H12-831 Sample Questions & Answers

The Overload bit is a mechanism used by an IS-IS router to signal to its neighbors that it is under stress (e.g., low memory, high CPU, or during a graceful restart) and should not be used for forwarding transit traffic. When other routers see the OL bit set in an LSP, they will still include the router's directly connected prefixes in their SPF calculations, but they will not calculate paths through the overloaded router to reach other destinations. This gracefully removes the router from the transit path without causing a full network reconvergence.

Standard QinQ maps all C-VLANs on a port to a single S-VLAN. To achieve Selective QinQ where different customers on the same port are mapped to different S-VLANs, a more granular method is needed. Since both customers use the same C-VLANs, matching on VLAN ID is insufficient. The typical method is to use a traffic policy that classifies traffic based on the source MAC address of the customer's equipment. An ACL can match the source MAC, and the associated traffic behavior can then remark the packet with the appropriate S-VLAN tag (100 for Customer A, 200 for Customer B).

The BGP state machine progresses through several states. The 'Connect' state specifically means that the local BGP process has initiated a TCP connection (sent a SYN packet) to its peer on port 179 and is now waiting for the peer to complete the TCP three-way handshake (by responding with a SYN-ACK). If the session remains in this state for an extended period, it typically indicates a lower-level connectivity issue, such as a firewall blocking TCP port 179, an incorrect peer IP address, or a routing problem preventing the SYN packet from reaching the peer.

A robust rollback plan is critical for any network change. It must include: 1) A saved, known-good configuration of the old device to restore its state. 2) A clear, step-by-step physical and logical plan to revert the change, including cabling and configuration steps. 3) Pre-defined, objective criteria (e.g., 'if critical application X is unreachable for more than 5 minutes', 'if BGP peerings do not establish within 10 minutes') that clearly define when to abandon the cutover and execute the rollback. A list of new features is part of the implementation plan, not the rollback plan.

LDP establishes a TCP session between neighbors to exchange labels. The source IP address for this session is called the transport address. On Huawei devices, the transport address is determined by the MPLS LSR-ID. If the LSR-ID is explicitly configured, that IP address is used. If not, the router automatically selects an IP address to be the LSR-ID (typically the highest IP address of a loopback interface) and uses that as the transport address. Using a stable loopback address as the LSR-ID is a best practice.

This statement is false. On a broadcast network, OSPF routers only form full adjacencies with the Designated Router (DR) and Backup Designated Router (BDR). To optimize BFD session usage, BFD sessions are only established between each router and the DR/BDR. DROther routers do not establish BFD sessions with each other. If the DR fails, the BDR detects this via its BFD session, takes over as DR, and then the other routers will establish BFD sessions with the new DR.

VXLAN is the industry-standard solution for this scenario. It addresses the scalability limitation of VLANs by using a 24-bit VXLAN Network Identifier (VNI), which supports up to 16 million logical segments. It encapsulates Layer 2 Ethernet frames inside Layer 3 UDP packets, allowing Layer 2 adjacency to be extended across any IP network (the Layer 3 underlay). Using BGP EVPN as the control plane provides a scalable and standardized way to distribute VTEP information and MAC addresses, avoiding the need for inefficient flood-and-learn mechanisms.

After comparing Local Preference, AS_PATH, and Origin type, the BGP best path selection algorithm considers the MED attribute. A lower MED value is preferred. This attribute is typically used to influence how a neighboring AS sends traffic to your AS across multiple entry points.

OSPFv3 introduces several key changes. It runs directly over IPv6 and uses link-local addresses (FE80::/10) as the source and destination for its hello packets and other control plane traffic. Authentication information was removed from the OSPFv3 packet header itself; instead, OSPFv3 leverages the native security capabilities of IPv6, specifically the Authentication Header (AH) and Encapsulating Security Payload (ESP) extension headers, to provide authentication and encryption.

NetStream is Huawei's traffic analysis technology, similar to Cisco's NetFlow or the open standard sFlow. It is designed specifically for collecting and analyzing detailed traffic flow information. By configuring NetStream on an interface, the device will sample packets, create flow records (containing source/destination IP, ports, protocol, etc.), and export these records to a NetStream collector for analysis, reporting, and capacity planning.