H12-821 Premium File
- 464 Questions & Answers
- Last Update: Nov 9, 2026
Before changing the Huawei network configuration, an engineer investigates: A dedicated transit link passes ICMP but the BGP session never establishes because a firewall denies its control channel. Which diagnostic check should be performed first?
Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state. This check isolates the suspected cause before an unsafe change. If confirmed, the targeted action is: Permit the specifically authorized BGP TCP session over the intended neighbor path and keep unrelated management traffic restricted. Successful verification is: TCP 179 establishes to the configured peer and BGP progresses toward Established.
Inspect EVPN NLRI route types, MAC/IP attributes, VNI bindings and desired prefix routes. This check would diagnose EVPN Type-2 MAC/IP route interpretation, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Inspect reflector cluster ID, reflected path attributes and RR-client membership. This check would diagnose BGP route reflector cluster loop prevention, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
Inspect ip-prefix sequence, mask-length qualifiers and test candidate routes. This check would diagnose Prefix-list network and mask matching, but would not first isolate the described BGP TCP reachability and port. Begin with: Test bidirectional peer IP routing, TCP port 179 and BGP neighbor socket state.
A Huawei Datacom engineer is investigating the following situation: A carrier handoff changes the peer AS number but the Huawei CE router still expects its former remote-as value. Which corrective action best resolves the specified issue?
Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Technical basis: BGP OPEN negotiation validates the expected peer AS and session parameters. The measurable acceptance criterion is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Classify Type 2 MAC/IP advertisements as endpoint reachability and use Type 5 for supported IP-prefix routing needs. This is a legitimate response to the different issue of EVPN Type-2 MAC/IP route interpretation, but it does not correct the specific BGP peer autonomous-system mismatch condition reported. The relevant technical distinction is: BGP OPEN negotiation validates the expected peer AS and session parameters.
Enable and verify the supported L2VPN EVPN MP-BGP address family for intended peers. This is a legitimate response to the different issue of MP-BGP address-family activation, but it does not correct the specific BGP peer autonomous-system mismatch condition reported. The relevant technical distinction is: BGP OPEN negotiation validates the expected peer AS and session parameters.
Apply a narrow supported Level-2-to-Level-1 route-leak policy only for authorized service prefixes. This is a legitimate response to the different issue of IS-IS selective L2-to-L1 route leaking, but it does not correct the specific BGP peer autonomous-system mismatch condition reported. The relevant technical distinction is: BGP OPEN negotiation validates the expected peer AS and session parameters.
A team is validating a Huawei network repair: A carrier handoff changes the peer AS number but the Huawei CE router still expects its former remote-as value. Which observable result provides the clearest evidence of success?
The peer session reaches Established and eligible routes exchange under the agreed AS relationship. This result directly tests whether the correct action worked: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. This is explained by: BGP OPEN negotiation validates the expected peer AS and session parameters.
The EVPN table shows appropriate host MAC/IP mapping and separately advertised intended IP prefixes. That observation would support a separate case of EVPN Type-2 MAC/IP route interpretation, not verification of the reported BGP peer autonomous-system mismatch. The relevant observable outcome here is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Internal BGP route decisions prefer the intended provider for matched prefixes and fail over if unavailable. That observation would support a separate case of BGP local preference internal egress, not verification of the reported BGP peer autonomous-system mismatch. The relevant observable outcome here is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Level-2 adjacencies carry the required inter-area reachability between participating regions. That observation would support a separate case of IS-IS level-2 backbone continuity, not verification of the reported BGP peer autonomous-system mismatch. The relevant observable outcome here is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Consider the following Huawei Datacom deployment: A carrier handoff changes the peer AS number but the Huawei CE router still expects its former remote-as value. Which technical principle best explains the observed behavior?
BGP OPEN negotiation validates the expected peer AS and session parameters. This mechanism explains the case-specific corrective step: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Confirm the mechanism by verifying: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
AS_PATH length is one BGP best-path criterion after important preceding preferences. This explains BGP AS_PATH length egress choice, but not why the issue in this scenario occurs. The specific mechanism is: BGP OPEN negotiation validates the expected peer AS and session parameters.
OSPF external route summarization is performed on an ASBR, distinct from ABR inter-area summary generation. This explains OSPF external summarization at ASBR, but not why the issue in this scenario occurs. The specific mechanism is: BGP OPEN negotiation validates the expected peer AS and session parameters.
Policy-based routing can select forwarding based on packet attributes before conventional destination routing. This explains Policy-based routing for approved application, but not why the issue in this scenario occurs. The specific mechanism is: BGP OPEN negotiation validates the expected peer AS and session parameters.
A Huawei network is left in this condition: A carrier handoff changes the peer AS number but the Huawei CE router still expects its former remote-as value. What direct operational or security risk is most relevant if it is not corrected?
Using arbitrary AS numbers to make a session open can break routing policy and loop prevention. This is the direct exposure created by BGP peer autonomous-system mismatch. Mitigate it through: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Then test: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Misconfigured reflector clusters can suppress valid routes or permit duplicate advertisements. This consequence is associated more directly with BGP route reflector cluster loop prevention. For the stated conditions the immediate exposure is: Using arbitrary AS numbers to make a session open can break routing policy and loop prevention.
Unexpected priority settings can direct traffic to unsuitable devices during normal operation. This consequence is associated more directly with VRRP priority and intended master. For the stated conditions the immediate exposure is: Using arbitrary AS numbers to make a session open can break routing policy and loop prevention.
Disabling AS loop detection to hide a policy error risks persistent routing loops. This consequence is associated more directly with BGP AS_PATH loop detection. For the stated conditions the immediate exposure is: Using arbitrary AS numbers to make a session open can break routing policy and loop prevention.
Before changing the Huawei network configuration, an engineer investigates: A carrier handoff changes the peer AS number but the Huawei CE router still expects its former remote-as value. Which diagnostic check should be performed first?
Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons. This check isolates the suspected cause before an unsafe change. If confirmed, the targeted action is: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Successful verification is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Inspect Level-2 LSDBs, adjacency levels, attached bits and inter-area route tables. This check would diagnose IS-IS level-2 backbone continuity, but would not first isolate the described BGP peer autonomous-system mismatch. Begin with: Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons.
Inspect VRRP group priorities, owner role, master/backup status and election logs. This check would diagnose VRRP priority and intended master, but would not first isolate the described BGP peer autonomous-system mismatch. Begin with: Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons.
Inspect candidate AS origins, MED values, higher-priority attributes and effective route-selection rules. This check would diagnose BGP MED same-neighbor-AS comparison, but would not first isolate the described BGP peer autonomous-system mismatch. Begin with: Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons.
A Huawei Datacom engineer is investigating the following situation: Two BGP speakers exchange SYNs but reject OPEN messages because each configured a different partner AS. Which corrective action best resolves the specified issue?
Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Technical basis: BGP OPEN negotiation validates the expected peer AS and session parameters. The measurable acceptance criterion is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Use an ordered narrow ACL with the correct interface and traffic direction for the required filter. This is a legitimate response to the different issue of ACL packet filter rule order and direction, but it does not correct the specific BGP peer autonomous-system mismatch condition reported. The relevant technical distinction is: BGP OPEN negotiation validates the expected peer AS and session parameters.
Restore the supported IGMP querier and membership timers on the receiver-facing L3 segment. This is a legitimate response to the different issue of IGMP last-hop membership queries, but it does not correct the specific BGP peer autonomous-system mismatch condition reported. The relevant technical distinction is: BGP OPEN negotiation validates the expected peer AS and session parameters.
Configure supported RR-client relationships and confirm intended reflection rules between client and nonclient sessions. This is a legitimate response to the different issue of BGP route-reflector client scoping, but it does not correct the specific BGP peer autonomous-system mismatch condition reported. The relevant technical distinction is: BGP OPEN negotiation validates the expected peer AS and session parameters.
A team is validating a Huawei network repair: Two BGP speakers exchange SYNs but reject OPEN messages because each configured a different partner AS. Which observable result provides the clearest evidence of success?
The peer session reaches Established and eligible routes exchange under the agreed AS relationship. This result directly tests whether the correct action worked: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. This is explained by: BGP OPEN negotiation validates the expected peer AS and session parameters.
A simulated PBR next-hop outage selects the approved alternate without routing loops. That observation would support a separate case of PBR failed-next-hop fallback, not verification of the reported BGP peer autonomous-system mismatch. The relevant observable outcome here is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
The neighboring AS picks the intended ingress where the MED comparison is applicable. That observation would support a separate case of BGP MED same-neighbor-AS comparison, not verification of the reported BGP peer autonomous-system mismatch. The relevant observable outcome here is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
The authenticated BFD session establishes and reacts correctly to a controlled path fault. That observation would support a separate case of BFD authentication mismatch, not verification of the reported BGP peer autonomous-system mismatch. The relevant observable outcome here is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Consider the following Huawei Datacom deployment: Two BGP speakers exchange SYNs but reject OPEN messages because each configured a different partner AS. Which technical principle best explains the observed behavior?
BGP OPEN negotiation validates the expected peer AS and session parameters. This mechanism explains the case-specific corrective step: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Confirm the mechanism by verifying: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
BGP peer addressing and actual TCP source must correspond, and loopback peering needs a reachable underlay. This explains Loopback-based iBGP update source, but not why the issue in this scenario occurs. The specific mechanism is: BGP OPEN negotiation validates the expected peer AS and session parameters.
QoS differentiation depends on packet classification, marking trust and congestion-aware queuing. This explains QoS DSCP remarking and trust, but not why the issue in this scenario occurs. The specific mechanism is: BGP OPEN negotiation validates the expected peer AS and session parameters.
An RR's advertisement rules depend on whether the source and target peers are clients. This explains BGP route-reflector client scoping, but not why the issue in this scenario occurs. The specific mechanism is: BGP OPEN negotiation validates the expected peer AS and session parameters.
A Huawei network is left in this condition: Two BGP speakers exchange SYNs but reject OPEN messages because each configured a different partner AS. What direct operational or security risk is most relevant if it is not corrected?
Using arbitrary AS numbers to make a session open can break routing policy and loop prevention. This is the direct exposure created by BGP peer autonomous-system mismatch. Mitigate it through: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Then test: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
An incorrect wildcard or permit-first sequence can deny legitimate users or expose management services. This consequence is associated more directly with ACL wildcard and rule sequence. For the stated conditions the immediate exposure is: Using arbitrary AS numbers to make a session open can break routing policy and loop prevention.
Assuming MED always overrides LOCAL_PREF or applies across every AS can misroute traffic. This consequence is associated more directly with BGP MED same-neighbor-AS comparison. For the stated conditions the immediate exposure is: Using arbitrary AS numbers to make a session open can break routing policy and loop prevention.
Misordered nodes can create routing leaks that an apparently correct later deny cannot stop. This consequence is associated more directly with Route-policy permit and deny node order. For the stated conditions the immediate exposure is: Using arbitrary AS numbers to make a session open can break routing policy and loop prevention.
Before changing the Huawei network configuration, an engineer investigates: Two BGP speakers exchange SYNs but reject OPEN messages because each configured a different partner AS. Which diagnostic check should be performed first?
Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons. This check isolates the suspected cause before an unsafe change. If confirmed, the targeted action is: Configure the actual authorized remote AS consistently with the peer's BGP OPEN identity. Successful verification is: The peer session reaches Established and eligible routes exchange under the agreed AS relationship.
Check attached bits in LSPs, candidate L1/L2 routes and default forwarding behavior. This check would diagnose IS-IS L1 default to nearest attached L1L2, but would not first isolate the described BGP peer autonomous-system mismatch. Begin with: Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons.
Compare received candidate paths, LOCAL_PREF values, route policy and installed best path. This check would diagnose BGP local preference internal egress, but would not first isolate the described BGP peer autonomous-system mismatch. Begin with: Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons.
Inspect ACL rule numbers, match counts, attachment direction and permitted/denied test flows. This check would diagnose ACL packet filter rule order and direction, but would not first isolate the described BGP peer autonomous-system mismatch. Begin with: Inspect configured peer AS, received OPEN messages and BGP neighbor reset reasons.
Please check your mailbox for a message from support@examlabs.com and follow the directions.