Master Huawei Switch Configuration: From VLAN Setup to Link Aggregation

1. Basic Configuration Commands

1. User mode – After logging in, you enter user mode, shown with angle brackets <>, where only a few view‑only commands are allowed.

2. View mode – Enter system-view or sys to switch to view mode, indicated by square brackets [], where you can execute global configuration commands.

3. Rename Switch

To suppress the repetitive change‑notification prompts after each configuration, use the command shown in the following screenshot.

4. Enter Interface

5. Exit Port

2. Create VLAN and Assign Ports

1. Create VLAN

Single VLAN creation:

Batch VLAN creation:

2. Change Port Link Type

Huawei switches default ports to hybrid or auto . To add a port to a VLAN, change its link-type to access (single VLAN) or trunk (multiple VLANs). Example screenshot:

Why choose access type? Because the PC connects to the switch and should communicate only with the upstream switch, thus belonging to a single VLAN.

Ethernet port link types: Access – port belongs to one VLAN, used for end‑user connections. Trunk – port can belong to multiple VLANs, used for switch‑to‑switch links. Hybrid – port can belong to multiple VLANs; unlike trunk, it can forward untagged frames.

Trunk ports are used for inter‑switch links; PVID must match.

Access ports belong to a single VLAN.

Large enterprise LANs should avoid using VLAN 1; trunk ports should not carry VLAN 1.

3. Add Port to VLAN

Single‑port operation is shown in the screenshot below. For many ports, batch operations are recommended.

4. Batch Port Operations – Port Groups

Create a port group, add the target ports, then change the type and assign the VLAN in one step.

5. View VLAN

Global VLAN information:

Port‑to‑VLAN mapping:

3. First Login to Switch or Router

1. Factory Reset – Pay attention to the Y/N prompts.

2. Set New Password – Default credentials are admin / [email protected].

3. First Save Configuration – Provide a filename or press Enter to accept the default.

4. Set Date and Time

5. Enable Required Services – Enable Telnet, STP, HTTP, etc.

6. Configure VTY and Telnet Login

7. Create a User for Web Login

Because the console initially requires username/password, you cannot delete the local admin user directly. Switch to <> view, save, exit, and re‑login. After changing console authentication to password‑only, you can delete admin and recreate it with desired privileges.

For newer firmware, Telnet must use AAA authentication; create a user with service-type telnet as shown.

8. Disable Configuration‑Change Alerts

After issuing configuration commands, the device may display change‑alert messages (not errors). Use the command shown to suppress them.

4. Configure Link Aggregation

The command creates an aggregation (eth‑trunk) interface and sets its properties.

Port G0/0/25 is added to eth-trunk 1; additional ports can be added similarly.

5. Switch DHCP Configuration

Enable DHCP, define an address pool, and apply it.

6. Enable Flow Control to Restrict Inter‑Network Traffic

Used to prevent guest network from communicating with office or finance networks.

Pay attention to source and destination address reverse masks.