Huawei Certification H19-424_V1.0 Updated Exam

In the overlay interconnection solution, it is recommended to run the VRRP VRRP virtual address between the two borders as the gateway for wireless users

During wireless centralized forwarding, the WAC and the border need to manage IP communication and service VLAN communication, that is, the underlay and overlay need to be connected.

During wireless local forwarding, only the management IP address needs to be communicated between the WAC and the border, that is, the underlay is connected.

Supported networking: WAC dual-node hot standby (VRRP dual-node hot standby or dual-link hot standby), and dual-border port sub-networking, recommended dual-node VRRP hot standby: In multi-campus interconnection LAN-WAN convergence scenarios, refer to the following topology

Policy service, which provides the ability to configure policies, mainly configures access policies between security groups and security groups, integrates AC3.0, and AC1.0 is optional

Authentication & Portal service, which supports authentication, authorization, and accounting capabilities as an AAA server, is integrated in AC3.0 and AC1.0 is optional, in which billing depends on a third party

The P-Group synchronization service, as the control plane of the IP-Group, provides the collection and distribution of IP and security group correspondence, and is integrated in AC3.0 and AC1.0

Policy execution points and authentication points can be deployed on different physical devices.

Ethoam

BFD

Y1731

NQA

When the authentication point and the group policy execution point are not on the same device, you need to use the policy linkage function.

In the policy linkage scenario, you need to set the downstream port type of the Edge device to Extended Access Switch

The policy linkage function means that no matter where you go, the permission to access resources is the same, and it is decoupled from the IP address.

When the authentication point, access point, and group policy execution point are all connected to the device, the policy linkage function should be used