H19-401_V2.0 HCSP-Presales-Campus Network Planning and Design V2.0 Questions and Answers

For mid-to-large campus fabrics (typically those with more than 10-15 edge devices), Huawei recommends Dual-OSPF-area orchestration (C) for the underlay network. In this design, Area 0 is usually established between the Core (Border) and Aggregation nodes, while Area 1 (or other non-zero areas) is used between the Aggregation and Edge nodes. This hierarchy limits the scope of Link State Advertisements (LSAs), preventing a single link flap at the edge from causing a full SPF recalculation across the entire network backbone, thus enhancing stability.

For MSPs (Managed Service Providers) , Huawei offers a Point-based License model. Instead of buying specific licenses for every single feature or device model, the MSP buys a pool of "Points." Different devices "consume" a certain number of points per day or month. This allows the MSP to be extremely flexible with their customers, scaling up or down without long-term fixed subscriptions for individual boxes, which significantly optimizes their financial model (CAPEX/OPEX).

Huawei’s Intelligent Energy Saving Solution (Zero-bit, Zero-watt) uses AI to transition APs between states based on traffic demand. In this logic:

Energy-saving APs (A): Are those identified by the system to enter a deep sleep/hibernation mode when traffic is low.

Assurance APs (D): Remain active to provide basic signal coverage and "listen" for wake-up triggers.

Leader APs (C): Function as the local controller (in small-scale deployments) to coordinate these states.

IoT APs (B) , while they support converged services, are not defined as a specific functional role within the energy-saving state-switching algorithm itself, as IoT devices often require persistent, low-power connectivity that differs from standard Wi-Fi user traffic patterns.

To manage massive-scale deployments (such as retail chains with thousands of stores), iMaster NCE-Campus utilizes Hierarchical Configuration . Administrators can define a Parent Template with global settings (e.g., DNS, NTP, Security standards) and create Child Templates for specific regions or sites. The child templates automatically inherit all settings from the parent, allowing the administrator to only configure the "differentiated" parts (e.g., local subnets or SSIDs), which drastically reduces configuration errors and deployment time.

Huawei's SD-WAN solution supports dual-stack (IPv4/IPv6) networking. This means that overlay tunnels (typically IPsec) can be established regardless of whether the underlying transport network (Internet, MPLS, or LTE) uses IPv4 or IPv6. This is a critical feature for enterprises undergoing transition, allowing them to build a unified virtual private network over heterogeneous physical infrastructures.

Huawei’s WIDS (Wireless Intrusion Detection System) and WIPS (Wireless Intrusion Prevention System) provide comprehensive air interface protection. They are designed to detect:

Flood attacks (A): Detecting an abnormal volume of management frames (like Auth/Deauth floods).

Spoofing attacks (B): Detecting unauthorized APs or STAs using the MAC addresses of authorized devices.

Weak IV attacks (C): Detecting attempts to exploit older encryption (like WEP) by identifying weak Initialization Vectors.

Brute force cracking (D): Monitoring for repeated authentication failures that indicate an attempt to guess WPA/WPA2-PSK or WAPI-PSK keys.

This statement is False . Huawei’s Hybrid Optical-Electrical Cables (Photoelectric cables) are specifically designed to overcome the 100-meter distance limitation of traditional Ethernet. They combine optical fibers for high-speed data (10G/25G/100G) and copper wires for power. These cables are a core part of the "Simplified Architecture" and do support PoE++ (up to 90W), allowing high-power Wi-Fi 7 APs to be powered over distances of up to 300–500 meters from a central switch.

Free Mobility is a core component of the Huawei Xinghe Intelligent Campus solution. Traditionally, network policies (ACLs) were tied to IP addresses, which change as users move. Free Mobility decouples policies from IP addresses by using Security Groups (also known as "Group-based Policy"). When a user authenticates via iMaster NCE-Campus , they are assigned to a specific group. The network then enforces permissions based on the "Source Group" and "Destination Group," ensuring that a teacher, for example, has the same access rights whether they are in the office, a classroom, or the library.

In the Xinghe Intelligent Campus ESN-free deployment (aimed at simplifying logistics where the Serial Number/ESN isn't known beforehand), the iMaster NCE-Campus (D) platform generates a unique SiteCode . This SiteCode is provided to the installation personnel, who then enter it into the deployment app or the device's local web UI. Once the device connects to the internet, it reports the SiteCode to the platform, which then automatically binds the device's ESN to the correct site configuration.

To ensure "Proactive O & M," iMaster NCE-Campus supports a wide array of notification channels via its Northbound Interface (NBI). It can integrate with third-party gateways to send SMS (A) and Email (D) , and it provides native integration or Webhook support for popular enterprise collaboration tools like DingTalk (B) and WeChat (C) . This allows IT staff to receive critical network alerts immediately on their mobile devices.

WAPI (WLAN Authentication and Privacy Infrastructure) is a Chinese national standard for wireless security. Unlike the international WPA standards that use AES (CCMP) or the legacy TKIP, WAPI utilizes the SM4 (formerly SMS4) symmetric block cipher algorithm for data encryption and the SM3 hash algorithm for integrity. Huawei enterprise APs support WAPI to meet specific regulatory and security requirements in the Chinese market.

iMaster NCE-CampusInsight provides full-stack visibility by analyzing three distinct layers:

User Layer (B): Focuses on user-specific issues like authentication failures or slow associations.

Network Layer (A): Monitors device health, packet loss, and latency across the physical/logical fabric.

Application Layer (D): Identifies over 6,000 applications and analyzes the quality of experience (QoE) for key apps like Zoom or Teams.

"Protocol layer" is not categorized as a standalone analysis layer in the official HCSP V2.0 framework; protocol issues are usually nested within the Network or User analysis categories.

For high-density and large-scale environments, the Native WAC (integrated into the core switch software/hardware, like on the S12700E or S16700) is the preferred recommendation. Unlike a standalone AC, a Native WAC leverages the massive switching capacity of the core switch's forwarding chips to process wireless data at line rate. It simplifies the network by eliminating the need for external AC hardware and provides the scalability required to manage thousands of APs and tens of thousands of terminals within a single management framework.

iStack (Intelligent Stack) is a horizontal virtualization technology used primarily at the access and aggregation layers of the campus network. It allows multiple physical switches to be connected via stack cables and managed as a single logical device with a unified management IP and configuration file. This eliminates the need for complex protocols like STP (Spanning Tree Protocol) to prevent loops, as the links between the stack and the upstream devices are treated as a single inter-device Eth-Trunk.

Huawei’s wireless health model in CampusInsight is specifically "Experience-Centric." It evaluates the network based on five dimensions of user experience: Access (A) , Throughput (C) , Roaming (D) , Capacity , and Interference . While the physical status of a device (on/off) is monitored, "Network Status" is not one of the metrics used to calculate the specific Experience Health Score in this evaluation model.