A.Policy service, which provides the ability to configure policies, mainly configures access policies between security groups and security groups, integrates AC3.0, and AC1.0 is optional

B.Authentication & Portal service, which supports authentication, authorization, and accounting capabilities as an AAA server, is integrated in AC3.0 and AC1.0 is optional, in which billing depends on a third party

C.Policy execution points and authentication points can be deployed on different physical devices.

D.The P-Group synchronization service, as the control plane of the IP-Group, provides the collection and distribution of IP and security group correspondence, and is integrated in AC3.0 and AC1.0

A.S switches

B.AR router

C.CE switches

D.FW

E.AP

A.end, end-x, end-dt4, end-dt6, and end-dx2 can be dynamically assigned or statically configured

B.The SRv6SID format is Locator:Function:Args, where the Args field is also called Opcode

C.The static Opcode needs to be configured within the static segment range to prevent conflicts with the Opcode dynamically allocated by the IGP protocol. The static segment length range is determined by the static static-length parameter of the locator command.

D.end-op, and end-m need to be statically configured

A.During wireless centralized forwarding, the WAC and the border need to manage IP communication and service VLAN communication, that is, the underlay and overlay need to be connected.

B.During wireless local forwarding, only the management IP address needs to be communicated between the WAC and the border, that is, the underlay is connected.

C.Supported networking: WAC dual-node hot standby (VRRP dual-node hot standby or dual-link hot standby), and dual-border port sub-networking, recommended dual-node VRRP hot standby: In multi-campus interconnection LAN-WAN convergence scenarios, refer to the following topology

D.In the overlay interconnection solution, it is recommended to run the VRRP VRRP virtual address between the two borders as the gateway for wireless users

A.end. DT4: EVPN VPLS unicast meteor

B.end.dx2: the L2AC interface used to divert traffic to the egress PE

C.end. X SID: A link used to direct traffic to a specific node

D.end SID: Redirects traffic to nodes based on the IP routing table