01 Log In to a Switch Using the Web System
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 1
Logging In to a Switch Using the Web System
This video is applicable to Huawei switches excluding S1700 switches.
You can enter the default IP address to log in to S1700 web-managed switches using
the web system without performing any configurations.
Model Default IP Address for Web System Login Account/Password
S1728GWR-4P 196.168.0.1 admin/admin
S1700-28FR-2T2P-AC 192.168.1.253 admin/admin
S1700-52FR-2T2P-AC
S1700-28GFR-4P-AC
S1700-52GFR-4P-AC
S1720-20GFR-4TP 192.168.1.253 admin/
S1720-28GFR-4TP
[email protected] HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 2
Logging In to a Switch Using the Web System
1. Usage Scenario
Huawei Ethernet switches provide a built-in web system that allows users to easily manage and
maintain the switches.
2. Prerequisite
Use a PC to log in to the switch using Telnet.
3. Configuration Roadmap
1. Load the web system file on the switch.
2. Enable the HTTP service.
3. Configure a user name, password, and user level.
4. Open the web browser on the PC and log in to the switch.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 3
Logging In to a Switch Using the Web System
4. Configuration Procedure
//Load the web system file on the switch.
<HUAWEI> dir
<HUAWEI> system-view
[HUAWEI] http server load file-name
//Enable the HTTP service.
[HUAWEI] http secure-server enable
[HUAWEI] http server enable
//Configure a user name, password, and user level.
[HUAWEI] aaa
[HUAWEI-aaa] local-user user-name password cipher password
[HUAWEI-aaa] local-user user-name privilege level level
[HUAWEI-aaa] local-user user-name service-type http
//Open the web browser on the PC and enter https://IP address/ to log in to the switch.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 4
02 View ESN and System Information
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 5
1
2.1 2.2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 6
03 Shut Down Unused Interfaces
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 7
1
6
Select the interface that
you want to shut down.
Shut down unused interfaces.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 8
04 Configure the Access Interfaces Connected to PCs
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 9
Configure Interfaces That Connect PCs (VLAN Access
PC1 and PC2 connect to Switch through VLAN 2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 10
1
7
Configure the Access Interfaces Connected to PCs.
2
3
Select the Access Interfaces Connected to PCs.
Add Interfaces to VLANs.
6
? Default VLAN: 1-4094
MAC Address Limit: 1-1024
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 11
05 Configure the Trunk Interfaces Connected to Other
Network Devices
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 12
Configure Interfaces That Connect to Other Network Devices (VLAN Trunk)
Switch and SwitchA are connected and communicate
with each other through VLAN 2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 13
1
7
Configure the Trunk Interfaces Connected to Switchs.
2
3
Selete the Trunk Interfaces Connected to Switchs.
Add Interfaces to VLANs.
6
? Allow VLAN: 1-4094
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 14
06 Configure Voice VLAN on the Interface Connected to IP
Phone
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 15
Connecting an Interface to an IP Phone (Voice VLAN )
The IP Phone connects to the switch through VLAN 20.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 16
1
7
2
? Default VLAN: 1-4094
Voice VLAN : 2-4094
MAC Address Limit: 1-1024
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 17
07 Set MAC Address Learning Limiting on a Single
Interface Edited
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 18
1
7
2
3.1 3.2
? The value ranges from 1 to 1024.
6
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 19
08 Configure LBDT
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 20
1
5
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 21
09 Configure ACL
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 22
1 7
3
Configure Interface ACL 6
1. Select the target
interface in the panel.
Select interfaces of only
2 one interface card at one
4 time.
2. Click Confirm. After ACL
Select the source interface rules are replicated to the
target interface, original
ACL rules on the target
interface are cleared.
5
Edit ACL rules
HUAWEI TECHNOLOGIES CO., LTD.
? Source Huawei Confidential 23
IP/Destination IP: any or *.*.*.*
1 7
Configure VLAN ACL 1. Enter the target VLAN ID. A
maximum 10 VLAN IDs can be
3 entered at one time.
2. Click Confirm. After ACL rules
are replicated to the target VLAN,
original ACL rules in the target
VLAN are cleared.
Select the source VLAN ID
6
4
Edit ACL rules
? Source IP/Destination IP: any or *.*.*.*
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 24
10 Configure STP Edge Ports
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 25
Configure STP Edge Ports
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 26
3
5
1
4
2
9
8 7
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 27
11 Configure the Default Route
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 28
3
1 4
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 29
12 Upgrade the Switch Software
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 30
1
4.1
4.2
Ensure that the configurations are saved before you upgrade
5.1 the system software.
(Optional) 5.2 Do not power off the device during the upgrade.
5.3 Before performing the upgrade, read the Upgrade Guide to
learn about the version requirements, upgrade impact, and
precautions.
For the patch installation method, see the Install
Patches video.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 31
13 Install Patches
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 32
1
6
3
2
4.1
4.2
5.1
5.2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 33
14 Restore Factory Settings
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 34
1
3
2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 35
15 Configure web users
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 36
1
4
Create a user account.
3.1 3.3 Modify user information.
Delete a user account.
Select the records of the
user accounts to be delete, 3.2
and click Delete to delete the 3.4
user accounts.
? User name: @ cannot be in the first place and cannot contain \/:*?<>|%.
Password: must be a combination of digits, symbols, and uppercase or lowercase letters.
37 It cannot be blank and cannot contain
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential
single quotation marks (').
16 Configure a Switch Using the Web System
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 38
Configuring a Switch Using the Web System
1. Usage Scenario
The web system client of S series switches provides functions such as device summary, system, interface,
service, ACL, QoS, route, security, and tool management. A user can configure basic settings of a switch
using the web system.
2. Configuration Example
PC1 is on the network segment 1.1.1.0/24 and PC3 is on the network
segment 1.1.3.0/24.
A user wants to configure basic settings in the web system so that
PC1 and PC3 can communicate with each other.
3. Configuration Roadmap
1. Create VLANs and add interfaces to the VLANs.
2. Create VLANIF interfaces and configure IP addresses for the VLANIF interfaces to implement communication
between switches.
3. Configure a default IP gateway on each PC.
4. Configure a default static route on the switch so that PCs on different network segments can communicate.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 39
Configuring a Switch Using the Web System
4. Configuration Procedure
This video uses SwitchA as an example to describe how to configure VLAN, VLANIF interface, and static route
using the web system.
# Create VLAN 10 and VLAN 30 in a batch.
# Set the interface type of GE0/0/1 to trunk and add GE0/0/1 to VLAN 10.
# Set the interface type of GE0/0/2 to access and add GE0/0/2 to VLAN 30.
# Create VLANIF 10 and VLANIF 30 and configure IP addresses for them.
# Configure a default static route on SwitchA.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 40
17 Configure Layer 2 Communication on S1700 Through Web
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 41
Configure Layer 2 Communication on S1700 Switches
Unmanaged S1700 Switches
Type Model Description
S1724G The unmanaged switches do not
S1700-8-AC support command line, web, or
S1700-8G-AC SNMP management. When
Unmanaged S1700-24-AC configuring an unmanaged
switches S1700-52R-2T2P-AC switch, you only need to connect
S1700-24GR the interface on the S1700 to a
S1700-16R remote device with a network
S1700-24R cable.
S1700-26R-2T
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 42
Configure Layer 2 Communication on S1700 Switches
Managed S1700 Switches
Type Model Description
S1728GWR-4P If the name of an S1700
S1700-28FR-2T2P-AC contains letter W or F, it is a
S1700-28GFR-4P-AC managed switch. W refers to
Managed S1700-52FR-2T2P-AC web-based management and F
switches S1700-52GFR-4P-AC refers to both web-based and
S1720-20GFR-4TP SNMP-based switch.
S1720-28GFR-4TP
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 43
Configure Layer 2 Communication on S1700 Switches
1. Application Scenario
As shown in the figure:
PC 1 and PC 2 connect to the aggregation switch switchA through a managed S1700
switch.
PC 1 and PC 2 run the same services, but belong to different VLANs. PC 1 belongs to
VLAN 10 and PC 2 belongs to VLAN 20.
PC 1 and PC 2 are located on the same network segment, and use the router as the
gateway.
PC 1 and PC 2 need to communicate with each other.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 44
Configure Layer 2 Communication on S1700 Switches
2. Configuration Roadmap and Procedure
# Enter the URL address of the web client and press Enter. In the displayed login dialog box, enter the user name
and password.
Model Default IP Address Initial User Name
and Password
S1728GWR-4P 192.168.0.1 admin/Admin@123
S1700-28FR-2T2P-AC
S1700-28GFR-4P-AC 192.168.1.253 admin/Admin@123
S1700-52FR-2T2P-AC
S1700-52GFR-4P-AC
S1720-20GFR-4TP admin/
S1720-28GFR-4TP 192.168.1.253 [email protected]
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 45
Configure Layer 2 Communication on S1700 Switches
3. Configuration Roadmap and Procedure
# Create VLAN 10 and VLAN 20 on the S1700.
# Add GE0/0/1 to VLAN 10 in access mode.
# Add GE0/0/2 to VLAN 20 in access mode.
# Add GE0/0/3 to VLAN 10 and VLAN 20 in trunk mode.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 46
