SD-WAN CPEs (e.g., Huawei NetEngine AR series) are feature-rich. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation lists:

A: Zero Touch Provisioning (ZTP) and visualized O&M simplify deployment and management.

B: CPU + Network Processor (NP) design ensures high forwarding performance.

C: Application-based traffic steering optimizes traffic flow.

Huawei’s SD-WAN solution enhances enterprise WAN connectivity. The HCSP-Presales-CampusNetwork Planning and Design V1.0 documentation lists:

A: Simplified O&M through centralized management (e.g., via iMaster NCE).

B: Application identification for traffic steering and optimization.

C: Dynamic link policy adjustment to adapt to network conditions.

Indoor AP installation modes vary. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation lists:

A, B, C: Threaded rod, ceiling, and wall mounting are standard for Huawei APs.

Traffic steering optimizes SD-WAN. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation lists:

Dual-gateway scenarios support multiple protocols. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation lists:

FEC/A-FEC mitigates packet loss. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation details:

802.1X is a port-based network access control (NAC) protocol widely used for securing wired and wireless networks. It relies on the Extensible Authentication Protocol (EAP) to facilitate authentication between a supplicant (client) and an authentication server (typically a RADIUS server). The HCSP-Presales-Campus Network Planning and Design V1.0 documentation highlights two primary EAP-based authentication modes in 802.1X deployments: EAP termination and EAP relay.

EAP Termination: In this mode, the authenticator (e.g., a switch or access point) terminates the EAP session and communicates with the authentication server using a protocol like RADIUS. The authenticator extracts the EAP information and forwards credentials to the server in a non-EAP format. This mode is commonly used when the authenticator handles part of the authentication process locally.

EAP Relay: In this mode, the authenticator relays the entire EAP conversation between the supplicant and the authentication server without processing it. The EAP messages are encapsulated (e.g., in RADIUS packets) and sent directly to the server, which performs the full authentication. This mode is preferred for centralized authentication management.

AP coverage control is key in WLAN design. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation specifies:

A, C: Antenna angle and transmit power directly adjust coverage area.

Huawei’s free mobility solution enhances user authentication and access control by synchronizing IP-security group entries across devices, ensuring seamless policy enforcement. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation specifies:

Switches: Campus switches (e.g., CloudEngine series) can act as access devices, authenticating terminals via methods like 802.1X or MAC authentication. They support IP-security group synchronization to enforce consistent policies.

APs (Access Points): Wireless APs (e.g., AirEngine series) serve as access devices in WLAN scenarios, authenticating terminals via 802.1X, portal, or MAC methods. They also participate in IP-security group synchronization for mobility.

AR (Access Routers): While AR routers (e.g., NetEngine AR series) can perform authentication in certain contexts, they are typically not access devices in the free mobility solution’s context, focusing instead on routing and WAN functions.

Huawei’s SD-WAN architecture is multi-layered. The HCSP-Presales-Campus Network Planning and Design V1.0 documentation defines:

A: Control layer (e.g., RR) manages routing and overlay topology.

B: Network layer (e.g., CPEs) handles data transmission.

C: Management layer (e.g., iMaster NCE) oversees configuration and monitoring.