No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Web-based Configuration Guide

S7700 and S9700 V200R011C10

This document describes the configuration and maintenance of device through the web network management system. The web network management system provides the functions of viewing device information and managing the entire system, interfaces, services, ACL, QoS, routes, security, and tools.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
AS User-Side Service

AS User-Side Service

This section describes how to configure services for an AS user port group.

Procedure

  1. Choose Configuration > SVF Quick Config > AS User-Side Service. The AS User-Side Service page is displayed, as shown in Figure 5-8.

    Figure 5-8  AS User-Side Service

  2. Click Create.
  3. In the displayed Add AS Port Group dialog box, set AS port group name, as shown in Figure 5-9.

    Figure 5-9  Add AS Port Group

  4. Click OK.
  5. Click the List of Member Ports tab to add member ports, as shown in Figure 5-10.

    Figure 5-10  List of Member Ports

    1. Click Add.
    2. Select the AS name on the Add AS Port page, as shown in Figure 5-11.

      Figure 5-11  Add AS Port page

    3. Click Add All or Add Selected to add AS ports as required.
    4. Click Back after completing the configuration.
  6. Click the Service Configuration tab to configure services.

    Table 5-2  Icons on the Service Configuration tab

    Icon

    Description

    Select: allows you to select parameter.

    Create: allows you to configure parameters.

    Modify: allows you to modify parameters.

    Delete: allows you to delete currently configured parameters.

    • Set Connection type to User-defined, as shown in Figure 5-12.
      Figure 5-12  User-defined

      1. Click next to Default VLAN. The Add VLAN and Gateway Configuration dialog box is displayed, as shown in Figure 5-13.
        Figure 5-13  Add VLAN and Gateway Configuration

        Table 5-3 describes the parameters in the Add VLAN and Gateway Configuration dialog box.
        Table 5-3  Parameters in the Add VLAN and Gateway Configuration dialog box

        Item

        Description

        VLAN ID

        Indicates a VLAN ID. The value ranges from 1 to 4094.

        Gateway location

        Sets Gateway location to Parent or Other.

        VLANIF (IP/mask)

        Specifies the IP address and mask of the gateway.

        Intra-VLAN proxy ARP

        Indicates whether to enable ARP proxy in a VLAN:
        • ON: Enable ARP proxy.
        • OFF: Disable ARP proxy.
        NOTE:

        In centralized forwarding, ARP proxy must be enabled in a VLAN.

        User IP allocated by

        Specifies the user IP address allocation mode:
        • Parent
        • Remote server

        Remote server address

        Specifies the IP address of a remote server. After setting an IP address, click to add it to the following list.

        NOTE:

        This parameter is displayed when User IP allocated by is set to Remote server.

      2. Configure the parameters and click OK.
      3. Click next to Voice VLAN. The Add VLAN and Gateway Configuration dialog box is displayed, as shown in Figure 5-13.

        Table 5-3 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

      4. Configure the parameters and click OK.
      5. Enter a VLAN ID for transparent transmission.
      6. Click next to Network Enhanced Profile. The Add Network Enhanced Profile dialog box is displayed, as shown in Figure 5-14.
        Figure 5-14  Add Network Enhanced Profile

        Table 5-4 describes the parameters in the Add Network Enhanced Profile dialog box.
        Table 5-4  Parameters in the Add Enhanced Service Profile dialog box

        Item

        Description

        Profile name

        Specifies the enhanced service template name.

        Port group authentication

        Specifies the port group authentication status:
        • Enabled
        • Disabled

        Unicast suppression (pps)

        Sets the maximum unknown unicast traffic allowed on an interface. The value ranges from 0 to 1488100.

        Broadcast suppression (pps)

        Sets the maximum broadcast traffic allowed on an interface. The value ranges from 0 to 1488100.

        Multicast suppression (pps)

        Sets the maximum multicast traffic allowed on an interface. The value ranges from 0 to 1488100.

        All traffic suppression (kbps)

        Sets the maximum traffic allowed on an interface. The value ranges from 64 to 10000000.

        DHCP Snooping

        Indicates whether to enable DHCP snooping:
        • ON: Enable DHCP snooping.
        • OFF: Disable DHCP snooping.

        IPSG

        Indicates whether to enable IP source guard:
        • ON: Enable IP source guard.
        • OFF: Disable IP source guard.

        DAI

        Indicates whether to enable ARP inspection:
        • ON: Enable ARP inspection.
        • OFF: Disable ARP inspection.

        Edge Port

        Indicates whether to enable the edge port function on an interface:
        • ON: Enable the edge port function.
        • OFF: Disable the edge port function.

        Priority Trust

        Indicates whether to configure the priority trust function on an interface:
        • ON: Enable the priority trust function.
        • OFF: Disable the priority trust function.
      7. Configure the parameters and click OK.
      8. Click next to User Access Profile. The Add User Access Profile dialog box is displayed.
        • Set User authentication to Non-authentication, as shown in Figure 5-15.
          Figure 5-15  Creating a user access profile: non-authentication

          Table 5-5 describes the parameters on the page.
          Table 5-5  Creating a user access profile: non-authentication

          Item

          Description

          Profile name

          Specifies the name of a user access control template.

          Access user limit

          Sets the maximum number of access users. The value ranges from 0 to 4096.

          ARP packet rate limit (kbps)

          Sets the rate limit of incoming ARP packets on an interface. The value ranges from 8 to 128.

          DHCP packet rate limit (kbps)

          Sets the rate limit of incoming DHCP packets on an interface. The value ranges from 8 to 128.

        • Set User authentication to Local authentication, as shown in Figure 5-16.
          Figure 5-16  Creating a user access profile: local authentication

          Table 5-6 describes the parameters on the page.
          Table 5-6  Creating a user access profile: local authentication

          Item

          Description

          Profile name

          Specifies the name of a user access control template.

          Access user limit

          Sets the maximum number of access users. The value ranges from 1 to 512.

          User Name

          Creates the local user name.

          Password

          Creates the local password.

          Confirm password

          Confirms the local password.

          Access mode

          Sets the user access authentication mode. You can select one or multiple of the following authentication modes:

          • MAC: MAC address authentication
          • 802.1X: 802.1X authentication
          • Portal: Portal authentication

          Portal Server

          When Access mode includes Portal, the following parameters are valid:

          Portal server name

          Specifies the name of a Portal server template.

          Source IP

          Indicates the source IP address for the device to communicate with a Portal server.

          URL

          Sets a URL for a Portal server. The URL identifies the Portal server's website that can be visited by Portal authentication users.

          Portal server IP

          Configures an IP address for the Portal server.

          Port number

          Configures a destination port number for the device to send packets to the Portal server.

          The value is an integer that ranges from 1 to 65535.

          Shared key

          Configures a shared key used by the device to exchange information with the Portal server.

          The value is a string of 1 to 16 characters.

          Confirm shared key

          Confirms the shared key used by the device to exchange information with the Portal server.

        • Set User authentication to RADIUS authentication, as shown in Figure 5-17.
          Figure 5-17  Creating a user access profile: remote RADIUS authentication

          Table 5-7 describes the parameters on the page.
          Table 5-7  Creating a user access profile: remote RADIUS authentication

          Item

          Description

          Profile name

          Specifies the name of a user access control template.

          Access user limit

          Sets the maximum number of access users. The value ranges from 1 to 512.

          Server IP

          Specifies the IP address of a RADIUS authentication server.

          Port number

          Specifies the port number of the RADIUS authentication server.

          The value is an integer that ranges from 1 to 65535.

          Shared key

          Specifies the RADIUS shared key.

          The value is a string of 1 to 128 characters.

          Confirm shared key

          Configures the RADIUS shared key.

          Access mode

          Sets the user access authentication mode. You can select one or multiple of the following authentication modes:

          • MAC: MAC address authentication
          • 802.1X: 802.1X authentication
          • Portal: Portal authentication

          Portal Server

          When Access mode includes Portal, the following parameters are valid:

          Portal server name

          Specifies the name of a Portal server template.

          Source IP

          Indicates the source IP address for the device to communicate with a Portal server.

          URL

          Sets a URL for a Portal server. The URL identifies the Portal server's website that can be visited by Portal authentication users.

          Portal server IP

          Configures an IP address for the Portal server.

          NOTE:
          Multiple IP addresses can be specified for the portal server. For the operation method, seeExternal Portal.

          Port number

          Configures a destination port number for the device to send packets to the Portal server.

          The value is an integer that ranges from 1 to 65535.

          Shared key

          Configures a shared key used by the device to exchange information with the Portal server.

          The value is a string of 1 to 16 characters.

          Confirm shared key

          Confirms the shared key used by the device to exchange information with the Portal server.

      9. Configure the parameters and click OK.
      10. Click Apply to complete the configuration.
    • Set Connection type to Connect to PC, as shown in Figure 5-18.
      Figure 5-18  Connect to PC

      1. Click next to Default VLAN. The Add VLAN and Gateway Configuration dialog box is displayed, as shown in Figure 5-13.

        Table 5-3 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

      2. Configure the parameters and click OK.
      3. Click next to Network Enhanced Profile. The Add Network Enhanced Profile dialog box is displayed, as shown in Figure 5-14.

        Table 5-4 describes the parameters in the Add Network Enhanced Profile dialog box.

      4. Configure the parameters and click OK.
      5. Click next to User Access Profile. The Add User Access Profile dialog box is displayed, as shown in Figure 5-15, Figure 5-16, or Figure 5-17.

        Table 5-5, Table 5-6, or Table 5-7 describes the parameters on the page.

      6. Configure the parameters and click OK.
      7. Click Apply to complete the configuration.
    • Set Connection type to Connect to IP Phone, as shown in Figure 5-19.
      Figure 5-19  Connect to IP Phone

      1. Click next to Default VLAN. The Add VLAN and Gateway Configuration dialog box is displayed, as shown in Figure 5-13.

        Table 5-3 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

      2. Configure the parameters and click OK.
      3. Click next to Voice VLAN. The Add VLAN and Gateway Configuration dialog box is displayed, as shown in Figure 5-13.

        Table 5-3 describes the parameters in the Add VLAN and Gateway Configuration dialog box.

      4. Configure the parameters and click OK.
      5. Click next to Network Enhanced Profile. The Add Network Enhanced Profile dialog box is displayed, as shown in Figure 5-14.

        Table 5-4 describes the parameters in the Add Network Enhanced Profile dialog box.

      6. Configure the parameters and click OK.
      7. Click next to User Access Profile. The Add User Access Profile dialog box is displayed, as shown in Figure 5-15, Figure 5-16, or Figure 5-17.

        Table 5-5, Table 5-6, or Table 5-7 describes the parameters on the page.

      8. Configure the parameters and click OK.
      9. Click Apply to complete the configuration.

Follow-up Procedure

Delete an AS user port group.

  1. Choose Configuration > SVF Quick Config > AS User-Side Service. The AS User-Side Service page is displayed.
  2. Select the AS user port group name to be deleted.
  3. Click Delete.
  4. In the dialog box that is displayed, click OK.
Translation
Download
Updated: 2019-10-17

Document ID: EDOC1000178323

Views: 87821

Downloads: 112

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next