Huawei H19-401_V1.0 - HCSP-Presales-Campus Network Planning and Design V1.0

CloudCampus supports dual modes. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation clarifies:

Layer 2 WLAN networking simplifies deployment. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation notes:

B, D: WAC and APs share a broadcast domain, enabling AP discovery via broadcasts—true.

WLAN forwarding models affect roaming. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation states:

B: In direct forwarding, traffic bypasses the FAC (controller) after Layer 2 roaming, handled by the FAP (AP)—true.

Huawei’s SD-WAN architecture is multi-layered. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation defines:

A: Control layer (e.g., RR) manages routing and overlay topology.

B: Network layer (e.g., CPEs) handles data transmission.

C: Management layer (e.g., iMaster NCE) oversees configuration and monitoring.

Control channels manage SD-WAN. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation states:

B, C: RR-CPE and CPE-iMaster NCE use control channels for routing and management.

FireHunter is Huawei’s APT detection system, integrated into campus and SD-WAN solutions. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation confirms:

It uses sandboxing with multi-engine virtualized detection to analyze static (code) and dynamic (runtime) software behavior.

Clustering algorithms in CampusInsight identify connectivity patterns. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation specifies:

A, B: SSID and vendor are used to group devices and analyze issues.

802.1X is a port-based network access control (NAC) protocol widely used for securing wired and wireless networks. It relies on the Extensible Authentication Protocol (EAP) to facilitate authentication between a supplicant (client) and an authentication server (typically a RADIUS server). The HCSP-Presales-Campus Network Planning and Design V1.0 documentation highlights two primary EAP-based authentication modes in 802.1X deployments: EAP termination and EAP relay.

EAP Termination: In this mode, the authenticator (e.g., a switch or access point) terminates the EAP session and communicates with the authentication server using a protocol like RADIUS. The authenticator extracts the EAP information and forwards credentials to the server in a non-EAP format. This mode is commonly used when the authenticator handles part of the authentication process locally.

EAP Relay: In this mode, the authenticator relays the entire EAP conversation between the supplicant and the authentication server without processing it. The EAP messages are encapsulated (e.g., in RADIUS packets) and sent directly to the server, which performs the full authentication. This mode is preferred for centralized authentication management.