Huawei Router User Domain Assignment Logic

H12-811 By islever Editorial Last updated

AAA Principles and Configuration

Short answer

C The user 'huawei' belongs to the default domain because no specific domain was explicitly assigned during its creation.

Question

An authenticator router has been configured with two domains named “Area1” and “Area2”, following which a user is created with the username “huawei” and the password “hello” for authentication. Which domain does this user belong to?
  1. Area1 domain
  2. Area2 domain
  3. default domain Correct Answer
  4. default_admin domain

Key Takeaways

The main trap is assuming users default to the most recently created non-default domain; instead, they always fall back to the 'default' domain unless explicitly placed elsewhere.

In Huawei routers, users created without an explicit domain specification or @suffix are automatically assigned to the default domain, making C the correct answer.

Common mistake: Option B (Area2) is often chosen by those who assume the last configured domain becomes the implicit default, but Huawei devices strictly use 'default' for unspecified users.

Expert Analysis

In Huawei router AAA (Authentication, Authorization, and Accounting) configuration, user accounts are associated with specific domains. When a user is created using the local-user command without explicitly specifying a domain via the domain keyword or appending an @domain_name suffix to the username, the system automatically assigns the user to the default domain.

The question states that two domains, “Area1” and “Area2”, have been configured, and then a user “huawei” is created. Crucially, the prompt does not indicate that the domain parameter was set for this user, nor does it show the username being formatted as huawei@Area1. Therefore, per Huawei’s default behavior, the user belongs to the default domain.

This concept tests the understanding of AAA hierarchy and default fallbacks. The trap lies in assuming that because other domains exist, the user must belong to one of them, or guessing based on creation order (as seen in some incorrect comments). However, explicit assignment is required to move a user out of the default domain. Getting this wrong leads to misconfigured authentication policies, as ACLs and authorization profiles might be applied differently depending on the domain context.

Exam Strategy

When reviewing AAA configuration questions, always check if the domain argument was explicitly used in the local-user command or if the username includes an @domain suffix. If neither is present, the answer is invariably the 'default' domain. This rule applies regardless of how many other custom domains exist on the device.

Frequently Asked Questions

What happens if I create a user with '@Area1' in the name?

If you create a user named 'huawei@Area1', the user will be explicitly assigned to the Area1 domain, overriding the default domain assignment.

Is there a difference between 'default' and 'default_admin' domains?

Yes. The 'default' domain is for common users, while the 'default_admin' domain is typically reserved for administrative users with higher privileges.

More H12-811 FAQ →

Community Votes

C
80%
B
20%

80% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 11 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 11

  1. Panora_ND25 👍 1 Answered C
    In Huawei router configuration, when no domain is explicitly specified during user creation, the user is automatically placed into the default domain =============================================== local-user huawei password irreversible-cipher hello local-user huawei service-type ssh local-user huawei privilege level 15 local-user huawei domain Area1
  2. IBB90704 👍 1
    La respuesta es la C, pagina 552 del libro HCIA-Datacom V1.0 Training Material. Huawei devices support the following default domains: ▫ The default domain is for common users. ▫ The default_admin domain is the default domain for administrators.
  3. Onotex 👍 1
    C Based on the information provided, since no specific domain is mentioned when creating the user "huawei" with the password "hello", the user would belong to the default domain. Therefore, the correct answer is: C. default domain
  4. ArturNascimento 👍 1
    C. default domain Se o domínio ao qual um usuário pertence não for especificado ao criar o usuário, o usuário é automaticamente associado ao domínio default (o administrador é associado ao domínio default_admin).
  5. Fmoura17 👍 1 Answered C
    C. Default Domain Explanation: When a username is created without specifying a domain (no @domainname suffix), the user is automatically assigned to the default domain.
Show 6 more comments
  1. Jrmelo 👍 1
    Correct answer is C. If a user name is user 1@domain 1, the user belongs to domain 1. If a user name does not end with @, the user belongs to the default domain.
  2. juank20 👍 1 Answered B
    In practice, when logged into the router console, the last domain created was Area 2, so the new user will be associated to that domain.
  3. IBB90704 👍 1
    La respuesta es la D, pagina 552 del libro HCIA-Datacom V1.0 Training Material.
  4. surveycorps969 👍 1 Answered C
    CCCCCCCCC
  5. Chleong 👍 1 Answered C
    Ccccccc
  6. Chleong 👍 1
    CCCCCC

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Huawei Router Telnet Login Failure Causes

S-grade

Identifying Valid OSPF Packet Types vs LSAs

S-grade

OSPF DR and BDR Election Process on Multi-Access Networks

S-grade

Incorrect Statements Regarding OSPF Router ID Requirements

S-grade

← Back to H12-811 Study Guide