HUAWEI SWITCH COMMAND
S2700,
S3700, S5700, S6700, S7700, and S9700 Series Switches Typical Configuration
Examples
·
Example for
Configuring a Layer 3 Switch to Work with a Router for Internet Access
Layer 3 switches provide the routing function, which indicates a
network-layer function in the OSI model.
Layer 3 switches can work at Layer 2 and Layer 3 and be deployed
at the access layer or aggregation layer as user gateways.
·
This example uses
router configurations of AR3600 V200R007C00SPCc00. For other router
configurations, see the corresponding documentation.
· For the products and versions applicable when a switch functions as a DHCP server,
In , a company has multiple departments that belong to different network
segments, and each department needs to access the Internet. It is required that
users access the Internet through the Layer 3 switch and router and that the
Layer 3 switch function as the gateway of users.
Figure 1-4 Configuring
a Layer 3 switch to work with a router for Internet access
The configuration roadmap is as follows:
1.
Configure the switch
as the gateway of users to allow users to communicate across network segments
through VLANIF interfaces.
2.
Configure the switch
as the DHCP server to assign IP addresses to users.
3.
Configure the NAT
function on the router to enable intranet users to access the Internet.
1.
Configure the switch.
# Configure the interfaces connected to users and corresponding
VLANIF interfaces.
<HUAWEI> system-view
[HUAWEI] sysname
Switch
[Switch] vlan batch
2 3
[Switch] interface
gigabitethernet 0/0/2
[Switch-GigabitEthernet0/0/2]
port link-type access //Set the
link type of the interface to access.
[Switch-GigabitEthernet0/0/2]
port default vlan 2 //Add the
interface to VLAN 2.
[Switch-GigabitEthernet0/0/2]
quit
[Switch] interface
gigabitethernet 0/0/3
[Switch-GigabitEthernet0/0/3]
port link-type access
[Switch-GigabitEthernet0/0/3]
port default vlan 3
[Switch-GigabitEthernet0/0/3]
quit
[Switch] interface
vlanif 2
[Switch-Vlanif2] ip
address 192.168.1.1 24
[Switch-Vlanif2] quit
[Switch] interface
vlanif 3
[Switch-Vlanif3] ip
address 192.168.2.1 24
[Switch-Vlanif3] quit
# Configure the interface connected to the router and
corresponding VLANIF interface.
[Switch] vlan batch
100
[Switch] interface
gigabitethernet 0/0/1
[Switch-GigabitEthernet0/0/1]
port link-type access
[Switch-GigabitEthernet0/0/1]
port default vlan 100
[Switch-GigabitEthernet0/0/1]
quit
[Switch] interface
vlanif 100
[Switch-Vlanif100] ip
address 192.168.100.2 24
[Switch-Vlanif100] quit
# Configure the default route.
[Switch] ip
route-static 0.0.0.0 0.0.0.0 192.168.100.1
//The next hop of the default route is the IP address 192.168.100.1 of
the router interface.
# Configure the DHCP server.
[Switch] dhcp
enable
[Switch] interface
vlanif 2
[Switch-Vlanif2] dhcp
select interface //DHCP uses an
interface address pool to assign IP addresses to intranet users.
[Switch-Vlanif2] dhcp
server dns-list 114.114.114.114 223.5.5.5
//The configured DNS-list 114.114.114.114 is a public DNS server
address, which is the same for carriers. In practice, the DNS-list address
needs to be configured based on the DNS assigned to a carrier.
[Switch-Vlanif2] quit
[Switch] interface
vlanif 3
[Switch-Vlanif3] dhcp
select interface
[Switch-Vlanif3] dhcp
server dns-list 114.114.114.114 223.5.5.5
[Switch-Vlanif3] quit
2.
Configure the router.
# Configure an IP address for the interface connected to the
switch.
<Huawei> system-view
[Huawei] sysname
Router
[Router] interface
gigabitethernet 0/0/1
[Router-GigabitEthernet0/0/1]
ip address 192.168.100.1 255.255.255.0
//Configure the IP address 192.168.100.1 as the next-hop IP address of
the switch's default route.
[Router-GigabitEthernet0/0/1]
quit
# Configure an IP address for the interface connected to the
Internet.
[Router] interface
gigabitethernet 0/0/2
[Router-GigabitEthernet0/0/2]
ip address 200.0.0.2 255.255.255.0
//The IP address of the interface connected to the Internet is on the
same network segment as the public IP address.
[Router-GigabitEthernet0/0/2]
quit
# Configure a default route and a return route.
[Router] ip
route-static 0.0.0.0 0.0.0.0 200.0.0.1
//Configure a static default route with the next hop pointing to the
public IP address 200.0.0.1.
[Router] ip
route-static 192.168.0.0 255.255.0.0 192.168.100.2 //Configure a return route with the next hop
pointing to the IP address 192.168.100.2 of the switch's uplink interface.
# Configure the NAT function to enable intranet users to access
the Internet.
[Router] acl number
2001
[Router-acl-basic-2001]
rule 5 permit source 192.168.0.0 0.0.255.255 //NAT takes effect only for source IP
addresses on the network segment 192.168.0.0/16 and translates only source IP
addresses of outgoing packets on GE0/0/2.
[Router-acl-basic-2001]
quit
[Router] interface
gigabitethernet 0/0/2
[Router-GigabitEthernet0/0/2]
nat outbound 2001
[Router-GigabitEthernet0/0/2]
quit
3.
Check the
configuration.
Configure an IP address 192.168.1.2/24 and a gateway address
192.168.1.1 for PC1, and configure an IP address 192.168.2.2/24 and a gateway
address 192.168.2.1 for PC2.
Configure an IP address 200.0.0.1/24 and a gateway address 200.0.0.2
for external network.
After the configurations are complete, PC1 and PC2 can ping the
external network IP address 200.0.0.1/24 and access the Internet.
·
Switch configuration
file
·
#
·
sysname Switch
·
#
·
vlan batch 2 to 3 100
·
#
·
dhcp enable
·
#
·
interface Vlanif2
·
ip address 192.168.1.1 255.255.255.0
·
dhcp select interface
·
dhcp server dns-list 114.114.114.114 223.5.5.5
·
#
·
interface Vlanif3
·
ip address 192.168.2.1 255.255.255.0
·
dhcp select interface
·
dhcp server dns-list 114.114.114.114 223.5.5.5
·
#
·
interface Vlanif100
·
ip address 192.168.100.2 255.255.255.0
·
#
·
interface
GigabitEthernet0/0/1
·
port link-type access
·
port default vlan 100
·
#
·
interface
GigabitEthernet0/0/2
·
port link-type access
·
port default vlan 2
·
#
·
interface
GigabitEthernet0/0/3
·
port link-type access
·
port default vlan 3
·
#
·
ip route-static
0.0.0.0 0.0.0.0 192.168.100.1
·
#
·
return
·
Router configuration
file
·
#
·
sysname Router
·
#
·
acl number 2001
·
rule 5 permit source 192.168.0.0 0.0.255.255
·
#
·
interface
GigabitEthernet0/0/1
·
ip address 192.168.100.1 255.255.255.0
·
#
·
interface
GigabitEthernet0/0/2
·
ip address 200.0.0.2 255.255.255.0
·
nat outbound 2001
·
#
·
ip route-static
0.0.0.0 0.0.0.0 200.0.0.1
·
ip route-static
192.168.0.0 255.255.0.0 192.168.100.2
·
#
·
return
Examples for
Applicable Products and Versions
Table 1-2 Applicable product models and versions
|
Series |
Product Model |
Software Version |
|
S2700 |
S2720EI |
V200R009C00,
V200R010C00, V200R011C10, V200R012C00, V200R013C00 |
|
S2750EI |
V200R005C00SPC300,
V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00,
V200R011C10, V200R012C00 |
|
|
S3700 |
S3700SI,
S3700EI |
V100R006C05 |
|
S3700HI |
V200R001C00 |
|
|
S5700 |
S5700LI |
V200R005C00SPC300,
V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00,
V200R011C10, V200R012C00 |
|
S5700S-LI |
V200R005C00SPC300,
V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00,
V200R011C10, V200R012C00 |
|
|
S5700SI |
V200R001C00,
V200R002C00, V200R003C00, V200R005C00 |
|
|
S5700EI |
V200R001(C00&C01),
V200R002C00, V200R003C00, V200R005(C00&C01&C02&C03) |
|
|
S5700HI |
V200R001(C00&C01),
V200R002C00, V200R003C00, V200R005(C00SPC500&C01&C02) |
|
|
S5710-X-LI |
V200R008C00,
V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00 |
|
|
S5710EI |
V200R001C00,
V200R002C00, V200R003C00, V200R005(C00&C02) |
|
|
S5710HI |
V200R003C00,
V200R005(C00&C02&C03) |
|
|
S5720LI,
S5720S-LI |
V200R010C00,
V200R011C00, V200R011C10, V200R012(C00&C20), V200R013C00 |
|
|
S5720SI,
S5720S-SI |
V200R008C00,
V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00 |
|
|
S5720I-SI |
V200R012C00,
V200R013C00 |
|
|
S5720EI |
V200R007C00,
V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00,
V200R013C00 |
|
|
S5720HI |
V200R006C00,
V200R007(C00&C10), V200R008C00, V200R009C00, V200R010C00, V200R011C00,
V200R011C10, V200R012C00, V200R013C00 |
|
|
S5730HI |
V200R012C00,
V200R013C00 |
|
|
S5730SI |
V200R011C10,
V200R012C00, V200R013C00 |
|
|
S5730S-EI |
V200R011C10,
V200R012C00, V200R013C00 |
|
|
S6700 |
S6700EI |
V200R001(C00&C01),
V200R002C00, V200R003C00, V200R005(C00&C01&C02) |
|
S6720LI,
S6720S-LI |
V200R011C00,
V200R011C10, V200R012C00, V200R013C00 |
|
|
S6720SI,
S6720S-SI |
V200R011C00,
V200R011C10, V200R012C00, V200R013C00 |
|
|
S6720EI |
V200R008C00,
V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00 |
|
|
S6720S-EI |
V200R009C00,
V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00 |
|
|
S6720HI |
V200R012C00,
V200R013C00 |
|
|
S7700 |
S7703,
S7706, S7712 |
V200R001(C00&C01),
V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,
V200R009C00, V200R010C00, V200R011C10, V200R012C00, V200R013C00 |
|
S7703 PoE |
V200R013C00 |
|
|
S7706 PoE |
V200R013C00 |
|
|
S9700 |
S9703,
S9706, S9712 |
V200R001(C00&C01),
V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007(C00&C10),
V200R008C00, V200R009C00, V200R010C00, V200R011C10, V200R012C00, V200R013C00 |
About
Partner
Resources
No comments:
Post a Comment