What configurations are needed for Huawei access switches

Huawei access switches can be configured via console, SSH, or WebUI to set management IPs, VLANs, port modes, and enable Telnet/SSH for network management.

Initial Access and Login

1. Connect to the switch using a console cable (USB-C or Mini USB) or via SSH if already networked .
2. Open a terminal emulator (e.g., PuTTY) and set serial parameters: typically 9600 bps, 8 data bits, no parity, 1 stop bit, no flow control .
3. Login using the default credentials: admin / [email protected] for newer firmware. Change the password immediately for security .

Management IP Configuration

1. Create a management VLAN (e.g., VLAN 5):

   vlan 5

2. Assign the management interface to the VLAN:

   interface Vlanif 5[HUAWEI-Vlanif5] ip address 192.168.1.10 255.255.255.0

3. Verify connectivity with ping to ensure the switch is reachable .

User and Telnet/SSH Setup

1. Create a local user for Telnet/SSH access:

   [HUAWEI-aaa] local-user admin password irreversible-cipher YourPassword[HUAWEI-aaa] local-user admin privilege level 15[HUAWEI-aaa] local-user admin service-type telnet

2. Enable Telnet or SSH on the switch to allow remote management .

VLAN and Port Configuration

1. Assign access ports to VLANs:

   interface GigabitEthernet0/0/1[HUAWEI-GigabitEthernet0/0/1] port link-type access[HUAWEI-GigabitEthernet0/0/1] port default vlan 10

2. Configure trunk or hybrid ports for uplinks:

   interface GigabitEthernet0/0/2[HUAWEI-GigabitEthernet0/0/2] port link-type trunk[HUAWEI-GigabitEthernet0/0/2] port trunk allow-pass vlan 10 20 30

3. Verify port configuration using display interface GigabitEthernet0/0/1 .

Layer 3 and VLANIF Configuration

• For Layer 3 communication between VLANs, configure VLANIF interfaces on the core switch:

  interface Vlanif 10[HUAWEI-Vlanif10] ip address 10.10.1.1 255.255.255.0

• Connect to an egress router for Internet access and configure the default gateway:

  ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

This allows the switch to act as a gateway for users .

WebUI Access

1. Enable WebUI by first configuring the management IP and user credentials via console .
2. Connect a PC to the switch and access the WebUI using the management IP in a browser.
3. Login with the configured user and password, then perform VLAN, port, and service configurations through the GUI.

Saving Configuration

• After completing all configurations, save them to make them persistent:

  save

• Confirm the save when prompted to ensure settings are retained after reboot .

Additional Features

• IP Source Guard (IPSG) can be enabled on access ports to prevent unauthorized IP changes.
• DHCP relay or server can be configured for dynamic IP allocation.
• Spanning Tree Protocol (STP) should be enabled to prevent loops in campus networks . By following these steps, Huawei access switches can be fully configured for management, VLAN segmentation, Layer 3 routing, and secure remote access, suitable for small to medium campus networks.