H12-821 Premium File
- 464 Questions & Answers
- Last Update: Nov 9, 2026
Before changing the Huawei network configuration, an engineer investigates: An operations team leaks every Level-2 route into a small Level-1 access area, exceeding the intended routing scale. Which diagnostic check should be performed first?
Inspect import policy, level-specific LSP advertisements and the Level-1 route table. This check isolates the suspected cause before an unsafe change. If confirmed, the targeted action is: Apply a narrow supported Level-2-to-Level-1 route-leak policy only for authorized service prefixes. Successful verification is: The Level-1 area learns its required specifics while unrelated Level-2 routes stay outside its LSDB.
Inspect IS-IS NETs, area IDs, level capabilities and Hello authentication on both interfaces. This check would diagnose IS-IS level-1 area adjacency, but would not first isolate the described IS-IS selective L2-to-L1 route leaking. Begin with: Inspect import policy, level-specific LSP advertisements and the Level-1 route table.
Check attached bits in LSPs, candidate L1/L2 routes and default forwarding behavior. This check would diagnose IS-IS L1 default to nearest attached L1L2, but would not first isolate the described IS-IS selective L2-to-L1 route leaking. Begin with: Inspect import policy, level-specific LSP advertisements and the Level-1 route table.
Capture RA packets and inspect prefix options, A/M/O flags and client IPv6 address state. This check would diagnose IPv6 SLAAC router advertisement, but would not first isolate the described IS-IS selective L2-to-L1 route leaking. Begin with: Inspect import policy, level-specific LSP advertisements and the Level-1 route table.
A Huawei Datacom engineer is investigating the following situation: Two adjacent AS border routers have matching peering addresses but an upstream ACL blocks TCP port 179, leaving BGP Idle. Which corrective action best resolves the specified issue?
Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Technical basis: BGP exchanges routing control messages over an established TCP transport connection. The measurable acceptance criterion is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Set reviewed LOCAL_PREF values for the intended egress and confirm internal propagation. This is a legitimate response to the different issue of BGP local preference internal egress, but it does not correct the specific BGP TCP reachability and port condition reported. The relevant technical distinction is: BGP exchanges routing control messages over an established TCP transport connection.
Enable and verify the supported L2VPN EVPN MP-BGP address family for intended peers. This is a legitimate response to the different issue of MP-BGP address-family activation, but it does not correct the specific BGP TCP reachability and port condition reported. The relevant technical distinction is: BGP exchanges routing control messages over an established TCP transport connection.
Configure a valid shared VRRP virtual gateway in the client subnet and set hosts to use it. This is a legitimate response to the different issue of VRRP virtual gateway and ownership, but it does not correct the specific BGP TCP reachability and port condition reported. The relevant technical distinction is: BGP exchanges routing control messages over an established TCP transport connection.
A team is validating a Huawei network repair: Two adjacent AS border routers have matching peering addresses but an upstream ACL blocks TCP port 179, leaving BGP Idle. Which observable result provides the clearest evidence of success?
TCP 179 establishes to the configured peer and BGP progresses toward Established. This result directly tests whether the correct action worked: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. This is explained by: BGP exchanges routing control messages over an established TCP transport connection.
The prefix remains usable internally where authorized and is not advertised to prohibited external peers. That observation would support a separate case of BGP route policy community NO_EXPORT, not verification of the reported BGP TCP reachability and port. The relevant observable outcome here is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Internal BGP route decisions prefer the intended provider for matched prefixes and fail over if unavailable. That observation would support a separate case of BGP local preference internal egress, not verification of the reported BGP TCP reachability and port. The relevant observable outcome here is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Every device interprets intended link costs and SPF selects the documented shortest paths. That observation would support a separate case of IS-IS metric-style consistency, not verification of the reported BGP TCP reachability and port. The relevant observable outcome here is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Consider the following Huawei Datacom deployment: Two adjacent AS border routers have matching peering addresses but an upstream ACL blocks TCP port 179, leaving BGP Idle. Which technical principle best explains the observed behavior?
BGP exchanges routing control messages over an established TCP transport connection. This mechanism explains the case-specific corrective step: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Confirm the mechanism by verifying: TCP 179 establishes to the configured peer and BGP progresses toward Established.
BGP AS_PATH loop detection prevents a route from circulating back through an AS already in its path. This explains BGP AS_PATH loop detection, but not why the issue in this scenario occurs. The specific mechanism is: BGP exchanges routing control messages over an established TCP transport connection.
Higher BGP LOCAL_PREF is normally preferred within an AS and is not advertised to external AS peers. This explains BGP local preference internal egress, but not why the issue in this scenario occurs. The specific mechanism is: BGP exchanges routing control messages over an established TCP transport connection.
Huawei MQC separates class identification, traffic behavior and applied traffic-policy binding. This explains MQC classifier and behavior association, but not why the issue in this scenario occurs. The specific mechanism is: BGP exchanges routing control messages over an established TCP transport connection.
A Huawei network is left in this condition: Two adjacent AS border routers have matching peering addresses but an upstream ACL blocks TCP port 179, leaving BGP Idle. What direct operational or security risk is most relevant if it is not corrected?
IP ping success does not prove the BGP transport session is available. This is the direct exposure created by BGP TCP reachability and port. Mitigate it through: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Then test: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Broad ICMPv6 blocking can break ordinary IPv6 forwarding and address resolution. This consequence is associated more directly with IPv6 NDP neighbor resolution. For the stated conditions the immediate exposure is: IP ping success does not prove the BGP transport session is available.
Assuming MED always overrides LOCAL_PREF or applies across every AS can misroute traffic. This consequence is associated more directly with BGP MED same-neighbor-AS comparison. For the stated conditions the immediate exposure is: IP ping success does not prove the BGP transport session is available.
Using AS_PATH padding without understanding precedence can fail to shift traffic. This consequence is associated more directly with BGP AS_PATH length egress choice. For the stated conditions the immediate exposure is: IP ping success does not prove the BGP transport session is available.
Before changing the Huawei network configuration, an engineer investigates: Two adjacent AS border routers have matching peering addresses but an upstream ACL blocks TCP port 179, leaving BGP Idle. Which diagnostic check should be performed first?
Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state. This check isolates the suspected cause before an unsafe change. If confirmed, the targeted action is: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Successful verification is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Inspect AFI/SAFI negotiation, peer AF activation and received EVPN routes. This check would diagnose MP-BGP address-family activation, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Check area stub configuration on all routers, Type 3 default and any local ASBR attempts. This check would diagnose OSPF stub area external LSA constraint, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Inspect candidate AS origins, MED values, higher-priority attributes and effective route-selection rules. This check would diagnose BGP MED same-neighbor-AS comparison, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
A Huawei Datacom engineer is investigating the following situation: A dedicated transit link passes ICMP but the BGP session never establishes because a firewall denies its control channel. Which corrective action best resolves the specified issue?
Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Technical basis: BGP exchanges routing control messages over an established TCP transport connection. The measurable acceptance criterion is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Review the ABR Type 3 summary LSA policy and advertise the intended inter-area prefix. This is a legitimate response to the different issue of OSPF type-3 inter-area summaries, but it does not correct the specific BGP TCP reachability and port condition reported. The relevant technical distinction is: BGP exchanges routing control messages over an established TCP transport connection.
Evaluate eligible candidate paths and select the shorter AS_PATH when earlier BGP preference criteria do not decide. This is a legitimate response to the different issue of BGP AS_PATH length egress choice, but it does not correct the specific BGP TCP reachability and port condition reported. The relevant technical distinction is: BGP exchanges routing control messages over an established TCP transport connection.
Add supported PBR next-hop reachability tracking or failover logic consistent with service requirements. This is a legitimate response to the different issue of PBR failed-next-hop fallback, but it does not correct the specific BGP TCP reachability and port condition reported. The relevant technical distinction is: BGP exchanges routing control messages over an established TCP transport connection.
A team is validating a Huawei network repair: A dedicated transit link passes ICMP but the BGP session never establishes because a firewall denies its control channel. Which observable result provides the clearest evidence of success?
TCP 179 establishes to the configured peer and BGP progresses toward Established. This result directly tests whether the correct action worked: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. This is explained by: BGP exchanges routing control messages over an established TCP transport connection.
Representative APs register to the intended AC and publish the approved SSIDs. That observation would support a separate case of WLAN AC and Fit AP CAPWAP, not verification of the reported BGP TCP reachability and port. The relevant observable outcome here is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
The neighboring AS picks the intended ingress where the MED comparison is applicable. That observation would support a separate case of BGP MED same-neighbor-AS comparison, not verification of the reported BGP TCP reachability and port. The relevant observable outcome here is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
The prefix remains usable internally where authorized and is not advertised to prohibited external peers. That observation would support a separate case of BGP route policy community NO_EXPORT, not verification of the reported BGP TCP reachability and port. The relevant observable outcome here is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Consider the following Huawei Datacom deployment: A dedicated transit link passes ICMP but the BGP session never establishes because a firewall denies its control channel. Which technical principle best explains the observed behavior?
BGP exchanges routing control messages over an established TCP transport connection. This mechanism explains the case-specific corrective step: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Confirm the mechanism by verifying: TCP 179 establishes to the configured peer and BGP progresses toward Established.
An RR's advertisement rules depend on whether the source and target peers are clients. This explains BGP route-reflector client scoping, but not why the issue in this scenario occurs. The specific mechanism is: BGP exchanges routing control messages over an established TCP transport connection.
MP-BGP carries address-family-specific routes only when corresponding capabilities and peers are configured. This explains MP-BGP address-family activation, but not why the issue in this scenario occurs. The specific mechanism is: BGP exchanges routing control messages over an established TCP transport connection.
OSPF stub areas exclude Type 5 external LSAs and rely on an ABR-generated default for external destinations. This explains OSPF stub area external LSA constraint, but not why the issue in this scenario occurs. The specific mechanism is: BGP exchanges routing control messages over an established TCP transport connection.
A Huawei network is left in this condition: A dedicated transit link passes ICMP but the BGP session never establishes because a firewall denies its control channel. What direct operational or security risk is most relevant if it is not corrected?
IP ping success does not prove the BGP transport session is available. This is the direct exposure created by BGP TCP reachability and port. Mitigate it through: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Then test: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Using arbitrary AS numbers to make a session open can break routing policy and loop prevention. This consequence is associated more directly with BGP peer autonomous-system mismatch. For the stated conditions the immediate exposure is: IP ping success does not prove the BGP transport session is available.
Misunderstanding origin can lead to misleading troubleshooting changes to later attributes. This consequence is associated more directly with BGP origin attribute tie break. For the stated conditions the immediate exposure is: IP ping success does not prove the BGP transport session is available.
Incorrect DIS assumptions can cause inconsistent troubleshooting and churn in shared-segment LSPs. This consequence is associated more directly with IS-IS DIS and pseudonode on broadcast LAN. For the stated conditions the immediate exposure is: IP ping success does not prove the BGP transport session is available.
Before changing the Huawei network configuration, an engineer investigates: A dedicated transit link passes ICMP but the BGP session never establishes because a firewall denies its control channel. Which diagnostic check should be performed first?
Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state. This check isolates the suspected cause before an unsafe change. If confirmed, the targeted action is: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Successful verification is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Inspect EVPN NLRI route types, MAC/IP attributes, VNI bindings and desired prefix routes. This check would diagnose EVPN Type-2 MAC/IP route interpretation, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Inspect reflector cluster ID, reflected path attributes and RR-client membership. This check would diagnose BGP route reflector cluster loop prevention, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Inspect ip-prefix sequence, mask-length qualifiers and test candidate routes. This check would diagnose Prefix-list network and mask matching, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Please check your mailbox for a message from support@examlabs.com and follow the directions.