H12-321 Huawei Certified Network Professional - Wireless Local Area Network- Constructing Enterprise WLAN Architecture Questions and Answers

TRUE

FALSE

The standby AC3 must be in the same Layer 2 network as the primary AC1 and the primary AC2.

On the AC3, all APs on the primary AC1 and the primary AC2 must be configured. After the AC is switched, the AP can obtain the correct configuration.

Configure the corresponding priority of the AP on each active and standby AC. The AP can select the corresponding primary AC according to the priority carried by the AC.

You can configure the corresponding MAC whitelist on the primary AC to ensure that the AP can go online on the corresponding AC to assist the AP to select the correct primary AC.

Number of associated STAs

STA association and disassociation frequencies

Number of association attempts by STAs

Traffic volume from STAs

TRUE

FALSE

There are duplicate OU names on the AD directory servers, and OU-based synchronization is used.

Some user information is manually created on the Agile Controller.

There are no duplicate OU names or user group names on the AD directory servers, but different synchronization types are used to synchronize user information from different AD directory servers.

The parameter configuration between the Agile Controller and an AD directory server is incorrect.

AP channel adjustment

APSNR adjustment

AP power adjustment

Dynamic EDCA parameter adjustment

Forward normal data traffic and discard attack traffic

Discard normal data traffic and report attack traffic

Forward normal data traffic and report attack traffic

Drop normal data traffic and discard attack traffic

After the master controller is enabled on the AC, the master controller is added to the roaming group by default and can manage other ACs.

The Master Controller is delivered to each managed AC through CAPWAP signaling.

Master Controller is a logical role that can be taken over by any common entity AC.

Each AC needs to specify an AC as its own Master Controller.

3.3km

5.3km

7.3km

11.3km

Portal authentication is disabled on the Agile Controller.

Portal authentication is disabled for users on the Agile Controller.

802.lx authentication is disabled on the Agile Controller.

MAC address bypass authentication is enabled on the Agile Controller.

(b) (a) (d) (c)

(b) (d) (a) (c)

(a) (d) (b) (c)

(a) (b) (d) (c)

Access device information

Department information

User information

Authorization result

Authorization element

The MP periodically sends a broadcast PREQ, receives the MP/MPP response unicast PREP, and establishes a round-trip route between any two points.

The MPP periodically sends the broadcast RANN, and the received MP sends a unicast PREQ to the MPP. After receiving the MPP, the MPP responds to the PREP and establishes a route between the MP and the MPP.

The MPP periodically sends the broadcast RANN, and the received MP sends a unicast PREP to the MPP to establish a route between the MP and the MPP.

MPP periodically sends a broadcast PREQ, and the received MP responds to the unicast PREP to establish a route between the MP and the MPP.

AC GO/0/1

MPP

MP

Switch

The models and software versions of the active and standby ACs must be the same.

The active and standby ACs can be of different models but must use the same software version.

A standby AC can provide backup services for multiple active ACs. This mode reduces device purchase costs and has higher reliability than VRRP HSB.

N+1 backup is a cold backup mode, which backs up AP and STA information.

0.2

0.4

0.5

0.6

Number of access terminals of the AP

The frequency of the uplink and the line of the terminal on the AP

The number of times the terminal attempts to log in on the AP.

Traffic size of the STA on the AP

The Agile Controller does not support MAC address bypass authentication.

The Agile Controller supports 802.lx authentication.

The Agile Controller supports Portal authentication.

Multiple authentication methods can be used to authenticate users.

CLI-based upgrade

Web-based upgrade

Boot upgrade

Upgrade using the eSight

Authentication conditions, such as department, access device, and SSID, must be set one by one in an authentication rule.

The following items can be specified during the configuration of an authentication rule: account source, authentication protocol, and binding information about the account.

If multiple authentication rules apply to a user, the rule with the highest priority is used.

The items to match in an authentication rule do not need to be configured in advance.

(d)(a)(b)(c)

(a)(b)(d)(c)

(a)(d)(b)(c)

(a)(b)(c)(d)

Use different user names.

Check whether STA MAC addresses are registered.

Set different SSIDs for employees and guests.

Check the types of STAs they use.

An MP is also called Mesh gateway.

An MP provides the Portal function and allows internal nodes to communicate with external networks.

An MP supports automatic topology discovery, automatic route discovery, and data packet forwarding.

An MP can provide both Mesh service and user access.

Directional antennas are radiated in a range of angles on a horizontal pattern, which is commonly referred to as a directional antenna.

The directional antenna has the strongest energy gathering ability, and the direction of the signal is very good.

When the number of remote link points is small, or the angular orientation is quite concentrated, the use of directional antennas is the most effective solution.

Directional antennas have only the main flap for practical use, so the side lobes can be ignored.

TRUE

FALSE

Fix an existing problem

Optimize device performance

Get new features and functionality

Extend the life of the equipment

Increase signal coverage range.

Reduce dependence on wired networks.

Enhance signal strength.

The APs and ACs supporting Mesh have more functions.

a

b

c

d

The first Fresnel zone affects RF communication integrity even though it is partially blocked.

The first Fresnel zone makes RF signals diffract or bend even through it is blocked.

Signal diffraction reduces RF energy received by antennas or even interrupts the communication link.

Under any circumstances, the proportion of the area blocked by obstacles in the first Fresnel zone cannot exceed 60%.

Each directory server has a DN parameter

The DN parameter is only available in the LDAP server.

DN is a parameter that needs to be manually configured by the directory server administrator.

The DN parameter is only available in the AD server.

1. The MP periodically broadcasts PREQ.

2. The MPs/MPPs receiving the PREQ reply with unicast PREP.

3. The route and return route are established between two points.

1. The MPP periodically broadcasts RANN.

2. The MP receiving the RANN sends a unicast PREQ to the MPP.

3. The MPP replies with a PREP.

4. The route is established between MP and MPP.

1. The MPP periodically broadcasts RANN.

2. The MP receiving the RANN sends a unicast PREP to the MPP.

3. The route is established between MP and MPP.

1. The MPP periodically broadcasts PREQ.

2. The MP receiving the PREQ sends a unicast PREP to the MPP.

3. The route is established between MP and MPP.

Correct

False

30s, 100

45s, 150

60s, 300

90s, 400

Reference Mesh profile.

Configure Mesh whitelist.

Configure Mesh profile.

Configure Mesh whitelist.

Configure Mesh profile.

Reference Mesh profile.

Configure Mesh profile.

Reference Mesh profile.

Configure Mesh whitelist.

Configure Mesh whitelist.

Reference Mesh profile.

Configure Mesh profile.

The domain name of the directory server is Huawei.

The directory server is not an AD server.

This code indicates a path.

Jack indicates a user or user group.

The synchronization mode of the Agile Controller is configured to automatically synchronize.

Agile Controller synchronization range configuration error

The data structure mapping configuration of the Agile Controller authentication source is incorrect.

The Agile Controller does not have any OU filters configured.

Configure VLAN Pool and configure the hash algorithm.

Configure VLAN Pool and configure the sequence algorithm

Configure VLAN Pool, any configuration algorithm

Do not configure VLAN Pool, configure a static IP address for each mobile terminal.

® > © > ©

© > © > ®

® > © > ®

© > © > ©

RADIUS server

AD server

DNS server

Portal server

2->4->1->3

4->1->2->3

4->2->1->3

2->1->4->3

Up to 200M

Up to 150M

Up to 100M

Up to 50M

When receiving a new user online request, the AP first calculates the channel utilization rate on the current radio. If the new user threshold is not reached, the new user is allowed to go online.

If the channel utilization reaches the new user threshold after the new user goes online, the access request of other new users is rejected, and an alarm is sent, but the SSID cannot be hidden.

For the access of the roaming user, check whether the channel utilization has reached the roaming user threshold. If it is reached, the roaming user access request is rejected and an alarm is sent.

The AP periodically detects the channel utilization of the radio. Once it falls below the new user threshold, it sends a release alarm to allow new users to go online.

There is AP1 information on AC2, and AP1 is in standby state in AC2.

There is AP1 information on AC2, and AP1 is in the normal state of AC2.

There is STA1 information on AC2, and the status of STA1 is unauthenticated.

There is no STA1 information on AC2.

An AP sets up a CAPWAP tunnel only with the active AC.

An AP sets up CAPWAP tunnels with both the active and standby ACs.

An AP periodically exchanges CAPWAP packets with both the active and standby ACs to detect link status.

An AP periodically exchanges CAPWAP packets only with the active AC to detect link status.

(a)

(b)

(C)

(d)

[AC-wlan-view] rrm-profile name wlan-net

[AC-wlan-view] regulatory-domain-profile name domain1

[AC-wlan-view] wired-port-profile name wired-port

[AC-wlan-view] ap-system-profile name mesh-sys

Incorrect synchronization type

Incorrect authentication source name

Incorrect port number

Incorrect base DN r SSL is disabled

01-01-22-22-33-33

02-01-01-22-33-33

02-01-01-22-33-34

02-01-22-01-01-22

[AC-wlan-view] rrm-profile name wlan-net

[AC-wlan-view] regulatory-domain-profile name domain1

[AC-wlan-view] wired-port-profile name wired-port

[AC-wlan-view] ap-system-profile name mesh-sys

Portal server IP address

Portal page URL template

shared-key

Portal protocol version E. The port number on which the device listens for Portal protocol packets.

If the wired interface of the AP is not bound to an Eth-Trunk interface, the AC can deliver the STP configuration to the AP.

On the mesh network, the Mesh link only transparently transmits STP packets.

If the STP function is enabled on the AP, the AP will not send the STP packet to the wireless side.

Mesh network can support multiple loops

30s, 100

45s, 150

60s, 300

90s, 400

TRUE

FALSE

802.lx authentication

Portal authentication

MAC address authentication

RADIUS authentication

An HSB group can be enabled in global mode.

An AP needs to be added offline to both the active and standby ACs before it can go online on the two ACs.

If an online AP on the active AC is added offline to the standby AC, the AP status is displayed as fault on the standby AC.

An HSB group takes effect and notifies service modules of status changes only after the HSB group is enabled.

Only the MPP wired side interface needs to enable STP.

Only the MP3 wired side interface needs to enable STP.

MPP and MP3 wired side interfaces must be enabled with STP.

MP1 and MP2 need to enable STP

Turn on the packet-by-packet power adjustment to avoid mutual interference between APs.

Turn on the packet-by-packet power adjustment to save the AP's energy consumption.

Turn on the packet-by-packet power adjustment, which is beneficial to ensure the success rate of packet delivery to the terminal farther from the AP and improve the performance of the air interface.

Turn on the packet-by-packet power adjustment to improve user access security more effectively.

75

80

85

90

The DHCP server does not automatically associate with the relay on the device. The server will send dhcp request packets to the device.

The DHCP server and the relay on the device can be adaptively linked. The server does not actively send protocol packets to the device.

The RADIUS/Portal Server does not need to configure the IP address of the peer device, and the server does not actively send COA/DM or Portal logoff packets to the device.

The RADIUS/Portal Server needs to be configured with the IP address of the peer device, and the server will send the COA/DM or Portal logoff packets to the device.

Signal transmission frequency

Distance between transceiver antennas

Antenna beamwidth

Earth curvature

0

1

10

11

Synchronization type error

The authentication source name is incorrect.

Port error

Base DN error E. SSL is not enabled

In a chained network environment, users can pre-designate neighbors connected to them.

In a chained network environment, users cannot pre-assign neighbors connected to them.

The link formed between the MPs can convert the 802.3 message into an 802.11s message and then transmit it on the wireless link.

In a chained network environment, there may be a single point of failure.

Signal reflection

Frequency harmonics

Sideband

Side lobes

The AP periodically sends a Probe Request frame with the specified multicast address on different channels. After receiving the AP, the AP detects that the AP is a neighbor AP.

Active detection is mainly used to establish neighbor relationships between legal APs.

Active detection is mainly used to obtain the maximum interference signal strength between legal neighbors, the most critical of which is the signal strength of neighbor APs.

Active detection and passive detection are used to collect interference from illegal APs.

MP

MPP

MAP

VAP

MAP is a special form of MP.

MAP is a special form of MPP.

An MAP is usually connected to STAs.

Any MP supporting the AP function can provide access to STAs.

Mesh Peering Open

Mesh Peering Confirm

Hello

Mesh Peering Close

Correct

False

Configure the transmit power on the 5 GH radio 3 dB to 8 dB higher than that on the 2.4 GHz radio.

Configure an AP to preferentially respond to Probe Request packets on the 5 GHz radio sent by STAs, and respond for several times before responding Probe Request packets on the 2.4 GHz radio.

Configure an AP to reject the request from a STA to associate with the 2.4 GHz radio of an AP, and allow STA association only after the number of rejections reaches the threshold. Configure an AP to immediately allow STA association if a STA requests to associate with the 5 GHz radio.

Configure a higher Beacon frame rate, a longer interval for sending Beacon frames, and a smaller number of retransmissions of Probe packets on the 5 GHz radio than on the 2.4 GHz radio.

STA-FAP-FAC-HAC-upper layer network

STA-FAP-FAC-HAC-HAP-HAC-upper layer network

STA-FAP-FAC-upper layer network

STA-FAP-FAC-HAC-FAC-upper layer network

[AC-wlan-view]ap-group name mesh-mpp

[AC-wlan-ap-group-mesh-mpp] mesh-profile mesh-net radio 1

[AC-wlan-view] ap-group name mesh-mpp

[AC-wlan-ap-group-mesh-mpp] regulatory-domain-profile domainl

[AC-wlan-view]ap-group name mesh-mpp

[AC-wlan-ap-group-mesh-mpp]wired-port-profile wired-port gigabitethernet 0

[AC-wlan-view]ap-group name mesh-mpp

[AC-wlan-ap-group-mesh-mpp]ap-system-profile mesh-sys

Flood attack

Spoof attack

Weak IV attack

Violent cracking

The user names are too long.

The user names are too short.

The user names contain invalid characters.

The user names must contain digits and letters.

The main lobe angle is shown in the antenna pattern.

In the horizontal axis, the power peak is reduced by 1/3 and the distance is measured using angle as the unit.

In the vertical axis, the distance between two -3dB points is measured using angle as the unit.

The distance between the power peak point and half-power point is measured using angle as the unit.

TRUE

FALSE

In a large WLAN network, the AP can obtain the IP address of the AC from the DHCP server through the option 60 parameter.

In a large WLAN network, the AP can obtain the IP address of the AC from the DHCP server through the option 43 parameter.

In a large WLAN network, it is recommended to deploy a separate DHCP server.

In a large WLAN network, it is generally recommended to use the AC as a DHCP server.