Huawei S Series Quick guide

Quick Configuration
HUAWEI S Series Campus Switches
Issue: 06 (2018-08-10)

Copyright © Huawei Technologies Co., Ltd. 2019. All rights
reserved.
No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co.,
Ltd.
All other trademarks and trade names mentioned in this document are the
property of their respective holders.
Notice
The purchased products, services and features are stipulated by the contract
made between Huawei and the customer. All or part of the products, services,
and features described in this document may not be within the purchase scope or
the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without
warranties, guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort
has been made in the preparation of this document to ensure accuracy of the
contents, but all statements, information, and recommendations in this document
do not constitute a warranty of any kind, express or implied.
Huawei Technologies Co., Ltd.
Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Website: http://e.huawei.com/en/

Contents
1 Before You Start 1
3 Small- and Mid-Sized Campus Networks 23
4 Mid-sized Campus WLANs 55
3.1 Data Plan 24
3.2 Quickly Configuring Small- and Mid-Sized Campus Networks 26
2 Small-Sized Campus Networks 2
2.1 Data Plan 3
2.2 Quickly Configuring Small-Sized Campus Networks 5
4.1 Data Plan 56
57
4.2 Configuration Roadmap
4.3 Quickly Configuring Mid-sized Campus WLANs 58
5 FAQs 69

1
1Before You Start
This document will help you log in to and quickly configure Huawei S series switches.
For more service configurations, see the Switch Configuration Guide.
1Install and power on the switch. For details refer to the S7700 and S9700 Quick
Installation Guide, S12700 Quick Installation Guide, or 2700, S3700, S5700, and
S6700 Series Switches Quick Start Guide.
3
Place the following contact details around your workplace:
Telephone number of the agent responsible for your network construction and
service.
Visit the Huawei Enterprise Service Technical Support website
(http://support.huawei.com/enterprise) to register an account. With an account, you
can browse or download more product documents, cases, and bulletins. You can
also enjoy our subscription and message push services.
2
Before configuring any data, complete the following tasks:
This document is for switches running V200R003C00 and later.
You can run the display version command in the user view to
check the version of the device.

2
2
On small-sized networks, S2700&S3700 switches are deployed at the access layer,
S5700&S6700 switches is deployed at the core layer, and an AR series router
works as the egress router.
The access switches and core switch connect through Eth-Trunk to ensure
reliability.
On an access switch, each department has a VLAN allocated so that services are
separated by VLANs. Configuring a VLANIF interface on the core switch
implements Layer 3 communication between different departments.
The core switch functions as a DHCP server to allocate IP addresses to user
devices on the campus network.
Configuring DHCP snooping on the access switches prevents intranet users from
connecting a small router to the intranet to allocate IP addresses. Configuring IPSG
on the access switches prevents intranet users from changing IP addresses.
This section uses the S2750 as an access switch (ACC1), S5700
as a core switch (CORE), and an AR series router as an egress
router (Router) as examples to demonstrate the configuration
procedure for small-sized campus networks.
Small-Sized Campus Networks

2.1
Before configuring the switches and router, prepare the following data for use in the next
section.
Component Data
Management IP
address 10.10.1.1/24
Static LACP
Eth-Trunk type
ACC1: VLAN 10
ACC2: VLAN 20
CORE: VLANs 100,
10, and 20
VLAN ID
Action
Configure the
management
IP address
and Telnet
Configure
interfaces
and VLANs
Port type
Description
The Eth-Trunk works in load balancing or static LACP
mode.
The management IP address is used to log in to
the switch.
The Trunk port
connects to a switch,
and the Access port
connects to a PC.
VLAN1 is the default VLAN on the switch.
To isolate departmentsA and B at Layer 2, add A
to VLAN 10 and B to VLAN 20.
CORE connects to the egress router through
VLANIF100.
This configuration is for Trunk and Access port
setup. If a Hybrid port setupis availableon a
switch, this port can connect to either a host or
another switch.
Management
VLAN VLAN 5
3
A modular switch‘s management interface is Ethernet0/0/0.
A fixed switch‘s management interface is MEth0/0/1.
For switches without management interfaces, you are
advised to use VLANIF interfaces for inband management.
Configure
DHCP
DHCP server CORE Configure the DHCP server function on CORE.
Address pool
VLAN 10: IP address
pool 10
VLAN 20: IP address
pool 20
Terminals in department A obtain IP addresses
from IP address pool 10.
Terminals in department B obtain IP addresses
from IP address pool 20.
Address
allocation Based on a global
address pool None
Configure
routing of
CORE
CORE:
VLANIF 100
10.10.100.1/24
VLANIF 10
10.10.10.1/24
VLANIF 20
10.10.20.1/24
IP address
CORE connects to the campus egress router
through VLANIF 100 so that the campus intranet
can communicatewith the Internet.
Configure a default route on CORE with the next
hop pointing to the egress router.
After configuring the IP addresses of VLANIF 10
and VLANIF 20 on CORE, departments A and B
can then communicate through CORE.
Data Plan

Component Data
8.8.8.8
DNS server
address
Action
Configure
the egress
router
Public gateway
Description
1.1.1.1/30
The DNS server resolves domain names
into IP addresses.
The public gateway address is the IP
address of the carrier device that connects
to the egress router. Configure a default
route to this IP address on the egress router
to forward intranet traffic to the Internet.
Configure
DHCP
snooping
and IPSG
Trusted
interface Eth-Trunk1 None
Public interface
IP address GE0/0/1: 1.1.1.2/30 GE0/0/1 is the public interface that connects the egress router to the Internet.
4
Intranet
interface IP
address
GE1/0/0:
10.10.100.2/24 GE1/0/0 connects the egress router to the
intranet.

2.2
Follow the procedure shown below to configure the switches and router. Once
configurations are complete, user devices within the campus can communicate with
each other, and intranet users can access the Internet.
5
Step 9 –Save the
configuration.
Step 1 –Log in to
the switch.
Step 2 –Configure
the management IP
address and Telnet.
Step 4 –Configure
DHCP.
Step 5 –Configure
routing of CORE.
Step 3 –Configure
interfaces and
VLANs.
Step 8 –Verify
services.
Step 6 –Configure
the egress router.
Step 7 –Configure
DHCP snooping and
IPSG.
Quickly Configuring Small-Sized Campus
Networks

Logging In to the Switch
Connect your PC to the switch through the console cable provided with the switch.
If your PC does not have a serial port, use a USB to serial cable.
1
Open the terminal emulation program on your PC. Create a connection and set the
interface and communication parameters.
Select an available port on your PC. For example, if your PC runs a Windows
operating system, you can view port information in Device Manager and select a
port. Table 1 lists the communication parameters on the switch.
2
Table 1 Default settings of the console port on the switch
Parameter Default Value
Transmission rate
Data bit
9600 bit/s
None
None
1
8
Flow control
Parity bit
Stop bit
6
If the switch has a Mini USB port, you can connect your PC to the
switch using a Mini USB cable. For this configuration procedure, see
the corresponding Configuration Guide - Basic Configuration based
on the version of the device.

Press Connect until the following information is displayed. Enter your new password,
and then re-enter it to confirm.
3
Login authentication
Username:admin
Password:
If you log in to the switch for the first time in versions earlier than
V200R010C00, the system asks you to set a login password. In
V200R010C00 and later versions, the default user name for first login is
admin and default password is a[email protected]. You must
change the password after login.
You can now run commands to configure the switch. Enter a question mark (?) after
a command whenever you need help.
7
Configuring the Management IPAddress and Telnet
After configuring the management IP address of a switch, you can log in to the switch
using this address. CORE is used in the example below to show the procedure of
configuring the management IP address and Telnet.
Configure the management IP address.
1
<HUAWEI> system-view
[HUAWEI] vlan 5//Create management VLAN 5.
[HUAWEI-VLAN5] management-vlan
[HUAWEI-VLAN5] quit
[HUAWEI] interface vlanif 5
[HUAWEI-vlanif5] ip address 10.10.1.1 24
[HUAWEI-vlanif5] quit
Add the management interface to the management VLAN.
2
[HUAWEI] interface GigabitEthernet 0/0/8 //Assume that the interface
connected to the NMS is GigabitEthernet 0/0/8.
[HUAWEI-GigabitEthernet0/0/8] port link-type trunk
[HUAWEI-GigabitEthernet0/0/8] port trunk allow-pass vlan 5
[HUAWEI-GigabitEthernet0/0/8] quit