Huawei AR G3 AAA Authentication Modes

H12-811 By islever Editorial Last updated

AAA Principles and Configuration

Short answer

ABC Huawei AR G3 AAA supports None, Local, and Radius authentication modes, excluding 802.1X which is a protocol rather than a mode.

Question

On Huawei AR G3 Series routers, which authentication modes does AAA support? (Choose all that apply.)
  1. None. Correct Answer
  2. Local. Correct Answer
  3. Radius. Correct Answer
  4. 802.1X

Key Takeaways

Distinguish between AAA configuration modes (Local, RADIUS, None) and network access protocols (802.1X) that utilize AAA but are not modes themselves.

Learn which AAA authentication modes are supported on Huawei AR G3 Series routers. Correct answers include None, Local, and Radius.

Common mistake: Selecting D (802.1X) because it is related to authentication. However, 802.1X is a port-based network access control protocol, not a direct AAA authentication method setting.

Expert Analysis

AAA Authentication Method Order

In Huawei AR G3 Series routers, the Access, Authorization, and Accounting (AAA) framework allows administrators to define a sequence of authentication methods for user access. The command aaa authentication supports specifying multiple modes in order of preference. When a method fails or is unavailable, the system automatically falls back to the next configured mode in the list.

Supported Authentication Modes

The specific authentication modes supported by Huawei's AAA implementation include:

  • Local: Using a local database of usernames and passwords stored on the router.
  • RADIUS: Querying an external RADIUS server for authentication credentials.
  • None: Allowing access without any authentication check. This is often used for testing or specific privileged access scenarios where security is managed at another layer.

Exclusion of 802.1X

While 802.1X is a widely used network access control protocol that relies on AAA infrastructure (typically RADIUS), it is not classified as an "authentication mode" within the AAA configuration context on these devices. Instead, 802.1X is a separate service or mechanism that triggers AAA requests. Therefore, it does not appear as a selectable option in the aaa authentication method list alongside Local and RADIUS.

Conclusion

Based on the standard capabilities of Huawei AR G3 routers, the valid authentication modes configurable via AAA are None, Local, and RADIUS. Comments from learners confirm this distinction, noting that while 802.1X uses AAA, it is not a mode itself.

Exam Strategy

When configuring or troubleshooting AAA on Huawei devices, always check the specific syntax of the aaa authentication command. Remember that 'None' is a valid mode for bypassing checks, and 'Local' is the default fallback if no external servers are defined. Do not confuse higher-layer protocols like 802.1X or Portal with the underlying AAA methods.

Frequently Asked Questions

Is 802.1X considered an AAA authentication mode?

No. 802.1X is a network access control protocol that uses AAA services (like RADIUS) for authentication. It is not a selectable mode within the AAA configuration itself.

What happens if I use the 'None' authentication mode?

The 'None' mode allows users to access the device without providing any credentials. This is typically used for testing or in trusted environments where authentication is handled externally.

More H12-811 FAQ →

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. Fmoura17 👍 1
    Answer: A, B, and CA. None ✅ — No authentication required. User gains access without credentials.B. Local ✅ — Authentication done locally on the router using a locally configured username/password database.C. RADIUS ✅ — Authentication done via an external RADIUS server.D. 802.1X ❌ — 802.1X is a network access control protocol, not an AAA authentication mode. It uses AAA underneath but is not itself an AAA authentication mode on Huawei AR routers.
  2. iitc_duo 👍 1
    ABC are correct. Bcz, No-authentication on AAA mode, Local and Radius are available on telnet
  3. IBB90704 👍 1
    ABC pagina 554 del libro HCIA-Datacom V1.0 Training Material
  4. hafizhou 👍 1
    bcd is correct
  5. Chleong 👍 1
    ABCABC

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Entering OSPF Area View in Huawei VRP

S-grade

IEEE 802.11ac Frequency Band Support

S-grade

Switch Port Handling of Untagged Frames and PVID

S-grade

OSPF DR Election Rules and Priority Configuration

S-grade

← Back to H12-811 Study Guide