sales configuration

After-sales delivery planning and design

Installation, deployment and testing

Operation and maintenance

Configuration service exception. Contact maintenance engineere（netconf communication failed）

Service process faied

The service is abormal

Unrecongnizeinformation

Register for the Inquiry Center

APP scan the code to start

DHCP Option

Email starting

If you already have a tool, you can fully trust the tool, and you don't need special skills

I have a relatively high education, and I can solve problems by myself and can use them

The tool is simple, and I have two years of work experience, so there is no problem with it

Have systematic and professional knowledge of data communication network, and have more than two years of experience in data communication equipment development and maintenance

Portal

TACACS

P2P

802.1X

High-density venues: Huawei's original factory delivery or original factory supervision and delivery (CSP is the delivery entity, and Huawei provides engineering survey, planning, and installation training services)

Wireless backhaul: CSP delivery

Massive indoor/outdoor scattered sites: Demonstration sites (at least 5%) are delivered under the supervision of Huawei's original factory, and the rest of the sites are delivered by CSPs

Campus network: Huawei's original factory/CSP delivery

AC side-attached data is forwarded directly

AC side-attached data tunnel forwarding

Layer 3 networking data is forwarded directly

Layer 2 networking data is forwarded directly

Synchronize information between dual-gateway devices through the interlink control sub-interface, such as the synchronization and backup of application recognition results, overlay connection information, and connection quality information. Interlink serves as a dual-gateway device interconnection interface that forwards inter-device (VPN) traffic through sub-interfaces.

Interlink serves as a dual-gateway device interconnection interface, providing forwarding of inter-device service (VPN) traffic through sub-interfaces.

Interlink can be interconnected with a direct link, and when the site service traffic is large and the CPE port resources are sufficient, it is recommended that Interlink use an Eth-trunk link. Interlink cannot borrow Layer 2 service interfaces on the CPELAN side.

Interlink cannot borrow the Layer 2 service interface on the CPE LAN side

Terminal type

Operation

Manufacturer

NIC type