No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S1720GFR, S2700, S5700, and S6720 V200R010C00 Web-based Configuration Guide

This document describes the configuration and maintenance of device through the web network management system. The web network management system provides the functions of viewing device information and managing the entire system, interfaces, services, ACL, QoS, routes, security, and tools.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring a Basic Switch Networking Scenario

Example for Configuring a Basic Switch Networking Scenario

Networking Requirements

As shown in Figure 2-355, the Switch is a core switch, and SwitchA and SwitchB are access switches.

  • The access switches (SwitchA and SwitchB) connect to the core switch (Switch) through Eth-Trunks to ensure reliability.
  • Department A and department B belong to VLAN 10 and VLAN 20, respectively, and communicate at Layer 3 through VLANIF interfaces.
  • The core switch (Switch) functions as the DHCP server to allocate IP addresses to users in the campus.

Users hope to log in to devices in the networking through the web system and rapidly complete device configurations.

Figure 2-355  Networking diagram of a basic switch networking scenario

Data Planning

Operation Item Data Description
Logging in to the web system

IP address of the management interface

10.10.1.1/24

This IP address is used for users to log in to the switch through the management interface.

Management interface

Switch: VLANIF 50

SwitchA: VLANIF 50

SwitchB: VLANIF 50

Create a VLANIF interface as the management interface.

Web user

User name: admin

Password: Helloworld@6789

By default, the system has a local user whose user name is admin and password is admin@huawei.com.

Configuring interfaces and VLANs

Eth-Trunk working mode

Static Link Aggregation Control Protocol (LACP) mode

Eth-Trunks work in manual load balancing mode or static LACP mode.

Interface type

You are advised to configure interfaces connected to switches as trunk interfaces and configure interfaces connected to PCs as access interfaces.

The common interface type is hybrid. A hybrid interface can connect to either a switch or a PC.

VLAN ID

Switch: VLAN 100, VLAN 10, VLAN 20, VLAN 50

SwitchA: VLAN 10, VLAN 50

SwitchB: VLAN 20, VLAN 50

A switch has a default VLAN: VLAN 1.

To isolate departments A and B at Layer 2, add department A to VLAN 10 and department B to VLAN 20. The Switch connects to the egress router through VLANIF 100.

Configuring routes

IP address

Switch:

VLANIF 100: 10.10.100.1/24

VLANIF 10: 10.10.10.1/24

VLANIF 20: 10.10.20.1/24

The IP address of VLANIF 100 is used for the Switch to connect to the egress router and for the internal network to communicate with the Internet. The egress router uses the IP address 10.10.100.2 to connect to Switch.

After the IP addresses of VLANIF 10 and VLANIF 20 are configured on the Switch, departments A and B can communicate through the Switch.

Configuring DHCP

DHCP Server

Switch

Configure Switch as the DHCP server.

Address pool

VLAN 10: pool10

VLAN 20: pool20

Terminals in department A obtain IP addresses from pool10.

Terminals in department B obtain IP addresses from pool20.

Address allocation mode

Based on the global address pool

None

Procedure

  1. Log in to the web system. (The following uses the Switch as an example. The configurations of SwitchA and SwitchB are similar to the configuration of the Switch, and are not mentioned here.)
    1. Configure a management IP address.

      <HUAWEI> system-view
      [HUAWEI] sysname Switch
      [Switch] vlan 50
      [Switch-vlan50] quit
      [Switch] interface vlanif 50
      [Switch-Vlanif50] ip address 10.10.1.1 24
      [Switch-Vlanif50] quit
      [Switch] interface gigabitethernet 0/0/10   //In this example, GE0/0/10 is the physical interface used for logging in to the switch through the web system on a PC. Select an interface based on actual networking requirements.
      [Switch-GigabitEthernet0/0/10] port link-type access
      [Switch-GigabitEthernet0/0/10] port default vlan 50
      [Switch-GigabitEthernet0/0/10] quit

    2. Enable the HTTPS service.

      [Switch] http secure-server enable

    3. Configure a web user and access the web system login page.

      # Configure a web user.

      [Switch] aaa
      [Switch-aaa] local-user admin password irreversible-cipher Helloworld@6789
      [Switch-aaa] local-user admin privilege level 15
      [Switch-aaa] local-user admin service-type http
      [Switch-aaa] quit

      # Access the web system login page.

      Open the web browser on the PC, enter https://10.10.1.1 in the address box, and press Enter. The web system login page is displayed, as shown in Figure 2-356.

      Enter the web user name admin and password Helloworld@6789. By default, the switch uses the EasyOperation web system. Select the Classic web system. Click GO or press Enter. The web system homepage is displayed.

      Figure 2-356  Web system login page

  2. Configure interfaces and VLANs.

    # Configure access switches.
    1. The following uses the access switch SwitchA as an example. Create VLAN 10 for SwitchA.
      1. Choose Service Management > VLAN > VLAN in the navigation tree to display the VLAN page, as shown in Figure 2-357.
        Figure 2-357  VLAN page
      2. Click Create to display the Create VLAN page.
      3. Enter 10 in the VLAN ID text box, as shown in Figure 2-358.
        Figure 2-358  Creating a VLAN
      4. Click OK. VLAN 10 is created.
    2. On SwitchA, configure Eth-Trunk 1 connected to the Switch to transparently transmit packets from VLAN 10, which is the VLAN for department A.
      1. Choose Interface Management > Eth-Trunk > Eth-Trunkport in the navigation tree to display the Eth-Trunkport page, as shown in Figure 2-359.
        Figure 2-359  Eth-Trunk page
      2. Click Create to display the Create Eth-Trunk page.
      3. Perform the following operations, as shown in Figure 2-360.
        • Set Eth-Trunk Name to 1.
        • Set Working Mode to Static LACP.
        • In the Select Interface area, select GE0/0/1 and GE0/0/2.
        NOTE:

        The value ranges of Eth-Trunk Name, Min Active Links, Max Active Links, and Jumbo may be different on different switches. Therefore, the value ranges on your switch may be different from that provided in this example.

        Figure 2-360  Creating an Eth-Trunk
      4. Click OK. Eth-Trunk 1 is created.
      5. Choose Service Management > VLAN > Hybrid Interface in the navigation tree to display the Hybrid Interface page.
      6. Select Eth-Trunk1 and click Change Link Type, as shown in Figure 2-361.
        Figure 2-361  Hybrid interface page
      7. Click OK in the displayed dialog box.
        The Change Link Type dialog box is displayed, as shown in Figure 2-362.
        Figure 2-362  Changing the link type
      8. Select the trunk link type.
      9. Click OK. The link type is changed.
      10. Click the Trunk Interface tab page to display the Trunk Interface page, as shown in Figure 2-363.
        Figure 2-363  Trunk interface page
      11. Click next to Eth-Trunk1 to display the Modify VLAN configuration on interface page.
      12. Enter 10 in the Allowed VLAN text box, as shown in Figure 2-364.
        Figure 2-364  Adding a trunk interface to a VLAN
    3. On SwitchA, add interfaces connected to users to VLAN 10.
      1. Choose Service Management > VLAN > Access Interface in the navigation tree to display the Access Interface page.
      2. Select Ethernet0/0/3, Ethernet0/0/4, and Ethernet0/0/5.
        NOTE:

        If the type of these interfaces is not access, Ethernet0/0/3, Ethernet0/0/4, and Ethernet0/0/5 are not displayed on the Access Interface page. Change the interface type to access according to Hybrid Interface or Trunk Interface, and then perform the following operations.

      3. Enter 10 in the Add to VLAN text box, as shown in Figure 2-365.
        Figure 2-365  Adding access interfaces to VLAN 10
      4. Click Add to add interfaces to VLAN 10.
    4. On SwitchA, configure interfaces connected to users as edge interfaces and enable BPDU protection to improve network stability.
      1. Choose Service Management > STP > STP Interface in the navigation tree to display the STP Interface page.
      2. Select Ethernet0/0/3, as shown in Figure 2-366.
        Figure 2-366  Configuring STP parameters on an interface
      3. Click Configure to display the STP Interface Settings page.
      4. Set Edge port to Enabled, as shown in Figure 2-367.
        Figure 2-367  Configuring STP parameters on an interface
      5. Click OK to complete the configuration.

        Perform the same operations to configure Ethernet0/0/4 and Ethernet0/0/5 as edge interfaces.

      6. Click the STP Global tab page to display the STP Global page.
      7. Set BPDU protection to Enabled, as shown in Figure 2-368.
        Figure 2-368  Configuring STP parameters in the system
      8. Click Apply. The BPDU protection configuration is complete.
    # Configure Switch.
    1. Create VLANs in a batch for communication between the Switch and SwitchA, SwitchB, and the egress router.
      1. Choose Service Management > VLAN > VLAN to display the VLAN page, as shown in Figure 2-369.
        Figure 2-369  VLAN page
      2. Click Create to display the Create VLAN page.
      3. Enter 10,20,100 in the VLAN ID text box, as shown in Figure 2-370.
        Figure 2-370  Creating a VLAN
      4. Click OK. VLANs 10, 20, and 100 are created.
    2. Configure downlink interfaces and VLANIF interfaces. The VLANIF interfaces are used for communication between departments A and B. The following shows an example of configuring Eth-Trunk1 that connects the Switch and SwitchA.
      1. The method of configuring Eth-Trunk1 on the Switch is the same as that on SwitchA, and is not mentioned here. For details, see step 2.b.
      2. Create a VLANIF interface.
        1. Choose Service Management > VLAN > VLANIF Interface in the navigation tree to display the VLANIF Interface page.
        2. Click Create to display the Create VLANIF page, as shown in Figure 2-371.
          NOTE:

          The values of Portal Server may be different on different switches. Therefore, the values on your switch may be different from that provided in this example.

          Figure 2-371  Creating a VLANIF interface

        3. Enter 10 in the VLAN ID text box.
        4. Enter 10.10.10.1 in the IPv4 Address text box, as shown in Figure 2-372.
          Figure 2-372  Creating VLANIF 10

        5. Click OK. VLANIF 10 is created.
        6. Click Create to display the Create VLANIF page.
        7. Enter 20 in the VLAN ID text box.
        8. Enter 10.10.20.1 in the IPv4 Address text box, as shown in Figure 2-373.
          Figure 2-373  Creating VLANIF 20

        9. Click OK. VLANIF 20 is created.
    3. Configure uplink interfaces and VLANIF interfaces for communication between the campus network and the Internet.
      1. Choose Service Management > VLAN > Trunk Interface in the navigation tree to display the Trunk Interface page, as shown in Figure 2-374.
        Figure 2-374  Trunk Interface page

      2. Click next to GigabitEthernet0/0/20 to display the Modify VLAN configuration on interface page.
        NOTE:

        If the interface type is not trunk, GigabitEthernet0/0/20 is not displayed on the Trunk Interface page. Change the interface type to trunk according to Hybrid Interface or Access Interface, and then perform the following operations.

      3. Enter 100 in the Allowed VLAN text box, as shown in Figure 2-375.
        Figure 2-375  Adding an interface to VLAN 100

      4. Click OK to complete the configuration.
      5. Click the VLANIF Interface tab page to display the VLANIF Interface page.
      6. Click Create to display the Create VLANIF page.
      7. Enter 100 in the VLAN ID text box.
      8. Enter 10.10.100.1 in the IPv4 Address text box, as shown in Figure 2-376.
        Figure 2-376  Creating VLANIF 100

      9. Click OK. VLANIF 100 is created.

  3. Configure routes.
    1. Configure a default static route to the campus egress gateway on the Switch so that users can access the Internet.

      1. Choose IP Routing > IPv4 Route in the navigation tree to display the IPv4 Route page, and click the IPv4 Static Route tab page.

      2. Click Create to display the Create an IPv4 Static Route page, as shown in Figure 2-377.

        Figure 2-377  Creating an IPv4 static route

      3. Set the required parameters according to Table 2-144.

        Table 2-144  Creating an IPv4 static route

        Item

        Description

        Destination

        Mandatory. Enter 0.0.0.0 in this example.

        Mask

        Mandatory. Enter 0.0.0.0 in this example.

        Outbound Interface

        Optional.

        Next hop address

        Mandatory. Enter 10.10.100.2 in this example.

        Priority

        Optional.

        Description

        Optional.

      4. Click OK to complete the configuration.

    2. Check the IP routing table on the Switch.

      1. Choose IP Routing > IPv4 Route in the navigation tree to display the IPv4 Route page, and click the IPv4 Routing Tables tab page.

      2. Set the search criteria.

      3. Click Query to display all matching records. A default static route with the next hop IP address 10.10.100.2 is displayed, indicating that the static route is successfully configured, as shown in Figure 2-378.

        Figure 2-378  Checking the IPv4 static route

    3. On the egress router, configure a return route to the Switch to implement bidirectional communication between the Internet and users in the campus.

      Hosts on the campus network use private IP addresses. Therefore, configure NAT policies on the router to implement translation between public and private IP addresses so that hosts can access the Internet.

  4. Configure DHCP.
    1. Enable DHCP.

      1. Choose Service Management > DHCP > DHCP in the navigation tree to display the DHCP page, as shown in Figure 2-379.
        Figure 2-379  Enabling DHCP

      2. Set DHCP to Enabled.
      3. Click Apply to complete the configuration.

    2. Create the global address pool pool10.

      1. Choose Service Management > DHCP > Configure Global Address Pool in the navigation tree to display the Configure Global Address Pool page.
      2. Click Create to display the Create a Global Address Pool page.
      3. Perform the following operations, as shown in Figure 2-380.
        • Set Address pool name to pool10.
        • Set Subnet address to 10.10.10.0.
        • Select 24(255.255.255.0) from the Subnet mask drop-down list.
        • Set Gateway IP to 10.10.10.1.
        Figure 2-380  Creating the global address pool pool10
      4. Click OK to complete the configuration.

    3. Create the global address pool pool20.

      1. Choose Service Management > DHCP > Configure Global Address Pool in the navigation tree to display the Configure Global Address Pool page.
      2. Click Create to display the Create a Global Address Pool page.
      3. Perform the following operations, as shown in Figure 2-381.
        • Set Address pool name to pool20.
        • Set Subnet address to 10.10.20.0.
        • Select 24(255.255.255.0) from the Subnet mask drop-down list.
        • Set Gateway IP to 10.10.20.1.
        Figure 2-381  Creating the global address pool pool20
      4. Click OK to complete the configuration.

    4. Configure VLANIF 10 to work in global address pool mode.

      1. Choose Service Management > DHCP > Configure VLANIF Interface Address Pool in the navigation tree to display the Configure VLANIF Interface Address Pool page.
      2. Click Create to display the Create a VLANIF Address Pool page.
      3. Select Vlanif10 from the VLANIF Name drop-down list and select global from the Address Pool type list, as shown in Figure 2-382.
        Figure 2-382  Configuring VLANIF 10 to work in global address pool mode
      4. Click OK to complete the configuration.

    5. Configure VLANIF 20 to work in global address pool mode. The configuration is the same as the configuration of VLANIF 10 and is not mentioned here.
    6. Choose Service Management > DHCP > Configure Global Address Pool in the navigation tree to display the Configure Global Address Pool page. The Configure Global Address Pool page displays information about configured global address pools, as shown in Figure 2-383.

      Figure 2-383  Global address pool configuration

    7. Choose Service Management > DHCP > Configure VLANIF Interface Address Pool in the navigation tree to display the Configure VLANIF Interface Address Pool page. The Configure VLANIF Interface Address Pool page displays information about configured VLANIF interfaces, as shown in Figure 2-384.

      Figure 2-384  VLANIF interface configuration

  5. Click in the navigation tree.
Translation
Download
Updated: 2019-08-21

Document ID: EDOC1000114003

Views: 54846

Downloads: 1078

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next