H12-841_V1.5 Exam Dumps : HCIP-Datacom-Campus Network Planning and Deployment V1.5

In a VXLAN BGP EVPN network, different EVPN route types are used to advertise specific kinds of control-plane information.BGP EVPN Type 2 routes, also known asMAC/IP Advertisement routes, are primarily used to advertise Layer 2 and host-level Layer 3 reachability information between VTEPs.

According to HCIP Datacom Campus Network documentation, a Type 2 route carriesMAC address information, and it can optionally carry ahost IP addressassociated with that MAC. This enables efficient MAC learning and ARP suppression within the VXLAN fabric. TheL2VNIis also included in Type 2 routes, as it identifies the Layer 2 broadcast domain to which the MAC and IP information belongs.

TheL3VNIis not used to identify a Layer 2 broadcast domain but is associated with Layer 3 VPN forwarding and inter-VNI routing. While L3VNI information is relevant in EVPN-based Layer 3 services, it is not the primary identifier in a Type 2 route. However, the key distinction in this question lies in the difference between host routes and prefix routes.

AnIP prefixrepresents a network segment rather than a single host and is advertised usingEVPN Type 5 (IP Prefix) routes, not Type 2 routes. Type 2 routes only carry host IP addresses, not IP prefixes. Therefore,IP Prefixis not carried in a BGP EVPN Type 2 route, making optionCthe correct answer.

Huawei’s free mobility solution is designed to provide consistent user access control and policy enforcement across the campus network, regardless of user location. According to HCIP Datacom Campus Network documentation, the solution is built around severalclearly defined core roles, each with specific responsibilities.

Theauthentication deviceis a core role. It performs user authentication using methods such as 802.1X, MAC authentication, or portal authentication, and associates user identity information with IP addresses or security groups.

Thepolicy enforcement deviceis also a core role. It enforces security and access control policies based on IP-security group information, ensuring that traffic complies with defined policies wherever the user is connected.

iMaster NCE-Campusis another core component of the free mobility solution. It acts as the centralized management and control platform, responsible for policy definition, IP-security group management, and coordination of information distribution between authentication points and policy enforcement points.

Thepolicy control device, however, isnot a core roleexplicitly defined in Huawei’s free mobility architecture. Policy control functions are integrated into iMaster NCE-Campus rather than implemented as a separate standalone device role. Therefore, “policy control device” is not recognized as a core role in the free mobility solution.

As a result, option B is the correct answer, while the other options represent essential components of Huawei’s free mobility solution as defined in HCIP Datacom Campus Network materials.

In iMaster NCE-Campus, device management functions are tightly integrated with secure remote access mechanisms to ensure safe and efficient O&M operations. One such mechanism is theSSH proxy tunnel, which allows administrators to remotely access managed devices through the controller without directly exposing device management interfaces to the external network.

According to HCIP Datacom Campus Network documentation, theSSH proxy tunnel is automatically established when the Command Line function is usedon the Device Management page. When an administrator clicks theCommand Lineoption, iMaster NCE-Campus dynamically builds a secure SSH proxy channel between the controller and the target device. This enables real-time CLI access to the device through the web interface while maintaining strict security controls.

Other functions such asSummary,Entry Query, andDevice Configurationdo not require direct CLI interaction with the device. These functions rely on management protocols and configuration delivery mechanisms such as NETCONF or telemetry, and therefore do not trigger the establishment of an SSH proxy tunnel.

The Command Line function is specifically designed for scenarios such as advanced troubleshooting, manual verification, or executing device-level commands. Automatically enabling the SSH proxy tunnel at this moment ensures that CLI access is bothsecure and on-demand, reducing attack surfaces and simplifying remote maintenance.

Therefore, the function that automatically enables the SSH proxy tunnel isCommand Line, making optionDthe correct answer.