Huawei HCIP-Datacom-Campus Network Planning and Deployment V1.5 H12-841_V1.5 Exam Dumps: Updated Questions & Answers (March 2026)

In Huawei VXLAN implementations described in HCIP Datacom Campus Network documentation, the relationship between aVXLAN Network Identifier (VNI)and aBridge Domain (BD)is aone-to-one (1:1) mapping. Each BD represents a Layer 2 broadcast domain in the VXLAN overlay network, and each BD is uniquely identified by a single VNI.

The VNI is carried in the VXLAN header and is used by VTEPs to determine which virtual Layer 2 network the encapsulated traffic belongs to. When a packet is received, the VTEP decapsulates the VXLAN header and forwards the traffic to the corresponding BD based on the VNI value. Because of this mechanism, a single BD can only be associated with one VNI, and a VNI can only represent one BD.

This strict 1:1 mapping simplifies traffic forwarding, MAC address learning, and broadcast, unknown unicast, and multicast (BUM) traffic handling. It also ensures clear isolation between different virtual networks, which is essential for multi-tenant campus and data center environments. Allowing multiple BDs to map to one VNI or vice versa would break traffic isolation and complicate forwarding logic.

Therefore, Huawei VXLAN design enforces a one-to-one relationship between VNIs and BDs, making1:1the correct answer.

In a VXLAN BGP EVPN network, different EVPN route types are used to advertise specific kinds of control-plane information.BGP EVPN Type 2 routes, also known asMAC/IP Advertisement routes, are primarily used to advertise Layer 2 and host-level Layer 3 reachability information between VTEPs.

According to HCIP Datacom Campus Network documentation, a Type 2 route carriesMAC address information, and it can optionally carry ahost IP addressassociated with that MAC. This enables efficient MAC learning and ARP suppression within the VXLAN fabric. TheL2VNIis also included in Type 2 routes, as it identifies the Layer 2 broadcast domain to which the MAC and IP information belongs.

TheL3VNIis not used to identify a Layer 2 broadcast domain but is associated with Layer 3 VPN forwarding and inter-VNI routing. While L3VNI information is relevant in EVPN-based Layer 3 services, it is not the primary identifier in a Type 2 route. However, the key distinction in this question lies in the difference between host routes and prefix routes.

AnIP prefixrepresents a network segment rather than a single host and is advertised usingEVPN Type 5 (IP Prefix) routes, not Type 2 routes. Type 2 routes only carry host IP addresses, not IP prefixes. Therefore,IP Prefixis not carried in a BGP EVPN Type 2 route, making optionCthe correct answer.

In the Huawei CloudCampus Solution,device registrationis a key step that allows network devices such as switches, routers, and APs to establish a trusted management relationship withiMaster NCE-Campus. When a device is powered on and configured for cloud or controller-based management, it sends a registration request to the controller using a predefined service port.

According to HCIP Datacom Campus Network documentation,port 18008is used as thedestination portfor device registration requests sent to iMaster NCE-Campus. This port is specifically reserved for device onboarding and registration services, ensuring secure and standardized communication during the initial connection phase. Once the registration is successful, the controller can authenticate the device, assign it to a site, and push management and service configurations.

The other options are not correct in this context.Port 53is used for DNS services and has no role in controller registration.Port 179is used by BGP for routing protocol communication and is unrelated to device management.Port 10020is commonly associated with other management or telemetry functions but is not used for device registration in CloudCampus solutions.

Correctly configuring network connectivity and firewall rules to allow traffic to destination port18008is essential for successful zero-touch provisioning and automatic onboarding of devices. Therefore, the correct destination port number for device registration requests to iMaster NCE-Campus is18008, making optionDthe correct answer.

Comprehensive and Detailed 200 to 250 words of Explanation From HCIP Datacom Campus Network documents knowledge without any URL or Links:

In a Layer 2 VXLAN gateway, the MAC address table recordslocal and remote MAC addressesassociated with specific Bridge Domains (BDs) and outbound interfaces. Entries learned fromremote VTEPsare shown with an outbound interface that is aVXLAN tunnel endpoint IP address, such as10.3.3.3, indicating VXLAN-based learning.

StatementAis correct because both MAC addresses0000-0000-0010and5489-9893-48a3are associated withBD 10, meaning they are in the same Layer 2 broadcast domain.

StatementCis correct because MAC entries learned with an outbound interface displayed as an IP address representremote MAC addresses learned through the VXLAN tunnel.

StatementDis also correct. The MAC address5489-9893-48a3is learned from the local physical subinterfaceGE1/0/1.10, which belongs toBD 10, confirming local access.

StatementBis incorrect. Even though5489-982d-77e2is associated withGE1/0/1.20 (BD 20), hosts inBD 20 and BD 10 cannot communicate directly at Layer 2because they belong to different bridge domains.

Therefore, the correct answers areA, C, and D.

In Huawei campus WLAN solutions, different WLAN architectures are designed to meet varying network scales, cost requirements, and management complexity. The architecture described in this question matches theLeader APsolution.

ALeader APcan operate independently without a dedicated wireless controller, while also having the capability to manage asmall number of subordinate APs. The Leader AP takes on lightweight control functions, such as basic configuration management and simple roaming coordination among the managed APs. This allows wireless users to roam between APs with minimal service interruption, meeting basic mobility requirements.

According to HCIP Datacom Campus Network documentation, the Leader AP architecture is characterized bylow deployment cost and simple maintenance. Since no separate AC is required and the number of APs is limited, network planning and configuration are straightforward. This significantly reduces the technical skill level required for daily operation and maintenance, making it suitable for small campuses, retail stores, branch offices, and small enterprises.

In contrast,Fat APsoperate completely independently and do not support centralized roaming management.AC + Fit AParchitectures are designed for medium to large networks and require higher investment and professional maintenance.Agile distributed APsolutions focus on centralized APs and RUs, which do not align with the independent AP management described.

Therefore, the WLAN architecture that best fits the given characteristics isLeader AP, making optionAthe correct answer.

Comprehensive and Detailed 200 to 250 words of Explanation From HCIP Datacom Campus Network documents knowledge without any URL or Links:

Telemetry is a next-generation network data collection technology designed to overcome the limitations of traditional SNMP polling. One of its major advantages is that it ismodel-driven, relying onYANG modelsto define structured and extensible data formats. This allows Telemetry to support various data types and provides stronger semantic meaning than SNMP MIBs, makingoption A correct.

Another key advantage ishigh-frequency data collection. Telemetry supportssecond-level or even sub-second-level reporting, enabling more precise and real-time network monitoring. This capability is critical for intelligent O&M scenarios such as fault prediction, traffic analysis, and SLA assurance. SNMP, by contrast, typically relies on periodic polling with much lower precision. Therefore,option D is correct.

Telemetry does not establish sessions based on SSH. Instead, it typically uses protocols such asgRPCover secure transport channels like TLS. Hence,option B is incorrect.

Option C is also incorrect because Telemetry focuses ondata subscription and reporting, not on configuring or managing device databases. Configuration management remains the responsibility of controllers or network management systems, not the Telemetry mechanism itself.

According to HCIP Datacom Campus Network documentation, Telemetry’s strengths lie in model-driven data representation and high-precision, real-time monitoring, making A and D the correct answers.

In a VXLAN-based campus or data center network, different node roles are defined to ensure proper traffic forwarding between traditional networks, the VXLAN overlay, and external networks. According to HCIP Datacom Campus Network documentation,edge nodes(also known as VTEPs) are responsible for encapsulating and decapsulating traffic between traditional Layer 2 or Layer 3 networks and the VXLAN overlay network. This allows legacy networks to communicate with virtualized VXLAN segments.

However, when traffic needs to leave the VXLAN fabric and accessexternal networks, such as a WAN, Internet, or another non-VXLAN domain, theborder nodeis used. The border node sits at the boundary of the VXLAN fabric and provides interconnection between the VXLAN network and external routing domains. It performs functions such as VXLAN termination, route advertisement, and traffic forwarding between overlay and underlay or external networks.

In BGP EVPN-based VXLAN deployments, the border node typically participates in BGP routing to exchange reachability information with external devices, ensuring seamless communication between VXLAN tenants and outside networks. This architectural separation improves scalability, simplifies network design, and enhances control over traffic entering or leaving the VXLAN fabric. Therefore, the correct node through which a VXLAN network accesses an external network is theBordernode.

In iMaster NCE-Campus, device management functions are tightly integrated with secure remote access mechanisms to ensure safe and efficient O&M operations. One such mechanism is theSSH proxy tunnel, which allows administrators to remotely access managed devices through the controller without directly exposing device management interfaces to the external network.

According to HCIP Datacom Campus Network documentation, theSSH proxy tunnel is automatically established when the Command Line function is usedon the Device Management page. When an administrator clicks theCommand Lineoption, iMaster NCE-Campus dynamically builds a secure SSH proxy channel between the controller and the target device. This enables real-time CLI access to the device through the web interface while maintaining strict security controls.

Other functions such asSummary,Entry Query, andDevice Configurationdo not require direct CLI interaction with the device. These functions rely on management protocols and configuration delivery mechanisms such as NETCONF or telemetry, and therefore do not trigger the establishment of an SSH proxy tunnel.

The Command Line function is specifically designed for scenarios such as advanced troubleshooting, manual verification, or executing device-level commands. Automatically enabling the SSH proxy tunnel at this moment ensures that CLI access is bothsecure and on-demand, reducing attack surfaces and simplifying remote maintenance.

Therefore, the function that automatically enables the SSH proxy tunnel isCommand Line, making optionDthe correct answer.

WLAN planning and design aim to minimize co-channel and adjacent-channel interference while maximizing spectrum utilization and user experience. According to HCIP Datacom Campus Network WLAN design principles, proper channel planning is a core task, especially in environments with high user density.

On the2.4 GHz frequency band, only three non-overlapping channels—1, 6, and 11—are traditionally recommended. These channels do not overlap in frequency, which helps reduce interference between adjacent APs. Inhigh-density scenarios, to further improve spectrum utilization,channels 1, 5, 9, and 13can be used. This approach shortens the channel spacing but is acceptable when transmit power is well controlled and AP placement is carefully planned, enabling higher AP density while keeping interference manageable.

On the5 GHz frequency band, there are more available channels and less interference compared to 2.4 GHz. HCIP Datacom documentation recommendsstaggering high-frequency and low-frequency channels between adjacent APs. This staggered channel allocation reduces the likelihood of co-channel interference and improves overall throughput and roaming performance, especially in large or high-density campus deployments.

These channel planning strategies are standard WLAN design best practices supported by Huawei and are widely applied in enterprise campus networks. Therefore, the statement accurately reflects recommended WLAN planning principles and isTRUE.

Comprehensive and Detailed 200 to 250 words of Explanation From HCIP Datacom Campus Network documents knowledge without any URL or Links:

Policy association is a core concept in Huawei campus network security design and is used to associate users, devices, and control elements for unified policy enforcement. According to HCIP Datacom Campus Network documentation, policy association definesthree fixed roles:Terminal,Access device, andControl device.

TheTerminalrepresents the end user or user device accessing the network. TheAccess deviceis typically a switch or wireless access device that provides network access and enforces authentication and authorization policies. TheControl device, such as an authentication or policy control node, is responsible for policy decision-making and centralized management.

APortal serveris not a role within policy association. Instead, it is aservice componentthat provides web-based authentication pages and user interaction during Portal authentication. While it participates in the overall authentication process, it does not belong to the policy association role model.

Therefore, among the given options,Portal serveris not one of the three defined policy association roles. This makesoption Bthe correct answer.