Switch Huawei

Usuário

[sys-view] aaa
[sys-view-aaa] local-user admin service-type ssh http terminal

SSH

[sys-view] rsa local-key-pair create
[sys-view] stelnet server enable
[sys-view] ssh user admin
[sys-view] ssh user admin authentication-type password
[sys-view] ssh user admin service-type stelnet
[sys-view] user-interface vty 0 4
[sys-view] authentication-mode aaa
[sys-view] protocol inbound ssh

NTP

[sys-view] ntp-service server disable
[sys-view] ntp-service ipv6 server disable
[sys-view] ntp-service unicast-server 200.189.40.8
[sys-view] ntp-service unicast-server 200.160.0.8

Timezone

[sys-view] clock timezone Brasilia minus 03:00:00

IPv6

Habilitar configuração global de IPv6

[sys-view] ipv6

Gateway

[sys-view] ip route-static 0.0.0.0 0.0.0.0 192.168.1.1
[sys-view] ipv6 route-static :: 0 2804:0:24B0:XXXX::1

VLAN

[sys-view] vlan 2
[sys-view] name TI
[sys-view-vlan2] description TI

Interface em modo de acesso

[sys-view] interface gigabitethernet 0/0/2
[sys-view-GigabitEthernet0/0/2] port link-type access
[sys-view-GigabitEthernet0/0/2] port access vlan 2
[sys-view-GigabitEthernet0/0/2] port description desktop

Interface em modo trunk

[sys-view] interface gigabitethernet 0/0/24
[sys-view-GigabitEthernet0/0/24] port link-type trunk
[sys-view-GigabitEthernet0/0/24] undo port trunk allow-pass vlan 1
[sys-view-GigabitEthernet1/0/24] port trunk allow-pass vlan 2
[sys-view-GigabitEthernet1/0/24] port description switch

LOG

[sys-view] info-center channel 6 name graylog
[sys-view] info-center source INFO channel 6 log level notification
[sys-view] info-center source AAA channel 6 log level notification
[sys-view] info-center source ETH channel 6 log level warning
[sys-view] info-center source L2IF channel 6 log level warning
[sys-view] info-center source TFTP channel 6 log level error
[sys-view] info-center loghost source Vlanif25
[sys-view] info-center loghost ipv6 2804:0:24B0:XXXX::XXXX channel 6 facility local2 log-counter disable port 5514
[sys-view] info-center local log-counter disable

Outros

igmp-snooping enable smart-upgrade web-prompt disable

POE

poe power-management manual slot 0

Backup Auto das Configurações

set save-configuration interval 60 set save-configuration backup-to-server server 192.168.1.1 transport-type tftp

SNMP

snmp-agent snmp-agent community read cipher NOME_COMUNITY snmp-agent sys-info version v2c undo snmp-agent sys-info version v3

ACL

acl name acl-ssh 3999

description Gerenciamento
rule 5 permit tcp source XXX.XXX.XXX.XXX 0 destination-port eq 22
rule 10 permit tcp source XXX.XXX.XXX.XXX 0 destination-port eq 22