Dynamic VLAN Authorization in Huawei CloudCampus
Dynamic VLAN assignmentallows users to be placed into specific VLANsbased on authentication methods, ensuring security and network segmentation.
Correct Explanations:
✅A. Wired users using 802.1X authentication receive VLAN assignments dynamically.
After authentication,the access control system (e.g., iMaster NCE-Campus)assigns VLANs dynamically.
✅C. Wireless users using 802.1X authentication also receive VLAN assignments.
Similar to wired users,wireless 802.1X authentication allows dynamic VLAN assignmentvia the RADIUS server.
✅D. Wired users using MAC authentication can receive VLAN assignments.
If a userdoes not support 802.1X, MAC authentication can still be used to assign VLANs dynamically.
Incorrect Statement Explanation:
❌B. When wireless users pass Portal authentication, they join the authorization VLANs delivered to edge nodes.
Wrong!InPortal authentication, VLAN assignmentis not dynamically deliveredbecausePortal authentication typically applies access policies, not VLAN changes.
Dynamic VLAN assignment is mainly used with 802.1X or MAC authentication.
Reference from Huawei HCIE-Datacom Documentation:
Huawei CloudCampus Configuration Guide – Dynamic VLAN Assignment and Authentication
HCIE-Datacom Training Material – VLAN Authorization in Virtualized Campus Networks
