H12-891_V1.0 VCE Exam Download

Huawei’s Network Access Control (NAC) Portal authentication supports various identity authentication methods for user login via a web page. These include:

Username and password — standard method.

Passcode — one-time password or PIN.

SMS verification code — users receive a dynamic code via SMS for identity verification.

However:

MAC address authentication is used in MAC-based authentication, not Portal. MAC authentication allows a device to be authenticated using its MAC address without user interaction (i.e., not via a Portal page).

Correct answer: D. User’s MAC address

SRv6 Instruction Naming Conventions

SRv6 (Segment Routing over IPv6) uses segment identifiers (SIDs) with specific functions, indicated by instruction keywords:

✅ A. T: Searches a specified routing table to forward packets.

T (Table Lookup) → Performs a lookup in a specified routing table and forwards packets accordingly.

❌ B. M: Searches a Layer 2 forwarding table for unicast forwarding.

Incorrect! SRv6 does not use M for Layer 2 unicast forwarding.

✅ C. V: Searches a VPN instance routing table to forward packets.

V (VPN Routing Table Lookup) → Performs a lookup in a VPN instance (VRF) table for forwarding.

✅ D. X: Forwards packets through one or a group of specified Layer 3 interfaces.

X (Cross-connect forwarding) → Forwards packets via a specified Layer 3 interface or group of interfaces.

Reference from Huawei HCIE-Datacom Documentation:

Huawei SRv6 Configuration Guide – SRv6 SID Naming and Instruction Set

HCIE-Datacom Study Material – Segment Routing over IPv6 (SRv6) Functionality

The MPLS header consists of:

Label (20 bits) – Label value used for forwarding.

EXP (3 bits) – QoS field (Class of Service).

S bit (1 bit) – Bottom-of-Stack indicator.

TTL (8 bits) – Time-to-Live, similar to the TTL field in the IP header.

Function of TTL in MPLS:

It is used to prevent infinite loops.

Every LSR decrements the TTL by 1.

When TTL reaches 0, the packet is discarded.

This mirrors the behavior of IP TTL and ensures loop prevention in MPLS networks.

Correct answer: D. This field is used to prevent packet forwarding loops, similar to the TTL field in an IP header.

MP-BGP is an extension of BGP-4 that supports multi-protocol address families such as IPv6, VPNv4, etc. When PE and CE exchange BGP routes, there is no need to create a BGP process per VPN on the CE. The CE typically runs a standard BGP process, while the PE maintains separate VPN routing tables (VRFs).

Exact Extract - Huawei HCIE-Datacom MP-BGP Chapter:

“CE devices use standard BGP, and multiple VPNs can share the same BGP process on the CE. The PE handles VPN route separation through VRFs and MP-BGP.”