Chapter 4 of 8 · Huawei HCIA-Datacom H12-811
Network Security and Services
ACLs, AAA, FTP, Telnet and SSH device access, and source and destination NAT.
- 4topics
- 23 minfast track
- 15%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1ACL Fundamentals and ConfigurationLearn Huawei ACL types and number ranges, rules and step, wildcard masks, match order and traffic-filter configuration for the…6 min
- 2AAA Principles and ConfigurationLearn AAA authentication, authorization and accounting, local, RADIUS and HWTACACS modes, domains, schemes and local users on…5 min
- 3FTP, Telnet and SSHLearn common service ports, FTP active and passive modes, TFTP, Telnet and STelnet over SSH, and how to set up FTP, Telnet and…6 min
- 4Source, Destination and Bidirectional NATLearn static NAT, NAT No-PAT, NAPT, Easy IP, NAT Server and bidirectional NAT, with nat outbound and nat server setup on Huawei…6 min
About this chapter
What this chapter covers
Network Security and Services is 15% of the Huawei HCIA-Datacom H12-811 exam. It covers ACLs and how they filter traffic, AAA for authenticating and authorizing users, the FTP, Telnet and SSH services used to manage devices, and NAT in its source, destination and bidirectional forms.
Questions are single-answer, multiple-answer without a stated count, true/false, drag and drop and typed fill-in-the-blank, often "Which of the following statements is true?". Many show a topology figure, a VRP configuration or display output such as display acl or display nat session all, and ask what the device will do.
It has 14 outline topics, and four pages cover them.
How the topics fit together
ACLs come first, because the other features reuse them to select traffic. AAA then controls who may log in through the management services, and NAT connects private networks to the internet.
An ACL that filters packets with traffic-filter is the same kind of ACL that nat outbound uses to choose which hosts are translated.
Memorize the numbers that keep coming back: basic ACL 2000 to 2999, advanced ACL 3000 to 3999, rule step 5, FTP 20 and 21, SSH 22, Telnet 23, RADIUS 1812 and 1813, HWTACACS 49.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Read each configuration snippet and say what it does before reading the explanation. The exam often shows a short configuration and asks which traffic is permitted, translated or allowed to log in.
Ready for more practice?
The full Huawei HCIA-Datacom H12-811 question bank has 600 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Huawei. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.