H12-891_V1.0 Exam Dumps : HCIE-Datacom V1.0

Dynamic VLAN Authorization in Huawei CloudCampus

Dynamic VLAN assignmentallows users to be placed into specific VLANsbased on authentication methods, ensuring security and network segmentation.

Correct Explanations:

✅A. Wired users using 802.1X authentication receive VLAN assignments dynamically.

After authentication,the access control system (e.g., iMaster NCE-Campus)assigns VLANs dynamically.

✅C. Wireless users using 802.1X authentication also receive VLAN assignments.

Similar to wired users,wireless 802.1X authentication allows dynamic VLAN assignmentvia the RADIUS server.

✅D. Wired users using MAC authentication can receive VLAN assignments.

If a userdoes not support 802.1X, MAC authentication can still be used to assign VLANs dynamically.

Incorrect Statement Explanation:

❌B. When wireless users pass Portal authentication, they join the authorization VLANs delivered to edge nodes.

Wrong!InPortal authentication, VLAN assignmentis not dynamically deliveredbecausePortal authentication typically applies access policies, not VLAN changes.

Dynamic VLAN assignment is mainly used with 802.1X or MAC authentication.

Reference from Huawei HCIE-Datacom Documentation:

Huawei CloudCampus Configuration Guide – Dynamic VLAN Assignment and Authentication

HCIE-Datacom Training Material – VLAN Authorization in Virtualized Campus Networks

The command output shows:

*>i before both networks, which means these routes are the preferred routes (*) and are learned via internal BGP (i).

Two networks are listed: 3002::3 and 3002::4, which means R1does havethese two routes in its BGP IPv6 routing table.

For 3002::4, the path origin shows 65001 i, which means this route originated from AS 65001 and was learned through IBGP.

The AS Path attribute is only shown for 3002::4, but both routes are clearly present.

Therefore, the correct conclusion is:

D. R1 has routes 3002::3/128 and 3002::4/128.