Monday, June 15, 2020

What If I Forget the Huawei S9700 Password for Console Port Login?

When you forget Huawei S9700 password for logging in through the console port, use either of the following two methods to set a new password.


Logging In to the Device Through STelnet/Telnet to Set a New Password

It is recommended that you use STelnet V2 to log in to the device.

Ensure that you have an STelnet/Telnet account and administrator rights. The following uses the command lines and outputs of logging in to the device using STelnet as an example. After logging in to the device through STelnet, perform the following operations.

# Take password authentication as an example. Set the password to Huawei@123.

<HUAWEI> system-view
[HUAWEI] user-interface console 0
[HUAWEI-ui-console0] authentication-mode password
[HUAWEI-ui-console0] set authentication password cipher Huawei@123
[HUAWEI-ui-console0] return
<HUAWEI> save

# Take AAA authentication as an example. Set the user name and password to admin123 and Huawei@123, respectively.

<HUAWEI> system-view
[HUAWEI] user-interface console 0
[HUAWEI-ui-console0] authentication-mode aaa
[HUAWEI-ui-console0] quit
[HUAWEI] aaa
[HUAWEI-aaa] local-user admin123 password irreversible-cipher Huawei@123
[HUAWEI-aaa] local-user admin123 privilege level 15
[HUAWEI-aaa] local-user admin123 service-type terminal
[HUAWEI-aaa] return
<HUAWEI> save

Clearing the Lost Password Using the BootROM/BootLoad Menu

You can use the BootROM/BootLoad menu of the device to clear the lost password for console port login. After starting Huawei switch, set a new password and save your configuration. Perform the following steps.

  1. Connect the terminal to the console port of the device and restart the device. When the following message is displayed, press Ctrl+B and enter the BootROM/BootLoad password to enter the BootROM/BootLoad menu.

    Press Ctrl+B to enter boot menu ...  1 
    
    Password:       //Enter the BootROM password.
  2. Select Clear password for console user on the BootROM/BootLoad menu to clear the password for console port login.
  3. Select Boot with default mode on the BootROM/BootLoad menu to start the device as prompted.
  4. After the device is started, log in through the console port. Authentication is not required when you log in. Set a password as prompted after login.
  5. You can set an authentication mode and password for the console user interface according to service requirements.

Monday, June 1, 2020

How to Configure Huawei Switch Common VLAN Mapping?

Configuring 1 to 1 VLAN Mapping

1 to 1 VLAN mapping allows the switch to map the VLAN ID of packets to an S-VLAN ID.

For example, configure the switch to map VLAN 2 in packets entering GE0/0/1 to VLAN 200.

<HUAWEI> system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type trunk  //Configure the interface as a trunk interface. VLAN mapping can only be configured on a trunk or hybrid interface.

[HUAWEI-GigabitEthernet0/0/1] qinq vlan-translation enable  //On a fixed device, VLAN translation must be enabled first. This configuration is not required on a modular device.

[HUAWEI-GigabitEthernet0/0/1] port vlan-mapping vlan 2 map-vlan 200

Configuring N to 1 VLAN Mapping

N to 1 VLAN mapping allows the switch to map a range of VLAN IDs to an S-VLAN ID.

For example, configure the switch to map VLANs 3, 4, 5, and 6 in packets entering GE0/0/1 to VLAN 200.

<HUAWEI> system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type trunk  //Configure the interface as a trunk interface. VLAN mapping can only be configured on a trunk or hybrid interface.

[HUAWEI-GigabitEthernet0/0/1] qinq vlan-translation enable  //On a fixed device, VLAN translation must be enabled first. This configuration is not required on a modular device.

[HUAWEI-GigabitEthernet0/0/1] port vlan-mapping vlan 3 to 6 map-vlan 200

 NOTE:

This configuration is not supported by Huawei S5720HI, S5730HI, and S6720HI.

Configuring 2 to 1 VLAN Mapping

When an interface configured with 2 to 1 VLAN mapping receives a double-tagged packet, it maps the outer tag of the packet to the S-VLAN tag and transparently transmits the inner tag as the data.

For example, configure the switch to map the outer VLAN ID of 8 and inner VLAN ID of 7 in packets entering GE0/0/1 to the outer VLAN ID of 200 and to retain the inner VLAN ID.

<HUAWEI> system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type trunk  //Configure the interface as a trunk interface. VLAN mapping can only be configured on a trunk or hybrid interface.

[HUAWEI-GigabitEthernet0/0/1] qinq vlan-translation enable  //On a fixed device, VLAN translation must be enabled first. This configuration is not required on a modular device.

[HUAWEI-GigabitEthernet0/0/1] port vlan-mapping vlan 8 inner-vlan 7 map-vlan 200

 NOTE:

Only the S1720X, S1720X-E, S3700HI, S5700EI, S5700HI, S5710EI, S5710HI, S5720EI, S5720HI, S5730HI, S5730S-EI, S5730SI, S6700EI, S6720EI, S6720HI, S6720LI, S6720S-EI, S6720S-LI, S6720S-SI, and S6720SI of fixed devices support this configuration. The modular device supports this configuration.

Configuring 2 to 2 VLAN Mapping

When an interface configured with 2 to 2 VLAN mapping receives a double-tagged packet, it maps double tags of the packet to S-VLAN tags.

For example, configure the switch to map the outer VLAN ID of 11 and inner VLAN ID of 10 in packets entering GE0/0/1 to the outer VLAN ID of 200 and inner VLAN ID of 201.

<HUAWEI> system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type trunk  //Configure the interface as a trunk interface. VLAN mapping can only be configured on a trunk or hybrid interface.

[HUAWEI-GigabitEthernet0/0/1] qinq vlan-translation enable  //On a fixed device, VLAN translation must be enabled first. This configuration is not required on a modular device.

[HUAWEI-GigabitEthernet0/0/1] port vlan-mapping vlan 11 inner-vlan 10 map-vlan 200 map-inner-vlan 201

 NOTE:

Only the S1720X, S1720X-E, S5720EI, S5720HI, S5730HI, S5730S-EI, S5730SI, S6720EI, S6720HI, S6720LI, S6720S-EI, S6720S-LI, S6720S-SI, and S6720SI of fixed devices support this configuration. The modular device supports this configuration.