Huawei S Series Quick guide

Quick Configuration
HUAWEI S Series Campus Switches
Issue: 06 (2018-08-10)

Copyright © Huawei Technologies Co., Ltd. 2019. All rights
reserved.
No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co.,
Ltd.
All other trademarks and trade names mentioned in this document are the
property of their respective holders.
Notice
The purchased products, services and features are stipulated by the contract
made between Huawei and the customer. All or part of the products, services,
and features described in this document may not be within the purchase scope or
the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without
warranties, guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort
has been made in the preparation of this document to ensure accuracy of the
contents, but all statements, information, and recommendations in this document
do not constitute a warranty of any kind, express or implied.
Huawei Technologies Co., Ltd.
Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Website: http://e.huawei.com/en/

Contents
1 Before You Start 1
3 Small- and Mid-Sized Campus Networks 23
4 Mid-sized Campus WLANs 55
3.1 Data Plan 24
3.2 Quickly Configuring Small- and Mid-Sized Campus Networks 26
2 Small-Sized Campus Networks 2
2.1 Data Plan 3
2.2 Quickly Configuring Small-Sized Campus Networks 5
4.1 Data Plan 56
57
4.2 Configuration Roadmap
4.3 Quickly Configuring Mid-sized Campus WLANs 58
5 FAQs 69

1
1Before You Start
This document will help you log in to and quickly configure Huawei S series switches.
For more service configurations, see the Switch Configuration Guide.
1Install and power on the switch. For details refer to the S7700 and S9700 Quick
Installation Guide, S12700 Quick Installation Guide, or 2700, S3700, S5700, and
S6700 Series Switches Quick Start Guide.
3
Place the following contact details around your workplace:
Telephone number of the agent responsible for your network construction and
service.
Visit the Huawei Enterprise Service Technical Support website
(http://support.huawei.com/enterprise) to register an account. With an account, you
can browse or download more product documents, cases, and bulletins. You can
also enjoy our subscription and message push services.
2
Before configuring any data, complete the following tasks:
This document is for switches running V200R003C00 and later.
You can run the display version command in the user view to
check the version of the device.

2
2
On small-sized networks, S2700&S3700 switches are deployed at the access layer,
S5700&S6700 switches is deployed at the core layer, and an AR series router
works as the egress router.
The access switches and core switch connect through Eth-Trunk to ensure
reliability.
On an access switch, each department has a VLAN allocated so that services are
separated by VLANs. Configuring a VLANIF interface on the core switch
implements Layer 3 communication between different departments.
The core switch functions as a DHCP server to allocate IP addresses to user
devices on the campus network.
Configuring DHCP snooping on the access switches prevents intranet users from
connecting a small router to the intranet to allocate IP addresses. Configuring IPSG
on the access switches prevents intranet users from changing IP addresses.
This section uses the S2750 as an access switch (ACC1), S5700
as a core switch (CORE), and an AR series router as an egress
router (Router) as examples to demonstrate the configuration
procedure for small-sized campus networks.
Small-Sized Campus Networks

2.1
Before configuring the switches and router, prepare the following data for use in the next
section.
Component Data
Management IP
address 10.10.1.1/24
Static LACP
Eth-Trunk type
ACC1: VLAN 10
ACC2: VLAN 20
CORE: VLANs 100,
10, and 20
VLAN ID
Action
Configure the
management
IP address
and Telnet
Configure
interfaces
and VLANs
Port type
Description
The Eth-Trunk works in load balancing or static LACP
mode.
The management IP address is used to log in to
the switch.
The Trunk port
connects to a switch,
and the Access port
connects to a PC.
VLAN1 is the default VLAN on the switch.
To isolate departmentsA and B at Layer 2, add A
to VLAN 10 and B to VLAN 20.
CORE connects to the egress router through
VLANIF100.
This configuration is for Trunk and Access port
setup. If a Hybrid port setupis availableon a
switch, this port can connect to either a host or
another switch.
Management
VLAN VLAN 5
3
A modular switch‘s management interface is Ethernet0/0/0.
A fixed switch‘s management interface is MEth0/0/1.
For switches without management interfaces, you are
advised to use VLANIF interfaces for inband management.
Configure
DHCP
DHCP server CORE Configure the DHCP server function on CORE.
Address pool
VLAN 10: IP address
pool 10
VLAN 20: IP address
pool 20
Terminals in department A obtain IP addresses
from IP address pool 10.
Terminals in department B obtain IP addresses
from IP address pool 20.
Address
allocation Based on a global
address pool None
Configure
routing of
CORE
CORE:
VLANIF 100
10.10.100.1/24
VLANIF 10
10.10.10.1/24
VLANIF 20
10.10.20.1/24
IP address
CORE connects to the campus egress router
through VLANIF 100 so that the campus intranet
can communicatewith the Internet.
Configure a default route on CORE with the next
hop pointing to the egress router.
After configuring the IP addresses of VLANIF 10
and VLANIF 20 on CORE, departments A and B
can then communicate through CORE.
Data Plan

Component Data
8.8.8.8
DNS server
address
Action
Configure
the egress
router
Public gateway
Description
1.1.1.1/30
The DNS server resolves domain names
into IP addresses.
The public gateway address is the IP
address of the carrier device that connects
to the egress router. Configure a default
route to this IP address on the egress router
to forward intranet traffic to the Internet.
Configure
DHCP
snooping
and IPSG
Trusted
interface Eth-Trunk1 None
Public interface
IP address GE0/0/1: 1.1.1.2/30 GE0/0/1 is the public interface that connects the egress router to the Internet.
4
Intranet
interface IP
address
GE1/0/0:
10.10.100.2/24 GE1/0/0 connects the egress router to the
intranet.

2.2
Follow the procedure shown below to configure the switches and router. Once
configurations are complete, user devices within the campus can communicate with
each other, and intranet users can access the Internet.
5
Step 9 –Save the
configuration.
Step 1 –Log in to
the switch.
Step 2 –Configure
the management IP
address and Telnet.
Step 4 –Configure
DHCP.
Step 5 –Configure
routing of CORE.
Step 3 –Configure
interfaces and
VLANs.
Step 8 –Verify
services.
Step 6 –Configure
the egress router.
Step 7 –Configure
DHCP snooping and
IPSG.
Quickly Configuring Small-Sized Campus
Networks

Logging In to the Switch
Connect your PC to the switch through the console cable provided with the switch.
If your PC does not have a serial port, use a USB to serial cable.
1
Open the terminal emulation program on your PC. Create a connection and set the
interface and communication parameters.
Select an available port on your PC. For example, if your PC runs a Windows
operating system, you can view port information in Device Manager and select a
port. Table 1 lists the communication parameters on the switch.
2
Table 1 Default settings of the console port on the switch
Parameter Default Value
Transmission rate
Data bit
9600 bit/s
None
None
1
8
Flow control
Parity bit
Stop bit
6
If the switch has a Mini USB port, you can connect your PC to the
switch using a Mini USB cable. For this configuration procedure, see
the corresponding Configuration Guide - Basic Configuration based
on the version of the device.

Press Connect until the following information is displayed. Enter your new password,
and then re-enter it to confirm.
3
Login authentication
Username:admin
Password:
If you log in to the switch for the first time in versions earlier than
V200R010C00, the system asks you to set a login password. In
V200R010C00 and later versions, the default user name for first login is
admin and default password is a[email protected]. You must
change the password after login.
You can now run commands to configure the switch. Enter a question mark (?) after
a command whenever you need help.
7
Configuring the Management IPAddress and Telnet
After configuring the management IP address of a switch, you can log in to the switch
using this address. CORE is used in the example below to show the procedure of
configuring the management IP address and Telnet.
Configure the management IP address.
1
<HUAWEI> system-view
[HUAWEI] vlan 5//Create management VLAN 5.
[HUAWEI-VLAN5] management-vlan
[HUAWEI-VLAN5] quit
[HUAWEI] interface vlanif 5
[HUAWEI-vlanif5] ip address 10.10.1.1 24
[HUAWEI-vlanif5] quit
Add the management interface to the management VLAN.
2
[HUAWEI] interface GigabitEthernet 0/0/8 //Assume that the interface
connected to the NMS is GigabitEthernet 0/0/8.
[HUAWEI-GigabitEthernet0/0/8] port link-type trunk
[HUAWEI-GigabitEthernet0/0/8] port trunk allow-pass vlan 5
[HUAWEI-GigabitEthernet0/0/8] quit

8
Configure Telnet.
3
[HUAWEI] telnet server enable //By default, the Telnet function is disabled.
[HUAWEI] user-interface vty 0 4 //An administrator generally logs in to
the switch through Telnet. AAA authentication is recommended.
[HUAWEI-ui-vty0-4] protocol inbound telnet
//V200R006 and earlier versions support Telnet. V200R007 and later versions
support SSH by default. If the switch runs V200R007 or a later version, run
this command before logging to the switch using Telnet.
[HUAWEI-ui-vty0-4] authentication-mode aaa
[HUAWEI-ui-vty0-4] idle-timeout 15
[HUAWEI-ui-vty0-4] quit
[HUAWEI] aaa
[HUAWEI-aaa] local-user admin password irreversible-cipher Helloworld@6789
//Configure the user name and password for Telnet login. The user name is
case-insensitive, whereas the password is case-sensitive.
[HUAWEI-aaa] local-user admin privilege level 15 //Set the administrator
account level to 15 (highest).
[HUAWEI-aaa] local-user admin service-type telnet
Use of STelnet V2 to log in to the switch is recommended because the
Telnet protocol has security risks. For this configuration procedure, see
the corresponding Configuration Guide - Basic Configuration based on
the version of the device.
Log in to the switch from an operation terminal through Telnet. When the user view
prompt is displayed, you have successfully logged in.
4
C:\Documents and Settings\Administrator> telnet 10.10.1.1 //Enter the
management IP address and press Enter.
Login authentication
Username:admin //Enter the user name and password.
Password:
Info: The max number of VTY users is 5, and the number
of current VTY users on line is 1.
The current login time is 2014-05-06 18:33:18+00:00.
<HUAWEI> //User view prompt

a. Configure the access switch.
Starting with access switch ACC1 as an example, create service VLAN 10 on ACC1.
1
<HUAWEI> system-view
[HUAWEI] sysname ACC1 //Set the switch name to ACC1.
[ACC1] vlan batch 10 //Create VLANs in a batch.
Configure Eth-Trunk 1, through which ACC1 connects to the CORE, to allow the
packets from the VLAN of department A to pass through.
2
[ACC1] interface eth-trunk 1
[ACC1-Eth-Trunk1] port link-type trunk //Set Eth-Trunk 1 type to
Trunk for VLAN transparent transmission.
[ACC1-Eth-Trunk1] port trunk allow-pass vlan 10 //Configure Eth-Trunk 1
to transparently transmit the service VLAN on ACC1.
[ACC1-Eth-Trunk1] mode lacp //Configure the LACP mode
on Eth-Trunk 1.
[ACC1-Eth-Trunk1] quit
[ACC1] interface GigabitEthernet 0/0/1 //Add member interfaces to
Eth-Trunk 1.
[ACC1-GigabitEthernet0/0/1] Eth-Trunk 1
[ACC1-GigabitEthernet0/0/1] quit
[ACC1] interface GigabitEthernet 0/0/2
[ACC1-GigabitEthernet0/0/2] Eth-Trunk 1
[ACC1-GigabitEthernet0/0/2] quit
9
Configuring Interfaces and VLANs

Configure the interfaces on ACC1 that connect user devices so that user devices can
be added to the VLAN. Configure the interfaces as edge ports.
3
[ACC1] interface Ethernet 0/0/2 //Configure the interface connecting to PC1.
[ACC1-Ethernet0/0/2] port link-type access
[ACC1-Ethernet0/0/2] port default vlan 10
[ACC1-Ethernet0/0/2] stp edged-port enable
[ACC1-Ethernet0/0/2] quit
[ACC1] interface Ethernet 0/0/3 //Configure the interface connecting to PC2.
[ACC1-Ethernet0/0/3] port link-type access
[ACC1-Ethernet0/0/3] port default vlan 10
[ACC1-Ethernet0/0/3] stp edged-port enable
[ACC1-Ethernet0/0/3] quit
[ACC1] interface Ethernet 0/0/4 //Configure the interface connecting to
printers.
[ACC1-Ethernet0/0/4] port link-type access
[ACC1-Ethernet0/0/4] port default vlan 10
[ACC1-Ethernet0/0/4] stp edged-port enable
[ACC1-Ethernet0/0/4] quit
10
To add all users connected to ACC1 to VLAN 10, you can add Eth-Trunk1
on CORE to VLAN 10 as an Access interface and do not add interfaces on
ACC1 to VLAN 10, simplifying the configuration. This configuration ensures
that all users connected to Eth-Trunk1 belong to VLAN 10.
[ACC1] stp bpdu-protection
4Configure the BPDU protection function to improve network stability.

b. Configure the core switch (CORE).
Create the VLANs for CORE to communicate with ACC1, ACC2, and the egress router.
1
<HUAWEI> system-view
[HUAWEI] sysname CORE //Set the switch name to CORE.
[CORE] vlan batch 10 20 100 //Create VLANs in a batch.
Configure downstream interfaces and VLANIF interfaces. Communication between
departments A and B uses VLANIF interfaces. For example, CORE connects to ACC1
through Eth-Trunk 1.
2
[CORE] interface eth-trunk 1
[CORE-Eth-Trunk1] port link-type trunk //Set the interface type to
Trunk for VLAN transparent transmission.
[CORE-Eth-Trunk1] port trunk allow-pass vlan 10 //Configure Eth-Trunk 1 to
transparently transmit the service VLAN on ACC1.
[CORE-Eth-Trunk1] mode lacp //Configure the LACP mode.
[CORE-Eth-Trunk1] quit
[CORE] interface GigabitEthernet 0/0/1 //Add member interfaces to Eth-
Trunk 1.
[CORE-GigabitEthernet0/0/1] Eth-Trunk 1
[CORE-GigabitEthernet0/0/1] quit
[CORE] interface GigabitEthernet 0/0/2
[CORE-GigabitEthernet0/0/2] Eth-Trunk 1
[CORE-GigabitEthernet0/0/2] quit
[CORE] interface Vlanif 10 //Configure a VLANIF interface to
allow department A to communicate with department B through Layer 3.
[CORE-Vlanif10] ip address 10.10.10.1 24
[CORE-Vlanif10] quit
[CORE] interface Vlanif 20 //Configure a VLANIF interface to
allow department B to communicate with department A through Layer 3.
[CORE-Vlanif20] ip address 10.10.20.1 24
[CORE-Vlanif20] quit
Configure upstream interfaces and VLANIF interfaces to allow the campus network to
communicate with the Internet.
3
[CORE] interface GigabitEthernet 0/0/20
[CORE-GigabitEthernet0/0/20] port link-type access //Set the access mode.
[CORE-GigabitEthernet0/0/20] port default vlan 100
[CORE-GigabitEthernet0/0/20] quit
[CORE] interface Vlanif 100 //Configure a VLANIF interface to
allow CORE to communicate with the router at Layer 3.
[CORE-Vlanif100] ip address 10.10.100.1 24
[CORE-Vlanif100] quit
11

After configuring the interfaces and VLANs, run the following commands to view the
configuration results. For details about the command output, see the corresponding
Command Reference based on the version of the device.
Run the display eth-trunk command to view the configurations of Eth-Trunk on
ACC1.
4
12
[ACC1] display eth-trunk 1
Eth-Trunk1's state information is:
Local:
LAG ID: 1 WorkingMode: LACP
Preempt Delay: Disabled Hash arithmetic: According to SA-XOR-DA
System Priority: 32768 System ID: 0200-0000-6704
Least Active-linknumber: 1 Max Active-linknumber: 8
Operate status: up Number Of Up Port In Trunk: 1
--------------------------------------------------------------------------------
ActorPortName Status PortType PortPri PortNo PortKey PortState Weight
GigabitEthernet0/0/1 Selected 100M 32768 2 289 10111100 1
GigabitEthernet0/0/2 Selected 100M 32768 3 289 10100010 1
Partner:
--------------------------------------------------------------------------------
ActorPortName SysPri SystemID PortPri PortNo PortKey PortState
GigabitEthernet0/0/1 32768 0012-3321-2212 32768 2 289 10111100
GigabitEthernet0/0/2 32768 0012-3321-2212 32768 3 289 10111100
[ACC1] display vlan
The total number of VLANs is : 1
--------------------------------------------------------------------------------
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
--------------------------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------------------------
10 common UT:Eth0/0/2(U) Eth0/0/3(U) Eth0/0/4(U)
TG:Eth-Trunk1(U)
VID Status Property MAC-LRN Statistics Description
--------------------------------------------------------------------------------
10 enable default enable disable VLAN 0010
ACC1's GE0/0/1 and GE0/0/2 interfaces
have been added to Eth-Trunk 1.
On ACC1, interfaces Eth0/0/2
to Eth0/0/4 have been added
to VLAN 10 in Untagged
mode, and Eth-Trunk 1 has
been added to VLAN 10 in
Tagged mode.
Run the display vlan command to view VLAN
configurations on ACC1.

Run the display eth-trunk command to view Eth-Trunk configurations on CORE.
13
Run the display vlan command to view VLAN
configurations on CORE.
[CORE] display eth-trunk 1
Eth-Trunk1's state information is:
Local:
LAG ID: 1 WorkingMode: LACP
Preempt Delay: Disabled Hash arithmetic: According to SA-XOR-DA
System Priority: 32768 System ID: 0200-0000-6703
Least Active-linknumber: 1 Max Active-linknumber: 8
Operate status: up Number Of Up Port In Trunk: 1
--------------------------------------------------------------------------------
ActorPortName Status PortType PortPri PortNo PortKey PortState Weight
GigabitEthernet0/0/1 Selected 100M 32768 2 289 10111100 1
GigabitEthernet0/0/2 Selected 100M 32768 3 289 10100010 1
Partner:
--------------------------------------------------------------------------------
ActorPortName SysPri SystemID PortPri PortNo PortKey PortState
GigabitEthernet0/0/1 32768 0012-3321-2211 32768 2 289 10111100
GigabitEthernet0/0/2 32768 0012-3321-2211 32768 3 289 10111100
[CORE] display vlan
The total number of VLANs is : 3
--------------------------------------------------------------------------------
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
--------------------------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------------------------
10 common TG:Eth-Trunk1(U)
20 common TG:Eth-Trunk2(U)
100 common TG:GE0/0/20(U)
VID Status Property MAC-LRN Statistics Description
--------------------------------------------------------------------------------
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
100 enable default enable disable VLAN 0100
CORE's GE0/0/1 and GE0/0/2
interfaces have been added to
Eth-Trunk 1. On CORE, Eth-Trunk 1 has
been added to VLAN 10, Eth-
Trunk 2 has been added to
VLAN 20, and GE0/0/20 has
been added to VLAN 100 in
Tagged mode.

Create a global address pool, configure the egress gateway and lease (the default
lease, one day, is used, so no command is executed), and allocate fixed IP address
10.10.10.254 to the printer with MAC address a-b-c.
1
<CORE> system-view
[CORE] dhcp enable
[CORE] ip pool 10
[CORE-ip-pool-10] network 10.10.10.0 mask 24 //Specify the address pool
range that is used to allocate IP addresses to users in department A.
[CORE-ip-pool-10] gateway-list 10.10.10.1 //Configure the gateway
address for users in department A.
[CORE-ip-pool-10] static-bind ip-address 10.10.10.254 mac-address a-b-c
//Allocate fixed IP address to the printer.
[CORE-ip-pool-10] quit
Configure the global address pool to allocate IP addresses to user devices in
department A.
2
[CORE] interface vlanif 10
[CORE-Vlanif10] dhcp select global //Configure the global address pool
to allocate IP addresses to users in department A.
[CORE-Vlanif10] quit
14
Configure the DHCP server on CORE to allocate IP addresses to user devices in
department A (VLAN 10) and department B (VLAN 20).
Department A is used in the example below.
In this section, a global address pool is configured. You can also
configure an interface-based address pool. For details on this process,
see the corresponding Configuration Guide - IP Service based on the
version of the device.
Configuring DHCP

15
Run the display ip pool command to view configuration
and usage information. The example below shows the
configuration of global address pool 10.
3
[CORE] display ip pool name 10
Pool-name : 10
Pool-No : 0
Lease : 1 Days 0 Hours 0 Minutes
Domain-name : -
DNS-server0 : -
NBNS-server0 : -
Netbios-type : -
Position : Local Status : Unlocked
Gateway-0 : 10.10.10.1
Network : 10.10.10.0
Mask : 255.255.255.0
VPN instance : --
-----------------------------------------------------------------------
------
Start End Total Used Idle(Expired) Conflict
Disable
-----------------------------------------------------------------------
------
10.10.10.1 10.10.10.254 253 4 249(0) 0
0
-----------------------------------------------------------------------
------
View address
pool
configuration.
View address pool
usage information.

16
After completing the DHCP server configuration, configure network
adapters on terminal PCs to automatically obtain IP addresses. The
terminal PCs then can obtain IP addresses from the DHCP server and
access the Internet.
After dynamic IP address allocation is configured, it takes a PC a long
time to obtain an IP address after it starts. The reason is that an STP-
enabled switch recalculates the spanning tree topology every time a PC
connects to the switch. To solve this problem, disable STP or configure
the switch interface that connects to user devices as an edge port.
ACC1 is used in the example below.
# Disable STP.
[ACC1] interface GigabitEthernet 0/0/1
[ACC1- GigabitEthernet 0/0/1] stp disable //Alternatively, run the undo
stp enable command.
# Configure the switch interface that connects to user devices as an edge port.
[ACC1] interface GigabitEthernet 0/0/1
[ACC1- GigabitEthernet 0/0/1] stp edged-port enable
After either of the preceding operations is performed, terminal PCs can rapidly
obtain IP addresses after they start.

Configure a default static route to the campus egress gateway on CORE so that
CORE forwards intranet traffic to the egress router.
1
[CORE] ip route-static 0.0.0.0 0 10.10.100.2
Run the display ip routing-table command on CORE to view the IP routing table.
2
[CORE] display ip routing-table
Route Flags: R - relay, D - download to fib
---------------------------------------------------------------------------
---
Routing Tables: Public
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 Static 60 0 RD 10.10.100.2 Vlanif100
10.10.10.0/24 Direct 0 0 D 10.10.10.1 Vlanif10
10.10.10.1/32 Direct 0 0 D 127.0.0.1 Vlanif10
10.10.20.0/24 Direct 0 0 D 10.10.20.1 Vlanif20
10.10.20.1/32 Direct 0 0 D 127.0.0.1 Vlanif20
10.10.100.0/24 Direct 0 0 D 10.10.100.1 Vlanif100
10.10.100.1/32 Direct 0 0 D 127.0.0.1 Vlanif100
17
A default static route whose
next hop address is
10.10.100.2 exists, indicating
that the static route is
successfully configured.
The three direct routes are
automatically generated
through link detection.
Configuring Routing