Configuring Web Management, SFTP, and HTTP/HTTPS Services on Huawei Devices

The configuration approach involves uploading web files, loading them, configuring HTTPS/HTTP services and users, and finally logging into the web management interface.

Operational steps start with generating a local key pair on the server and enabling the SFTP server:

<HUAWEI> system-view

Set the system name and create the RSA key pair:

[HUAWEI] sysname HTTP-Server

[HTTP-Server] rsa local-key-pair create

The key name will be HTTP-Server_Host with a modulus size between 512 and 2048 bits; generation may take several minutes. After confirming the key size (default 2048), the device generates the keys.

Enable the SFTP server and configure VTY user interface:

[HTTP-Server] sftp server enable

[HTTP-Server] user-interface vty 0 4

[HTTP-Server-ui-vty0-4] authentication-mode aaa

[HTTP-Server-ui-vty0-4] protocol inbound all

Configure SSH user client001 with password authentication, SFTP service type, and home directory:

[HTTP-Server] ssh user client001 authentication-type password

[HTTP-Server] ssh user client001 service-type sftp

[HTTP-Server] ssh user client001 sftp-directory flash:

Create the local user in the AAA domain, set password, privilege level, and service type:

[HTTP-Server-aaa] local-user client001 password irreversible-cipher Helloworld@6789

[HTTP-Server-aaa] local-user client001 privilege level 15

[HTTP-Server-aaa] local-user client001 service-type ssh

From a terminal, use OpenSSH to connect via SFTP, confirm the host key, and upload the web package:

C:\Documents and Settings\Administrator> sftp [email protected]

Connecting to 192.168.0.1...

RSA key fingerprint is 46:b2:8a:52:88:42:41:d4:af:8f:4a:41:d9:b8:4f:ee.

Are you sure you want to continue connecting (yes/no)? yes

sftp> put webtest.7z

Verify the uploaded file on the switch with dir . If the file size differs, re‑upload.

Load the web file into the HTTP server:

[HTTP-Server] http server load webtest.7z

Enable HTTPS and HTTP services:

[HTTP-Server] http secure-server enable

[HTTP-Server] http server enable

Create an HTTP user with admin privileges:

[HTTP-Server-aaa] local-user admin password irreversible-cipher Helloworld@6789

[HTTP-Server-aaa] local-user admin privilege level 15

[HTTP-Server-aaa] local-user admin service-type http

Log in to the web management interface by opening a browser and navigating to http://192.168.0.1 , then entering the HTTP username, verification code, and password.

Check the configuration result on the HTTP server:

[HTTP-Server] display http server

HTTP Server Status              : enabled

HTTP Server Port                : 80(80)

Current Online Users            : 1

Maximum Users Allowed           : 5

HTTP Secure-server Status       : enabled

HTTP Secure-server Port         : 443(443)

HTTP SSL Policy                 : Default