H12-841: HCIP-Datacom-Campus Network Planning and Deployment V1.5

An authorization result contains the authorization settings to apply, can be named and bound to sites, and can authorize a security group. The authorization rule is configured separately and references the authorization result; it is not configured as part of that result.

Policy association has three roles: the terminal, which provides the user interface for authentication and resource access; the access device, which enforces network-access policy; and the control device, which authenticates users and controls access policy. A Portal server is not one of these three roles.

The fabric global VLAN resource pool is a service VLAN pool for external gateway interconnection, network service resource interconnection, management VLANs used for policy association, and VN access. VLAN resources for interconnecting underlay devices are configured in the underlay automated resource pool, so they are not allocated from the fabric global VLAN resource pool.

Virtual networks are isolated from one another at the network layer unless inter-VN communication is configured. A policy control matrix controls permitted traffic between security groups, whereas inter-VN communication establishes the connectivity required between the R&D VN and marketing VN.

The Command Line function opens an interactive command-line connection to the managed network device, so iMaster NCE-Campus automatically enables the device’s SSH proxy tunnel for that session.