H12-891_V1.0 Exam Dumps : HCIE-Datacom V1.0

Comprehensive and Detailed In-Depth Explanation:

BGP4+ (BGP for IPv6) uses the MP_REACH_NLRI (Multiprotocol Reachable Network Layer Reachability Information) attribute to advertise IPv6 routes. This attribute is part of BGP ' s multiprotocol extensions (RFC 2858), allowing BGP to support multiple address families, including IPv6.

MP_REACH_NLRI: Advertises reachable IPv6 prefixes along with next-hop information.

MP_UNREACH_NLRI: Used to withdraw previously advertised IPv6 routes.

Since IPv6 addresses are significantly different from IPv4 addresses in structure and length (128 bits), the traditional BGP update message format (which supports only IPv4) is insufficient. The MP_REACH_NLRI attribute solves this by carrying IPv6-specific information.

Huawei IPsec supports multiple modes for establishing Security Associations (SAs):

A. Template negotiation — Used in IPsec policy templates and dynamic VPNs.

B. IKE auto-negotiation mode — Automatically negotiates parameters via IKE Phase 1/2.

C. Certificate negotiation — IPsec peers can authenticate each other using certificates during IKE negotiation.

D. Manual mode — Static IPsec SAs can be manually configured without IKE, often used in simple or static topologies.

Exact Extract - Huawei Security Configuration Guide (USG Series):

“IPsec SAs can be established manually or dynamically through IKE, including using PSKs or certificates. Template-based approaches simplify large-scale deployment.”