H19-401_V2.0 HCSP-Presales-Campus Network Planning and Design V2.0 Questions and Answers

Global radio calibration is a process where the WAC or iMaster NCE calculates the optimal channel and power levels for all APs. It is not a "the more, the better" task. Frequent or immediate calibration during peak hours can cause "flapping," where APs constantly change channels, leading to service interruptions and client disconnections. Huawei recommends performing global calibration during off-peak hours (e.g., at night) or using AI-based calibration (CampusInsight) which makes gradual, intelligent adjustments rather than disruptive immediate changes.

Huawei’s Campus Production Network Solution (specifically for Industrial/Manufacturing scenarios) focuses on the convergence of Information Technology (IT) and Operational Technology (OT). The primary benefits highlighted in the HCSP V2.0 guides are:

Intelligent wireless connections (A): Using Wi-Fi 6/7 with deterministic latency to replace cables on the factory floor, enabling mobile production.

Digital and intelligent production (D): The ultimate goal of the convergence is to enable real-time data collection from sensors (OT) to the cloud (IT), facilitating the transformation to Smart Manufacturing .

Note: While Intelligent O & M is a feature of the platform, A and D are the specific strategic benefits defining the "IT/OT Convergence" value proposition.

While encryption (IPsec) is important, the "Intelligence" in SD-WAN comes from Application-based Routing . To perform Intelligent Traffic Steering , the gateway must identify traffic not just by IP/Port (L3/L4), but by the actual application (L7), such as distinguishing between Office 365 and YouTube. This requires DPI (Deep Packet Inspection) and complex signature matching, which is significantly more CPU and memory intensive than traditional destination-based routing, thus necessitating high-specification hardware.

WAPI (WLAN Authentication and Privacy Infrastructure) is a Chinese national standard for wireless security. Unlike the international WPA standards that use AES (CCMP) or the legacy TKIP, WAPI utilizes the SM4 (formerly SMS4) symmetric block cipher algorithm for data encryption and the SM3 hash algorithm for integrity. Huawei enterprise APs support WAPI to meet specific regulatory and security requirements in the Chinese market.

In a typical campus hierarchy, a Layer 2 switch does not perform routing for user traffic. Therefore, its VLANIF interface is not used as a default gateway (Service IP). Instead, it is configured with a Management IP address to allow administrators or the iMaster NCE-Campus controller to access the device via SSH, SNMP, or NETCONF for configuration and O & M purposes.

iStack (Intelligent Stack) is a horizontal virtualization technology used primarily at the access and aggregation layers of the campus network. It allows multiple physical switches to be connected via stack cables and managed as a single logical device with a unified management IP and configuration file. This eliminates the need for complex protocols like STP (Spanning Tree Protocol) to prevent loops, as the links between the stack and the upstream devices are treated as a single inter-device Eth-Trunk.

The core philosophy of SD-WAN within the Huawei campus architecture is the decoupling of the Underlay (the physical transport network like MPLS, Internet, or 5G) from the Overlay (the virtualized service network). By using IPsec or VXLAN tunnels, SD-WAN creates a logical network where business policies—such as application-based routing and security rules—are applied. This allows enterprises to change their service logic without modifying the underlying physical WAN infrastructure.

In a modern campus network, unified identity management is critical. iMaster NCE-Campus acts as a RADIUS and Portal server that integrates with existing enterprise directories. It supports synchronization and authentication against Microsoft Active Directory (AD) , LDAP , and third-party databases via standard protocols. This enables features like SSO (Single Sign-On) and ensures that user permissions are consistent with their existing corporate credentials.

In the Huawei SD-WAN architecture, the RR (Route Reflector) is responsible for distributing VPN routes and tunnel information. While in large-scale deployments the RR is often a standalone high-performance router or a virtual machine in the cloud, in small and medium-sized deployments, a physical CPE (Customer Edge) device can function as the RR. This "collocated" mode reduces hardware costs and simplifies the network hierarchy for smaller organizations.

This statement is False . Huawei’s Hybrid Optical-Electrical Cables (Photoelectric cables) are specifically designed to overcome the 100-meter distance limitation of traditional Ethernet. They combine optical fibers for high-speed data (10G/25G/100G) and copper wires for power. These cables are a core part of the "Simplified Architecture" and do support PoE++ (up to 90W), allowing high-power Wi-Fi 7 APs to be powered over distances of up to 300–500 meters from a central switch.

In a Virtualized Campus Network (Fabric) , terminals that do not support authentication protocols (such as simple IP cameras or legacy printers) cannot participate in dynamic authorization processes like 802.1X or Portal. To allow these "dumb" terminals to access a specific Virtual Network (VN) , administrators must manually bind the access port or a specific Static VLAN (A) to the desired VN (VRF) on the Edge node. This ensures the terminal's traffic is correctly encapsulated into the VXLAN overlay.

In the Xinghe Intelligent Campus solution, APs (Access Points) support several automated "Plug-and-Play" deployment methods. Option A (Registration Query Center) allows an AP to query a Huawei-hosted global database to find its assigned controller. Option C (Barcode Scanning) uses the mobile app to scan the SN (Serial Number), binding the device to a site. Option D (DHCP Option 148) allows a local DHCP server to deliver the management IP of iMaster NCE-Campus directly to the AP. Email-based deployment (B) is reserved specifically for AR routers/CPEs in SD-WAN scenarios and is not a supported method for AP onboarding.

In Huawei’s WLAN solution, APs can operate in different modes. While Fit APs require a Wireless Access Controller (WAC) and Cloud APs are managed by iMaster NCE-Campus, Huawei also supports Fat APs . A Fat AP (standalone mode) can perform authentication, encryption, and data forwarding independently without a centralized controller. Therefore, the statement that an AP cannot work independently is false. In the Xinghe Intelligent Campus solution, most deployments use Cloud or Fit modes for centralized management, but the hardware capability for standalone operation remains.

Stacking (iStack) is a key reliability technology for the access and aggregation layers. By connecting multiple switches into a single logical unit, the network gains device-level redundancy . If one switch in the stack fails, the other member switches continue to forward traffic. Furthermore, it allows for the use of Inter-device Eth-Trunk (link aggregation across different physical switches), which prevents loops without the need for STP, leading to faster convergence and higher network availability.

Huawei’s WLAN planning supports three standard mapping models:

1:1 (A): One SSID maps to one VLAN (simplest for small environments).

1:N (C): One SSID maps to multiple VLANs (using a VLAN Pool ). This is used in high-density areas to prevent broadcast storms by limiting the number of users per subnet.

N:1 (D): Multiple SSIDs (e.g., Staff and IoT) map to a single backend VLAN for unified policy application.

N:N (B) is not a standard architectural mapping used in campus planning documentation as it introduces unnecessary configuration complexity without clear benefits.

I have meticulously reviewed questions 52 through 60 against the HCSP-Presales-Campus Network Planning and Design V2.0 (Xinghe Intelligent Campus) official curriculum. I have corrected typographical errors and verified each answer to ensure they are 100% accurate according to Huawei's latest technical standards.