huawei S3300 switch – access methods

Huawei S3300 switchHow to log into Huawei S3300 switch? It is very simple. Which method you will chose depends on what you want to do on this device. If you want to upload file to or download it from the switch, use FTP or SFTP. If you want to configure the switch, use telnet, SSH or HTTP methods. Each time you can access the switch using console port,  locally or remotely, in case a console server is configured.

telnet S3300

telnet server enable

aaa
local-user labnario password cipher &EU15O"Q3/;Q=^Q`MAF4
local-user labnario privilege level 15
local-user labnario service-type telnet

user-interface vty 0 4
 authentication-mode aaa
 protocol inbound all

By default telnet server is enabled on S3300 switch. As this is default setting, it is not displayed in switch’s configuration. VTY lines use local user configured, to let you access the switch. Protocol inbound all command informs you that you can use both protocols, telnet and SSH.

The second method of using telnet is to configure authentication-mode for VTY as none or password. None means access without login and password, authentication-mode as password means you have to know password to access the switch. Additionally you should configure privilege level and password for VTY lines. By default user privilege level is set to 0.

user-interface vty 0 4
 authentication-mode none
 user privilege level 15
 protocol inbound all

user-interface vty 0 4
 authentication-mode password
 user privilege level 15
 set authentication password cipher &EU15O"Q3/;Q=^Q`MAF4
 protocol inbound all

ssh S3300

aaa
local-user labnario password cipher &EU15O"Q3/;Q=^Q`MAF4
local-user labnario privilege level 15
local-user labnario service-type ssh

stelnet server enable
ssh user labnario
ssh user labnario authentication-type password
ssh user labnario service-type all

user-interface vty 0 4
 authentication-mode aaa
 protocol inbound all

In this case, SSH uses aaa settings, to access the device. For proper SSH configuration it is required to create RSA key. You can do this using the following command:

rsa local-key-pair create
The key name will be: labnario_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
       It will take a few minutes.
Input the bits in the modulus[default = 512]:
Generating keys...
.............++++++++++++
..........++++++++++++
................++++++++
....................................++++++++

You can display RSA key by display rsa local-key-pair public command. Besides password, it is also possible to use RSA key or both RSA key and password, for SSH connection.

S3300 as FTP server

FTP server enable
local-user labnario password cipher &EU15O"Q3/;Q=^Q`MAF4
local-user labnario privilege level 15
local-user labnario ftp-directory flash:
local-user labnario service-type ftp

You can also configure secure FTP (sFTP) adding the following command:

sftp server enable

Access S3300 by HTTP

For Huawei S3300 switch there is also possible to use HTTP to access it. To do this, you have to load necessary file, delivered together with software. You can display all files, stored in flash, using dir command:

dir
Directory of flash:/

Idx  Attr   Size(Byte)  Date        Time      FileName
0  -rw-    8,124,916  Jan 01 2008 02:14:24  S3328-V100R005C00SPC100.cc
1  -rw-          869  Jan 01 2008 00:01:21  private-data.txt
2  -rw-          396  Jan 01 2008 00:12:06  hostkey
3  -rw-          120  Aug 04 2011 08:49:23  vrpcfg.zip
4  -rw-          540  Jan 01 2008 00:12:11  serverkey
5  -rw-    1,087,883  Jan 01 2008 00:36:13  s3328-v100r005.001.web.zip

14,632 KB total (5,580 KB free)

HTTP access configuration:

http server load s3328-v100r005.001.web.zip
Info: Load web file successfully.
http server enable
Info: Starting the HTTP server successfully.

aaa
local-user labnario password cipher &EU15O"Q3/;Q=^Q`MAF4
local-user labnario privilege level 15
local-user labnario service-type http

Finally use IP address configured on the switch for HTTP access:

vlan 100

interface Ethernet0/0/1
 port link-type access
 port default vlan 100

interface Vlanif100
 ip address 172.16.1.2 255.255.0.0

HTTP access to Huawei S3300 switch

Download as PDF

Advertisements

15 thoughts on “huawei S3300 switch – access methods

  1. labnario Post author

    Yes, S3300 and S5300 belong to the same switch family (the same software, similar hardware). Sometimes you can find some small differences, comparing to older software versions. But if you use the same software version on both switches, CLI is the same.

    Reply
  2. lappa

    hi labnario, how are u ? How can I configure to Meth port for access to switch? I Cant config for access vlan on my switch. Thank u

    Reply
    1. labnario Post author

      Hi,

      I’m fine, thanks. Meth port is L3 port. You cannot add it to VLAN. It is for outbound management. The easiest way to check it is to connect PC directly to this port, configure IP addresses and check ping between switch and PC.

      Reply
  3. c

    What’s the differce between display interface brief and display ip interface brief?
    i have an 8FE card added to the router in eNSP, and i can not see them using display ip interface, only with display interface brief. also i i use interface0/0/0 and get into interface view, i can not use ip address command.

    Reply
    1. labnario Post author

      Display interface brief shows only interfaces (without IP address), it does not matter if there are L2 or L3.
      Display ip interface brief shows only L3 interfaces with IP addresses, does not display interfaces without IP addresses.
      Probably you added a card with L2 interfaces. It is not possible to configure IP address on L2 interfaces. Instead you have to configure VLANs and interface vlanif (L3) and then to add IP address to them.

      Reply
  4. steven

    Hi labnario, thanks for u posting. I have huawei S3300 series in my client but i’m not found s3328-v100r005.001.web.zip file in flash. Can u send me file or give me link where i can download a file? thank u.

    Reply

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s