H19-424_V1.0 Sample Questions Answers

The logical networking initialization diagram is determined by the parameters of the scenario of the solution

Support multi-region, multi-aggregation node design

The working mode supports stand-alone and stacked

You can't manually drag and drop to modify

The ARR20 version was released.

Support DSVPN feature

Industrial access router.

Fanless design

RA packets can carry a lot of network configuration information, including the default router, network prefix list, and whether to use a DHCPv6 server for stateful address allocation. An attacker can send forged RA packets to modify the network configuration of the user's host so that legitimate users cannot communicate properly. IPv6RGuard provides a defense mechanism against RA packet attacks, which can effectively prevent such network at

Configure the host or router role for the interface, and then the device can forward or discard RA packets based on the interface role.

If the interface is connected to the user host, the interface role is set to host, and if the interface is connected to the router, the administrator can configure the interface role to router according to the interface networking. Version 22.0 also supports policy-based filtering of ND packets.

22.0 also supports policy-based filtering of ND packets.

Distributed gateway - VxLAN to access, independent AC scenario, for wireless traffic, local forwarding mode is not recommended.

Distributed gateway - VxLAN to access, independent AC scenario, from the edge to the VN, on the edge to execute the service accompanying policy (the edge needs to subscribe to the IP-Group service), the current solution has supported automatic deployment.

The VTEP device is both an L2 gateway and an L3 gateway. The non-gateway node is not aware of the VXLAN tunnel and acts only as the forwarding node for VXLAN packets.

Distributed gateway - VxLAN to aggregation, AC on the board, the wireless traffic service accompanying policy is executed on the edge, and tunnel forwarding is recommended.

The relocation is too boring, and the interface is too monotonous, purely for decoration and good looks

Remind users of the points that need special attention, such as: those that need to be manually confirmed and processed, and those that can be discarded

In order to export the configuration, the configuration does not have the background color everywhere when exporting the configuration

It has no practical effect

PCEP

BGP-LS

Netconf

Telemetry

Router Node

FW Node

Border Node

Edge Node

Service slices must use SRv6 Policy tunnels, which can be strictly explicit or loose.

The whole network uses NCE-P to calculate the path of the slice network based on the affinity attribute to ensure the optimal path of the whole network and make full use of the link bandwidth while ensuring the service quality.

SRv6Policy tunnels are vertically deployed between districts, counties, cities, and provincial WANs to optimize traffic to improve bandwidth utilization and ensure service quality.

SRO6fPolicy tunnels can be carried in the default slice network or in a non-default slice network. For default slices, SRv6BE is preferred. Services with special requirements can also be carried through SRv6 policy tunnels.

Monitoring: V5 is based on http 2.0 channel, and Spruce is based on telemetry channel (GRPC). O&M: Based on the SSH channel, V5 is different from Spruce.

O&M: Based on the SSH channel, V5 is different from Spruce.

Acceptance: Based on the netconf channel, V5 is no different from Spruce.

Configuration/alarm: Carried on the netconf channel, the yang model is different, and the spruce adopts the yang 2.0 model.

Portal authentication, MAC address authentication, and 802.1X authentication are supported

Portal page customization is not supported, but it supports docking with third-party Portal servers

The authentication data is transmitted using HTTP2.0 and Radius protocols, and the configuration data is transmitted using the Netconf protocol

Support docking with social media such as Weixin

It is recommended to deploy two-way tunnels to pass through the common road, which is convenient for maintenance and more reliable tunnel BFD detection

When optimizing and calculating routes, priority is given to ensuring the creation of high-priority tunnels, and high-priority tunnels can preempt low-priority tunnel resources

RSVP-TE, SR-TE, and LDP tunnels can be tuned

When multiple load-balancing tunnels are deployed between two PE nodes, we recommend that you deploy a detached group.

For the Locator CIDR block planning of SRv6, the appropriate mask should be set according to the number of IPv6 SIDs that may be used by the device.

loatos svV6_locator ipu6-prelix21.DB8ABCD: .b4 static 32, Locator is 2001.DB8.ABCD:, length 64 bits, static segment occupies 32 bits, dynamic segment occupies 32 bits args field occupies O bits. The starting value of the state segment is: 2001:DB8:ABCD:0000:0000:0000:C

Locator SID supports static configuration or dynamic allocation, end-op and end-m must be statically configured, and static configuration is also recommended for end and end.x, which is convenient for network O&M. Other SIDs can be assigned dynamically.

Devices at the same site belong to the same large network segment with the same prefix, and different devices are assigned to the small network segment with the same prefix in the large network segment.

ORIGIN

MED

LocalPre

AS_PATH

FW

S switches

AR router

CE switches

AP

Ethernet A-D Route(Type 1)

Ethernet Segment Route(Type4)

MAC/IP Advertisement Route(Type2)

Inclusive Multicast Route(Type3)

End.DX4 SID

End.X SID

End.OP SID

EnDT4 SID

①②③④⑤⑥

⑥⑤①②③④

②⑤③④①⑥

⑥⑤①②④③

The number of APs is greater than 50 or equal to 0

The number of APs is greater than 100 or equal to 0

When the signal strength in the floor is too low

In the case of insulating obstacles

Local hardware redundancy protection

TE HSB

Local software protection

Remote disaster recovery

Core transparent transmission ring networking

Tree networking

Convergence ring networking

Access to ring networking

1

2

3

4

Ethoam

BFD

Y1731

NQA

Configure access management

Configure a policy template

Create an external network

Create a fabric network

Coverage areAnswer: confirm the key coverage area (such as office, conference room, etc.) and common coverage area (such as stairs, toilets, etc.) required by the customer

Pay the signal field strength requirements in the area, for example, -40dBm~-65dBm in key areas, and >-75dBm in ordinary areas

Number of concurrent users: the total number of terminals connected in the current coverage area, and how many people in the coverage area are planned to be connected at the same time

Bandwidth requirements: the main types of services planned by the customer and the bandwidth requirements for each user

When the authentication point and the group policy execution point are not on the same device, you need to use the policy linkage function.

In the policy linkage scenario, you need to set the downstream port type of the Edge device to Extended Access Switch

The policy linkage function means that no matter where you go, the permission to access resources is the same, and it is decoupled from the IP address.

When the authentication point, access point, and group policy execution point are all connected to the device, the policy linkage function should be used

L3 shared exit

L3 exclusive export

L2 shared exit

L2 exclusive export

The planning and design tool is used for after-sales planning and cannot be used before sales

When the equipment model cannot be used, you can feedback it in the tool platform

The tool can ensure the logical consistency and data consistency of the design

In the case of large or frequent changes in the network, the old project can be retained and the new project can be designed

Netconf

HTTP

HTTP2.0

HTTPS

CloudEngine S series switches

CE series switches in data centers

WLAN AP

AR series routers

USG series firewalls