01 Log In to a Switch Using the Web System

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 1

Logging In to a Switch Using the Web System
This video is applicable to Huawei switches excluding S1700 switches.

You can enter the default IP address to log in to S1700 web-managed switches using
the web system without performing any configurations.

Model Default IP Address for Web System Login Account/Password

S1728GWR-4P 196.168.0.1 admin/admin

S1700-28FR-2T2P-AC 192.168.1.253 admin/admin
S1700-52FR-2T2P-AC
S1700-28GFR-4P-AC
S1700-52GFR-4P-AC
S1720-20GFR-4TP 192.168.1.253 admin/
S1720-28GFR-4TP admin@huawei.com

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 2

Logging In to a Switch Using the Web System
1. Usage Scenario
Huawei Ethernet switches provide a built-in web system that allows users to easily manage and
maintain the switches.

2. Prerequisite
Use a PC to log in to the switch using Telnet.

3. Configuration Roadmap
1. Load the web system file on the switch.
2. Enable the HTTP service.
3. Configure a user name, password, and user level.
4. Open the web browser on the PC and log in to the switch.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 3

Logging In to a Switch Using the Web System
4. Configuration Procedure
//Load the web system file on the switch.
<HUAWEI> dir
<HUAWEI> system-view
[HUAWEI] http server load file-name

//Enable the HTTP service.

[HUAWEI] http secure-server enable
[HUAWEI] http server enable

//Configure a user name, password, and user level.

[HUAWEI] aaa
[HUAWEI-aaa] local-user user-name password cipher password
[HUAWEI-aaa] local-user user-name privilege level level
[HUAWEI-aaa] local-user user-name service-type http

//Open the web browser on the PC and enter https://IP address/ to log in to the switch.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 4

 02 View ESN and System Information

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 5

 1

2.1 2.2

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 6

 03 Shut Down Unused Interfaces

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 7

 1
6

Select the interface that

you want to shut down.

Shut down unused interfaces.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 8

 04 Configure the Access Interfaces Connected to PCs

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 9

Configure Interfaces That Connect PCs (VLAN Access

PC1 and PC2 connect to Switch through VLAN 2

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 10

 1
7
Configure the Access Interfaces Connected to PCs.
2
3

Select the Access Interfaces Connected to PCs.

Add Interfaces to VLANs.

6
? Default VLAN: 1-4094
MAC Address Limit: 1-1024

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 11

 05 Configure the Trunk Interfaces Connected to Other
Network Devices

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 12

Configure Interfaces That Connect to Other Network Devices (VLAN Trunk)

Switch and SwitchA are connected and communicate

with each other through VLAN 2

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 13

 1
7
Configure the Trunk Interfaces Connected to Switchs.
2
3

Selete the Trunk Interfaces Connected to Switchs.

Add Interfaces to VLANs.

6
? Allow VLAN: 1-4094

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 14

 06 Configure Voice VLAN on the Interface Connected to IP
Phone

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 15

Connecting an Interface to an IP Phone (Voice VLAN )

The IP Phone connects to the switch through VLAN 20.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 16

 1
7
2

? Default VLAN: 1-4094

Voice VLAN : 2-4094
MAC Address Limit: 1-1024

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 17

 07 Set MAC Address Learning Limiting on a Single
Interface Edited

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 18

 1
7

2
3.1 3.2

? The value ranges from 1 to 1024.

6

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 19

 08 Configure LBDT

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 20

 1
5

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 21

 09 Configure ACL

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 22

 1 7

3
Configure Interface ACL 6

1. Select the target

interface in the panel.
Select interfaces of only
2 one interface card at one
4 time.
2. Click Confirm. After ACL
Select the source interface rules are replicated to the
target interface, original
ACL rules on the target
interface are cleared.

5
Edit ACL rules

HUAWEI TECHNOLOGIES CO., LTD.

? Source Huawei Confidential 23
IP/Destination IP: any or *.*.*.*
 1 7

Configure VLAN ACL 1. Enter the target VLAN ID. A

maximum 10 VLAN IDs can be
3 entered at one time.
2. Click Confirm. After ACL rules
are replicated to the target VLAN,
original ACL rules in the target
VLAN are cleared.
Select the source VLAN ID
6
4

Edit ACL rules

? Source IP/Destination IP: any or *.*.*.*

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 24

 10 Configure STP Edge Ports

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 25

 Configure STP Edge Ports

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 26

 3
5
1

4
2

9
8 7

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 27

 11 Configure the Default Route

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 28

 3

1 4

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 29

 12 Upgrade the Switch Software

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 30

 1

4.1

4.2

Ensure that the configurations are saved before you upgrade

5.1 the system software.

(Optional) 5.2 Do not power off the device during the upgrade.

5.3 Before performing the upgrade, read the Upgrade Guide to

learn about the version requirements, upgrade impact, and
precautions.

For the patch installation method, see the Install

Patches video.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 31
 13 Install Patches

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 32

 1
6

3
2

4.1

4.2

5.1
5.2

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 33

 14 Restore Factory Settings

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 34

 1

3
2

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 35

 15 Configure web users

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 36

 1
4
Create a user account.

3.1 3.3 Modify user information.

Delete a user account.
Select the records of the
user accounts to be delete, 3.2
and click Delete to delete the 3.4
user accounts.

? User name: @ cannot be in the first place and cannot contain \/:*?<>|%.
Password: must be a combination of digits, symbols, and uppercase or lowercase letters.
37 It cannot be blank and cannot contain
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential
single quotation marks (').
 16 Configure a Switch Using the Web System

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 38

 Configuring a Switch Using the Web System
1. Usage Scenario
The web system client of S series switches provides functions such as device summary, system, interface,
service, ACL, QoS, route, security, and tool management. A user can configure basic settings of a switch
using the web system.

2. Configuration Example
PC1 is on the network segment 1.1.1.0/24 and PC3 is on the network
segment 1.1.3.0/24.
A user wants to configure basic settings in the web system so that
PC1 and PC3 can communicate with each other.
3. Configuration Roadmap
1. Create VLANs and add interfaces to the VLANs.
2. Create VLANIF interfaces and configure IP addresses for the VLANIF interfaces to implement communication
between switches.
3. Configure a default IP gateway on each PC.
4. Configure a default static route on the switch so that PCs on different network segments can communicate.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 39

 Configuring a Switch Using the Web System
4. Configuration Procedure
This video uses SwitchA as an example to describe how to configure VLAN, VLANIF interface, and static route
using the web system.

# Create VLAN 10 and VLAN 30 in a batch.

# Set the interface type of GE0/0/1 to trunk and add GE0/0/1 to VLAN 10.
# Set the interface type of GE0/0/2 to access and add GE0/0/2 to VLAN 30.
# Create VLANIF 10 and VLANIF 30 and configure IP addresses for them.
# Configure a default static route on SwitchA.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 40

17 Configure Layer 2 Communication on S1700 Through Web

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 41

Configure Layer 2 Communication on S1700 Switches
Unmanaged S1700 Switches

Type Model Description

S1724G The unmanaged switches do not
S1700-8-AC support command line, web, or
S1700-8G-AC SNMP management. When
Unmanaged S1700-24-AC configuring an unmanaged
switches S1700-52R-2T2P-AC switch, you only need to connect
S1700-24GR the interface on the S1700 to a
S1700-16R remote device with a network
S1700-24R cable.
S1700-26R-2T

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 42

Configure Layer 2 Communication on S1700 Switches
Managed S1700 Switches

Type Model Description

S1728GWR-4P If the name of an S1700
S1700-28FR-2T2P-AC contains letter W or F, it is a
S1700-28GFR-4P-AC managed switch. W refers to
Managed S1700-52FR-2T2P-AC web-based management and F
switches S1700-52GFR-4P-AC refers to both web-based and
S1720-20GFR-4TP SNMP-based switch.
S1720-28GFR-4TP

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 43

Configure Layer 2 Communication on S1700 Switches
1. Application Scenario

As shown in the figure:

PC 1 and PC 2 connect to the aggregation switch switchA through a managed S1700
switch.
PC 1 and PC 2 run the same services, but belong to different VLANs. PC 1 belongs to
VLAN 10 and PC 2 belongs to VLAN 20.
PC 1 and PC 2 are located on the same network segment, and use the router as the
gateway.
PC 1 and PC 2 need to communicate with each other.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 44

Configure Layer 2 Communication on S1700 Switches
2. Configuration Roadmap and Procedure
# Enter the URL address of the web client and press Enter. In the displayed login dialog box, enter the user name
and password.

Model Default IP Address Initial User Name

and Password
S1728GWR-4P 192.168.0.1 admin/Admin@123

S1700-28FR-2T2P-AC
S1700-28GFR-4P-AC 192.168.1.253 admin/Admin@123
S1700-52FR-2T2P-AC
S1700-52GFR-4P-AC

S1720-20GFR-4TP admin/
S1720-28GFR-4TP 192.168.1.253 admin@huawei.com

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 45

Configure Layer 2 Communication on S1700 Switches
3. Configuration Roadmap and Procedure

# Create VLAN 10 and VLAN 20 on the S1700.

# Add GE0/0/1 to VLAN 10 in access mode.
# Add GE0/0/2 to VLAN 20 in access mode.
# Add GE0/0/3 to VLAN 10 and VLAN 20 in trunk mode.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 46