To enable access on a Huawei S5700 switch and connect it to a router, configure the management IP, user credentials, VLANs, and uplink interfaces to ensure internal and external network connectivity.

Initial Access and Management Setup

1. Console Access: Connect your PC to the S5700 switch using a console cable (USB-C or Mini USB) and terminal software like PuTTY. Set the serial parameters according to the switch documentation .
2. Login and Password: On first boot, the default user may be admin with password [email protected]. Change this immediately to a secure password using the command:

   [HUAWEI-aaa] local-user <username> password cipher <new_password> SHA2 encryption is recommended for administrator passwords .

3. Management IP: Assign a management IP to the switch to allow remote access:

   interface Vlanif 1[HUAWEI-Vlanif1] ip address 10.10.1.1 255.255.255.0 This IP is used for WebUI or SNMP management .

Connecting to a Router

1. Uplink Interface: Connect one of the S5700's uplink ports (e.g., GE0/0/1) to the router's interface. Assign an IP address to the router interface in the same subnet as the switch's VLAN interface:

   Router IP: 1.1.1.1/30Switch uplink IP: 1.1.1.2/30

2. Default Gateway: Configure the switch to use the router as its default gateway for external network access:

   ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

VLAN and Access Port Configuration

1. Create VLANs: Define VLANs for different user groups or departments:

   vlan 10[HUAWEI-vlan10] quit

2. Assign Ports to VLANs: Configure access ports for end devices:

   interface GigabitEthernet0/0/2[HUAWEI-GigabitEthernet0/0/2] port link-type access[HUAWEI-GigabitEthernet0/0/2] port default vlan 10

WebUI Access

1. After configuring the management IP, connect a PC to the switch network and open a browser to http://<management_IP>.
2. Login with the configured credentials to manage the switch via WebUI .

Security and Best Practices

• Use strong passwords and avoid default credentials.
• Enable AAA authentication for user access control.
• Consider port security, 802.1X authentication, and ACLs to restrict unauthorized access .
• For high availability, S5700 supports iStack to combine multiple switches into a single logical unit .

Summary

By configuring the management IP, secure user credentials, VLANs, and uplink to a router, the S5700 switch can serve as an access or core switch in a campus network. Devices connected to the switch can communicate internally and access external networks through the router, while administrators can manage the switch via console or WebUI. Proper security measures ensure controlled and reliable access.