H19-424_V1.0 HCSP-Presales-Campus Network Planning and Design V1.0 Questions and Answers

O&M capability: support restart operations on distributed switches: support reporting alarms for failed upgrade of distributed switches. Control capability: Configurations can be directly delivered to distributed switches (remote modules).

Control capability: support direct configuration delivery to distributed switches (remote modules).

Management capability: You can view the information of the distributed switch based on the central switch, including the ESN, model, online status, interface directly connected to the central switch, and the port list information of the distributed switch itself.

Monitoring capability: You can view the memory usage, storage space usage, and temperature of distributed switches, as well as the running status, rate, flow rate, packet statistics, and bandwidth utilization of distributed switch ports.

ORIGIN

MED

LocalPre

AS_PATH

Metal (80mm)

Brick wall (120mm)

Bulletproof glass (120mm)

Wooden door (40mm)

The COST configuration of the MSTP link of the remote operator is larger, and it is recommended to configure 1000 to avoid traffic bypassing through the WAN link - the test is wrong

The COST configuration of the link of WDM or bare fiber in the same city is the second smallest, and it is recommended to configure 200 to ensure that the route calculation is secondary to the same city link

The COST value of the local link is the smallest, and it is recommended to configure 10 toensure that the route calculation gives priority to the local link test error

The link cost between the RR and the PE is extra-large, and it is recommended to set 10,000 to ensure that the RR device is only responsible for control plane route reflection and does not forward traffic

Support IP address design

Support installation parameter design

The network also supports NCE-Campus planning

Plan the networking mode and cluster scale in the scenario of the scheme

CloudEngine S series switches

CE series switches in data centers

WLAN AP

AR series routers

USG series firewalls

Netconf

HTTP

HTTP2.0

HTTPS

ZIP file

LLD files

Configure the script

Project acceptance documents

Terminal type

Operation

Manufacturer

NIC type

All of the above statements are correct

Used in relocation scenarios, this tool can restore the user's existing network networking status and service characteristics information

It is used in relocation scenarios, mainly used to formulate relocation plans and design the networking structure of new networks

It is used in relocation scenarios, mainly used to translate the configuration of friends in batches and improve the efficiency of relocation

L3 shared exit

L3 exclusive export

Shared export

L2 exclusive export

Distributed gateway - VxLAN to access, independent AC scenario, for wireless traffic, local forwarding mode is not recommended.

Distributed gateway - VxLAN to access, independent AC scenario, from the edge to the VN, on the edge to execute the service accompanying policy (the edge needs to subscribe to the IP-Group service), the current solution has supported automatic deployment.

The VTEP device is both an L2 gateway and an L3 gateway. The non-gateway node is not aware of the VXLAN tunnel and acts only as the forwarding node for VXLAN packets.

Distributed gateway - VxLAN to aggregation, AC on the board, the wireless traffic service accompanying policy is executed on the edge, and tunnel forwarding is recommended.

NCE-Campus supports the configuration of firewall security group policies.

When a user passes the NCE-Campus authentication or the permission changes, NCE-Campus synchronizes the user name, IP-group, and IP address information to FW, and FW identifies all user groups based on the mapping relationship between IP address, user name, and IP-group, and executes the corresponding security group policy.

Reuse the current online behavior management process, and add lP-Group information to the synchronization information of NCE-Campus and firewall.

When the user goes online and ages in FW, FW actively queries the online user to the NCE-Campus server to keep the IP-Group and other information at both ends synchronized

Core transparent transmission ring networking

Tree networking

Convergence ring networking

Access to ring networking

IGP

CLI/Netconf/yang

BGP

PCEP

Establish an SRv6 Policy Group tunnel group for local and remote devices on the same plane.

The minimum color of the SRv6 Policy Group tunnel group is 1,000,000, and the colors of different VPN services and planes do not need to be distinguished, but can be the same.

Configure an SRv6 Policy Group tunnel group for a VPN service.

Multiple policy tunnels can be planned within the group according to the actual needs of users.

Portal

TACACS

P2P

802.1X

The RR must be redundant, and at least two RR devices must exist on the live network. Prevent network-wide service interruption caused by the failure of only one RR device on the entire network.

Try to choose an independent RR, which can be deployed on a single device in the independent RR scenario.

Use the RR model recommended in the specification list;

The Edge should be dual-uplink to the two RR devices to achieve egress backup;

Rapid deployment, which can support plug-and-play of tenant devices

Remote O&M can be achieved through the NETCONF protocol

In the solution, the NCE platform can provide API interfaces to connect with upper-layer applications

You cannot switch between the local management mode and the cloud management mode of Huawei devices

80M

160M

320M

640M

Deploy a VRF instance for each slice

Each VRF instance is configured with a routing policy to color a specific color

After the SRv6Policy tunnel in the slice matches the color, the VRF instance is iterated to the SRv6Policy tunnel in the corresponding slice after the head node matches the color.

FLEX-E technology is recommended for interfaces below 50GE and channelized interface technology for interfaces of 50GE and above.

end. DT4: EVPN VPLS unicast meteor

end.dx2: the L2AC interface used to divert traffic to the egress PE

end. X SID: A link used to direct traffic to a specific node

end SID: Redirects traffic to nodes based on the IP routing table

Support 2G large cache to cope with high burst business traffic.

It can be used as a remote module for the central switch to achieve simplified networking.

It supports advanced features such as VxLAN and MPLS, real-time telemetry data collection, and network O&M visualization, which can be widely used in scenarios such as medium-sized campus aggregation and small campus cores.

3 power supply design, support N+1 redundancy, full 802.3bt90W PoE++ power supply for all ports, and the maximum PoE output power of the whole machine can reach 2268W, adapting to the power supply needs of massive terminals.

The ARR20 version was released.

Support DSVPN feature

Industrial access router.

Fanless design

It is recommended to deploy two-way tunnels to pass through the common road, which is convenient for maintenance and more reliable tunnel BFD detection

When optimizing and calculating routes, priority is given to ensuring the creation of high-priority tunnels, and high-priority tunnels can preempt low-priority tunnel resources

RSVP-TE, SR-TE, and LDP tunnels can be tuned

When multiple load-balancing tunnels are deployed between two PE nodes, we recommend that you deploy a detached group.

High-density venues: Huawei's original factory delivery or original factory supervision and delivery (CSP is the delivery entity, and Huawei provides engineering survey, planning, and installation training services)

Wireless backhaul: CSP delivery

Massive indoor/outdoor scattered sites: Demonstration sites (at least 5%) are delivered under the supervision of Huawei's original factory, and the rest of the sites are delivered by CSPs

Campus network: Huawei's original factory/CSP delivery

Delete it directly in NCE-Campus

Add the command line on the device, and then delete it through NCE-Campus

No other operations are required, NCE-Campus will reconcile

If you already have a tool, you can fully trust the tool, and you don't need special skills

I have a relatively high education, and I can solve problems by myself and can use them

The tool is simple, and I have two years of work experience, so there is no problem with it

Have systematic and professional knowledge of data communication network, and have more than two years of experience in data communication equipment development and maintenance