H12-721 Exam Dumps : Huawei Certified ICT Professional - Constructing Infrastructure of Security Network

IKE V2 establishes a pair of IPSec SAs. Normally, an IKE SA and a pair of IPSec SAs can be completed by exchanging 4 messages twice.

IKE V2 does not have the concept of master mode and barb mode

To establish a pair of IPSec SAs, only 6 messages need to be exchanged in the IKE V1 master mode.

When the IPSec SA established by D IKE V2 is greater than one pair, each pair of SAs needs only one additional exchange, that is, two messages can be completed.

Smurf attack

Land attack

WinNuke attack

Ping of Death attack

When the interface is in the non-bypass state, the traffic flows from the GE0 interface to the USG through Router_a. After the USG processes, the traffic flows from the GE1 interface to Router_B.

When the interface is working in the Bypass state, the traffic is forwarded from the GE0 interface to the USG. The USG does not pass any processing and flows directly from the GE1 interface to Router_B.

When the firewall is configured to implement the security priority, the uplink and downlink services are not interrupted when the interface works in the bypass state. Therefore, the device can be kept in the Bypass state.

The electrical bypass interface can only work in Layer 2 mode and has circuit bypass function.