How to configure a Huawei industrial switch

Huawei industrial switches can be configured for management, VLANs, DHCP, stacking, and security using S series configuration procedures and best practices.

Initial Setup and Management Access

1. Power on the switch and connect your PC via console, Mini USB, or USB-to-serial cable depending on the model (e.g., S6720-HI uses standard console ports) .
2. Log in using the default credentials and check the software version with the display version command to ensure compatibility with configuration guides .
3. Assign a management IP to the switch for in-band management. For modular switches, use Ethernet0/0/0; for fixed switches, use MEth0/0/1. Example: interface VLANIF1 followed by ip address 10.10.1.1 255.255.255.0 .

VLAN and Layer 3 Configuration

1. Create VLANs to segment network traffic:

   vlan batch 10 20interface VLANIF10ip address 10.10.10.1 255.255.255.0interface VLANIF20ip address 10.10.20.1 255.255.255.0

2. Configure inter-VLAN routing on the core switch to allow communication between departments .
3. Set port types: Access ports for end devices, trunk or hybrid ports for uplinks to other switches .

DHCP and IP Address Allocation

1. Enable DHCP server on the core switch:

   dhcp enableip pool 10network 10.10.10.0 24gateway-list 10.10.10.1ip pool 20network 10.10.20.0 24gateway-list 10.10.20.1

2. Configure IPSG on access switches to prevent unauthorized IP changes by intranet users .

Stack Deployment Best Practices

1. Select compatible switch models and determine the number of stack members based on network size .
2. Choose stack mode and ports carefully; ensure proper cabling and redundancy to avoid single points of failure .
3. Assign stack IDs and priorities to control master election and failover behavior .
4. Synchronize MAC addresses and routing tables across stack members for consistent network operation .

Security and Monitoring

1. Enable security features such as abnormal traffic detection, Encrypted Communications Analytics (ECA), and threat deception on S6720-HI series switches .
2. Integrate with CampusInsight or eSight for telemetry, real-time monitoring, and fault localization .
3. Configure QoS, multicast, and mirroring as needed for industrial or campus network traffic management .

Uplink and Internet Access

1. Configure uplinks to the egress router with public IPs and default routes:

   interface GigabitEthernet0/0/1ip address 1.1.1.2 255.255.255.252ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

2. Verify connectivity from intranet devices to the Internet and between VLANs . By following these steps, Huawei industrial switches can be quickly deployed and configured for reliable, segmented, and secure network operation, with support for stacking, redundancy, and advanced monitoring.