H19-401_V2.0 HCSP-Presales-Campus Network Planning and Design V2.0 Question and Answers

In the Xinghe Intelligent Campus solution, APs (Access Points) support several automated "Plug-and-Play" deployment methods. Option A (Registration Query Center) allows an AP to query a Huawei-hosted global database to find its assigned controller. Option C (Barcode Scanning) uses the mobile app to scan the SN (Serial Number), binding the device to a site. Option D (DHCP Option 148) allows a local DHCP server to deliver the management IP of iMaster NCE-Campus directly to the AP. Email-based deployment (B) is reserved specifically for AR routers/CPEs in SD-WAN scenarios and is not a supported method for AP onboarding.

DHCP Snooping is a key security feature in campus access layer design. When a client obtains an IP address, the switch populates a binding table that links the MAC address (B) and the assigned IP address (D) to the specific physical Interface (C) and the VLAN (A) ID. This table is then used by other security features like Dynamic ARP Inspection (DAI) and IP Source Guard (IPSG) to prevent spoofing attacks by verifying that incoming traffic matches the authorized entries in the binding table.

In a typical campus hierarchy, a Layer 2 switch does not perform routing for user traffic. Therefore, its VLANIF interface is not used as a default gateway (Service IP). Instead, it is configured with a Management IP address to allow administrators or the iMaster NCE-Campus controller to access the device via SSH, SNMP, or NETCONF for configuration and O & M purposes.

In the Xinghe Intelligent Campus solution, "Network Slicing" is used to provide hard or soft isolation for different services (e.g., separating video conferencing from guest Wi-Fi). The three primary implementation solutions (resource isolation methods) defined in the HCSP V2.0 curriculum are:

FlexE (Flexible Ethernet) (A): Provides physical-layer hard isolation by dividing the MAC/PHY interface into slots.

Flex-channel (Flexible Channel) (C): A Huawei-patented technology that provides dedicated bandwidth with nearly zero interference.

Channelized sub-interface (D): Uses sub-interfaces with reserved bandwidth to provide logical isolation.

Slice ID (B) is an identifier carried in the packet header (such as the IPv6/SRv6 extension header) used to map traffic to a specific slice; it is a label/identifier , not the underlying resource isolation technology implementation itself.

Free Mobility is a core component of the Huawei Xinghe Intelligent Campus solution. Traditionally, network policies (ACLs) were tied to IP addresses, which change as users move. Free Mobility decouples policies from IP addresses by using Security Groups (also known as "Group-based Policy"). When a user authenticates via iMaster NCE-Campus , they are assigned to a specific group. The network then enforces permissions based on the "Source Group" and "Destination Group," ensuring that a teacher, for example, has the same access rights whether they are in the office, a classroom, or the library.

The iMaster NCE-CampusInsight platform is built around the "Experience-Centric" O & M philosophy, which is categorized into three primary views :

Network Health View (B): Monitors the overall stability and performance of switches and APs.

User Experience View (C): Tracks individual user journeys (connection, authentication, roaming).

Application Experience View (A): Analyzes the quality of specific services like video conferencing or ERP.

While terminal information is available, a "Terminal health view" is not considered one of the three core architectural pillars of the CampusInsight dashboard.

The Huawei Xinghe Intelligent Campus leverages SDN to deliver four core benefits:

Open Programmability (A): Via Northbound APIs for integration with 3rd-party apps.

Network Automation (B): Automating full-lifecycle O & M.

Rapid Service Provisioning (C): Reducing deployment time from weeks to minutes via templates.

Network Virtualization (D): Using VXLAN/EVPN to create multiple isolated logical networks (e.g., IoT, Office, Security) on a single physical infrastructure.

Huawei’s Intelligent Energy Saving Solution (Zero-bit, Zero-watt) uses AI to transition APs between states based on traffic demand. In this logic:

Energy-saving APs (A): Are those identified by the system to enter a deep sleep/hibernation mode when traffic is low.

Assurance APs (D): Remain active to provide basic signal coverage and "listen" for wake-up triggers.

Leader APs (C): Function as the local controller (in small-scale deployments) to coordinate these states.

IoT APs (B) , while they support converged services, are not defined as a specific functional role within the energy-saving state-switching algorithm itself, as IoT devices often require persistent, low-power connectivity that differs from standard Wi-Fi user traffic patterns.

For high-density and large-scale environments, the Native WAC (integrated into the core switch software/hardware, like on the S12700E or S16700) is the preferred recommendation. Unlike a standalone AC, a Native WAC leverages the massive switching capacity of the core switch's forwarding chips to process wireless data at line rate. It simplifies the network by eliminating the need for external AC hardware and provides the scalability required to manage thousands of APs and tens of thousands of terminals within a single management framework.

The Xinghe Intelligent Campus for retail focus on four key areas:

SD-Branch (A): Unified management of WAN, LAN, and WLAN for small stores.

Converged IoT (B): Using APs with built-in IoT slots for Electronic Shelf Labels (ESL) or RFID asset tracking.

Hyper-converged Gateway (C): Using devices like the AR series that combine routing, switching, security, and a wireless controller into one box to save space.

Plug-and-play (D): Zero-touch provisioning (ZTP) so that non-technical store staff can simply plug in a device and have it configured automatically by the cloud.

In Huawei’s Xinghe Intelligent Campus solution, user access control is handled through three primary methods: 802.1X (B) for high-security enterprise environments, Portal (A) for flexible guest and web-based access, and MAC address authentication (C) for IoT devices like printers and IP cameras that lack a user interface. OSPF authentication (D) is a routing security feature used to verify the identity of neighboring routers, not an end-user access authentication method.

In Huawei’s WLAN solution, APs can operate in different modes. While Fit APs require a Wireless Access Controller (WAC) and Cloud APs are managed by iMaster NCE-Campus, Huawei also supports Fat APs . A Fat AP (standalone mode) can perform authentication, encryption, and data forwarding independently without a centralized controller. Therefore, the statement that an AP cannot work independently is false. In the Xinghe Intelligent Campus solution, most deployments use Cloud or Fit modes for centralized management, but the hardware capability for standalone operation remains.

M-LAG (Multichassis Link Aggregation Group) is a key reliability technology in the Huawei Xinghe Intelligent Campus architecture. It provides device-level redundancy by virtualizing two switches into a single logical entity. One of the primary performance requirements for M-LAG in high-availability designs is ensuring millisecond-level failover. In the event of a single link failure (e.g., an uplink from an access switch to one of the M-LAG core switches), the traffic is rerouted through the peer-link or the remaining active member of the Eth-Trunk in less than 50 ms , ensuring "hitless" service for sensitive applications like voice or industrial control.

While the "High-Quality 10 Gbps Campus Network" uses Wi-Fi 7 and 100G cores to improve wireless and wired speeds, the specific role of iMaster NCE-Campus is to transform the O & M (Operations & Maintenance) experience . It provides the Network Digital Map , which offers real-time visibility into user experience, automated fault location within minutes (using CampusInsight AI), and "one-click" configuration delivery. While it enables better application awareness, its primary value proposition in the design guides is the shift from "Device-Centric O & M" to "Experience-Centric O & M."

Huawei's Xinghe Intelligent Campus defines three standard "Access Authentication" modes for users and terminals:

802.1X (B): High security, suitable for PCs and mobile devices with clients.

Portal (C): Common for guest access and public areas (web-based login).

MAC Address Authentication (A): Used primarily for "dumb" terminals like printers, cameras, and IoT devices that cannot perform 802.1X/Portal logins.

OSPF Authentication (D) is a protocol-level security feature used to secure routing updates between routers, not an access authentication method for end-user devices.