Huijue Switch for Network Access

Configuring network access on a Huawei switch involves setting up VLANs, access ports, IP addresses, default gateways, and optional 802.1X authentication for secure connectivity.

Basic Access Switch Setup

1. Physical Installation: Mount the switch in a suitable location, connect power, and link end devices (PCs, printers) to the switch ports using Ethernet cables (Cat5e, Cat6, or higher) for optimal speeds .
2. Management Access: Connect via console cable, SSH, or web interface. Assign an IP address to the switch for administration and configure the default gateway to allow communication outside the local network .
3. Port Configuration: Determine which ports will serve as access ports (for end devices) and trunk ports (for connecting other switches or routers). Assign VLAN memberships accordingly .

VLAN and IP Configuration

• Create VLANs to segment network traffic. For example, VLAN 10 for department A and VLAN 20 for department B .
• Assign VLANs to ports: Access ports connect to end devices, while trunk ports carry multiple VLANs between switches .
• VLANIF Interfaces: For Layer 3 communication between VLANs, configure VLANIF interfaces on the core switch and assign IP addresses to enable routing .
• DHCP Settings: Configure DHCP pools on the core switch to automatically assign IP addresses to devices in each VLAN .

Security and Access Control

• 802.1X Authentication: Enforce user authentication before granting network access. Configure a RADIUS server (e.g., Windows NPS), AAA policies, dot1x profiles, and apply them to the desired interfaces .
• IP Source Guard (IPSG): Prevent unauthorized IP changes on access ports to maintain network integrity .
• QoS and Traffic Prioritization: Optionally, configure Quality of Service to prioritize voice, video, or critical data traffic .

Monitoring and Verification

• Check interface status: Use commands like display interface brief to verify port connectivity .
• View MAC and ARP tables: Use display mac-address and display arp to identify connected devices .
• LLDP Neighbors: Use display lldp neighbor to see connected switches and devices supporting LLDP .
• Logs: Monitor switch logs with display logbuffer to track events and troubleshoot issues .

Summary

By following these steps, you can configure a Huawei switch to provide secure, segmented, and manageable network access. Proper VLAN assignment, IP configuration, and optional 802.1X authentication ensure that devices connect correctly while maintaining network security and performance .