WPA3 is a new security protocol for wireless networks that provides enhanced security and privacy features compared to WPA2 . One of the advantages of WPA3 is that it eliminates the potential for dictionary attacks, which are a type of brute-force attack that tries to guess passwords by using a list of common words or phrases . WPA3 uses a more robust authentication mechanism called Simultaneous Authentication of Equals (SAE), which prevents offline password cracking attempts . The other statements are correct advantages of WPA3. WPA3 can encrypt data on open SSIDs using Opportunistic Wireless Encryption (OWE), which creates a unique encryption key for each user without requiring any credentials . WPA3 also meets the NSA/SuiteB security requirements of governments and banks, which specify the use of strong encryption algorithms such as AES-256 and Elliptic Curve Cryptography (ECC) . WPA3 also ensures that even if an attacker obtains the intermediate key during the handshake process, they cannot decrypt the data or derive the session key, thanks to a feature called forward secrecy .

iMaster NCE-FabricInsight is Huawei’s intelligent O&M software that can provide network-wide visibility, intelligent analysis, and automated O&M for data center networks. iMaster NCE-FabricInsight can collect data from various sources, such as SNMP, Telemetry, Syslog, sFlow, and iFIT. It can also use AI algorithms to detect anomalies, locate faults, predict risks, and optimize performance. iMaster NCE-FabricInsight can also automate network configuration, deployment, verification, and recovery.

HiSec Insight is a security analysis platform that provides comprehensive protection against advanced persistent threats (APTs) and application layer DDoS attacks . It uses big data analysis and machine learning techniques to detect and block malicious traffic, identify attack sources, and generate security reports . The other products are not specialized in defending against application layer DDoS attacks. USG6000E is a series of next-generation firewalls that provide network security and VPN services . AntiDDoS is a series of products that provide protection against network layer DDoS attacks . FireHunter is a series of sandbox products that provide malware detection and analysis .

Huawei AirEngine 6760 series supports four spatial streams by default, but after an RTU (Right To Use) license is purchased, it can support up to eight spatial streams on the 5 GHz band. It can also support four spatial streams on the 2.4 GHz band or scanning mode. Therefore, the possible spatial stream combinations are 4+8, 4+8+4, 4+4+scanning, and 4+6+scanning.

Dielectric constant does not affect radio throughput. According to Shannon’s theorem4, radio throughput is determined by the bandwidth and the signal-to-noise ratio of the channel. Dielectric constant is aproperty of the medium that affects the propagation speed and wavelength of electromagnetic waves, but not the information-carrying capacity.

CloudEngine S5736-S supports iStack, which is a technology that allows multiple switches to be connected and managed as a single logical device, improving network scalability and reliability 1. The other features are not supported by the CloudEngine S5736-S. Native AC is a feature of the CloudEngine S7700 series switches that enables them to function as wireless access controllers 2. Free mobility is a feature of Huawei’s Agile Campus Network Solution that enables seamless roaming of wireless terminals 3. VXLAN is a technology that creates overlay networks to extend Layer 2 connectivity across Layer 3 networks 4, but it is not supported by the CloudEngine S5736-S 1.

NetEngineAR611W is a desktop router that is designed for small enterprises and SOHO enterprises. It integrates security and Wi-Fi functions, and its design is risk-free. NetEngineAR611W supports multiple WAN interfaces, such as ADSL2+, VDSL2, GE, and LTE. It also supports firewall, VPN, IPSec, NAT, and other security features. NetEngineAR611W can provide Wi-Fi coverage for up to 32 users.

Compared with common Ethernet, the NOF+ scenario greatly improves usability and reliability. According to the Huawei CloudFabric Data Center Network Solution White Paper, NOF+ (Network-Oriented Fabric+) is a data center network architecture that supports both Layer 2 and Layer 3 connectivity between servers and leaf nodes. NOF+ uses VXLAN technology to create overlay networks on top of theunderlay network, which improves network scalability, flexibility, and security. NOF+ also uses M-LAG technology to provide link redundancy and load balancing between leaf nodes and servers, which improves network availability and performance.

BGP EVPN is a control plane protocol that can be used for VXLAN networks . VXLAN is a technology that creates overlay networks to extend Layer 2 connectivity across Layer 3 networks . BGP EVPN has the following functions as a VXLAN control plane protocol:

It automatically establishes the VXLAN tunnel between VTEPs (VXLAN Tunnel Endpoints), which are devices that encapsulate and decapsulate VXLAN packets . You do not need to manually configure a full-mesh tunnel between all VTEPs, which reduces the configuration complexity and improves the scalability .

It advertises host routes and MAC address entries on the control plane, which are used to learn the location of hosts and their corresponding VTEPs . This reduces the unknown traffic flooding that occurs when the destination MAC address is unknown, and optimizes the packet forwarding by using optimal paths .

It implements Layer 2 interconnection between data centers in different networking modes, such as bridging, routing, or integrated routing and bridging (IRB) . This enables seamless communication between hosts in different subnets or VLANs across data centers .

It advertises subnet routes to implement Layer 3 interconnection of data centers through VXLAN tunnels . This enables routing between different subnets or VLANs across data centers without requiring an external gateway device .

HQoS (Hierarchical Quality of Service) is a technology that provides hierarchical per-user-per-service scheduling and quality guarantee for VIP users and high-priority services. HQoS can implement fine-grained traffic control and service differentiation based on user groups, service types, and service priorities. The control device and access device are not virtualized into one device by HQoS.

The maximum single-radio rate supported by Wi-Fi 6 products is 9.6 Gbit/s. This is achieved by using 1024-QAM modulation, 160 MHz channel bandwidth, and 8 spatial streams1

 CloudEngine S7700 switches support service port clustering and CSS2 switch fabric clustering. According to the CloudEngine S7700 Series Switches Datasheet, service port clustering enables multiple physical ports to form a logical port that provides higher bandwidth and link redundancy, while CSS2 switch fabric clustering enables multiple switches to form a logical switch that provides higher performance and simplified management.

CloudEngine S5731-H supports VxLAN. It can implement Layer 2 and Layer 3 gateways for VxLANs, support centralized and distributed gateways, and interwork with BGP-EVPN to implement inter-subnet communication between VxLANs3. CloudEngine S5731-H delivers a switching performance of 336 Gbit/s3. CloudEngine S5731-H supports MPLS and can provide L2VPN and L3VPN services based on MPLS tunnels. CloudEngine S5731-H supports 2-port 40GE and 8-port 10GE optical/electrical cards that can be installed in the extended slot

The redundancy design of key components of the S12700E series switches can achieve 99.999% reliability. According to the CloudEngine S12700E Series Switches Datasheet, CloudEngine S12700E series switches support N+1 backup for MPUs, SFUs, CMUs, and power modules, as well as hot swapping for all components, ensuring high availability and reliability.

RU-5G-101 supports independent deployment. According to the Huawei RU-5G-101 Datasheet2, RU-5G-101 is a high-speed wireless WAN access component that provides 5G wireless broadband access services for enterprises to implement wireless high-bandwidth data transmission. An RU-5G can be deployed independently to provide basic router functions.