Basic Configuration of Huawei Access Switches

Huawei access switches can be configured via console, SSH, or WebUI to set management IPs, VLANs, port modes, and enable Telnet/SSH for network management.Initial Access and LoginConnect to the switch using a console cable (USB-C or Mini USB) or via SSH if already networked .Open a terminal emulator (e.g., PuTTY) and set serial parameters: typically 9600 bps, 8 data bits, no parity, 1 stop bit, no flow control .Login using the default credentials: admin / [email protected] for newer firmware. Change the password immediately for security .Management IP ConfigurationCreate a management VLAN (e.g., VLAN 5):CodeCopy vlan 5 Assign the management interface to the VLAN:CodeCopy interface Vlanif 5[HUAWEI-Vlanif5] ip address 192.168.1.10 255.255.255.0 Verify connectivity with ping to ensure the switch is reachable .User and Telnet/SSH SetupCreate a local user for Telnet/SSH access:CodeCopy[HUAWEI-aaa] local-user admin password irreversible-cipher YourPassword[HUAWEI-aaa] local-user admin privilege level 15[HUAWEI-aaa] local-user admin service-type telnet Enable Telnet or SSH on the switch to allow remote management .VLAN and Port ConfigurationAssign access ports to VLANs:CodeCopy interface GigabitEthernet0/0/1[HUAWEI-GigabitEthernet0/0/1] port link-type access[HUAWEI-GigabitEthernet0/0/1] port default vlan 10 Configure trunk or hybrid ports for uplinks:CodeCopy interface GigabitEthernet0/0/2[HUAWEI-GigabitEthernet0/0/2] port link-type trunk[HUAWEI-GigabitEthernet0/0/2] port trunk allow-pass vlan 10 20 30 Verify port configuration using display interface GigabitEthernet0/0/1 .Layer 3 and VLANIF ConfigurationFor Layer 3 communication between VLANs, configure VLANIF interfaces on the core switch:CodeCopy interface Vlanif 10[HUAWEI-Vlanif10] ip address 10.10.1.1 255.255.255.0 Connect to an egress router for Internet access and configure the default gateway:CodeCopy ip route-static 0.0.0.0 0.0.0.0 1.1.1.1 This allows the switch to act as a gateway for users .WebUI AccessEnable WebUI by first configuring the management IP and user credentials via console .Connect a PC to the switch and access the WebUI using the management IP in a browser.Login with the configured user and password, then perform VLAN, port, and service configurations through the GUI.Saving ConfigurationAfter completing all configurations, save them to make them persistent:CodeCopy save Confirm the save when prompted to ensure settings are retained after reboot .Additional FeaturesIP Source Guard (IPSG) can be enabled on access ports to prevent unauthorized IP changes.DHCP relay or server can be configured for dynamic IP allocation.Spanning Tree Protocol (STP) should be enabled to prevent loops in campus networks . By following these steps, Huawei access switches can be fully configured for management, VLAN segmentation, Layer 3 routing, and secure remote access, suitable for small to medium campus networks.