Configuration of Huawei Core Layer Switch

Huawei core layer switches are configured by setting up VLANs, VPN instances, interfaces, and routing protocols such as OSPF to ensure connectivity between user networks and egress networks.Initial Access and ManagementConnect to the core switch via SSH or console port and log in with administrative credentials. Configure a management IP address on a VLAN interface (VLANIF) to allow remote management and monitoring . Set up user accounts with appropriate access levels and enable SSH or Telnet services for secure management .VLAN and Interface ConfigurationCreate VLANs for interconnection with BRASs, firewalls, and other switches:CodeCopy vlan batch 10 20 30 Assign interfaces to VLANs:CodeCopy interface GigabitEthernet0/0/1[Huawei-GigabitEthernet0/0/1] port link-type access[Huawei-GigabitEthernet0/0/1] port default vlan 10 Configure VLANIF interfaces and bind them to a VPN instance to isolate traffic:CodeCopy ip vpn-instance vpn1 interface Vlanif10[Huawei-Vlanif10] ip address 192.168.10.1 255.255.255.0[Huawei-Vlanif10] vpn-instance vpn1 Interconnection with BRASs and FirewallsCreate interconnection VLANs for each device type.Bind VLANIF interfaces to the VPN instance to separate public network routes from firewall return routes .Ensure proper IP addressing for each interface connecting to BRASs and firewalls.Routing ConfigurationEnable OSPF for dynamic routing between the core switch and connected devices:CodeCopy ospf 1[Huawei-ospf-1] area 0.0.0.0[Huawei-ospf-1-area-0.0.0.0] network 192.168.10.0 0.0.0.255 Verify OSPF neighbors and routes using:CodeCopydisplay ospf peerdisplay ip routing-table Link Aggregation (Optional)Configure Eth-Trunks for uplinks to other switches or routers to increase bandwidth and provide redundancy:CodeCopy interface Eth-Trunk1[Huawei-Eth-Trunk1] mode lacp[Huawei-Eth-Trunk1] trunkport GigabitEthernet0/0/1[Huawei-Eth-Trunk1] trunkport GigabitEthernet0/0/2 Check Eth-Trunk status with:CodeCopydisplay eth-trunk 1 Verification and Best PracticesUse display vlan and display interface to verify VLAN and interface assignments.Test connectivity to BRASs, firewalls, and other core devices.Save configuration to prevent loss after reboot:CodeCopysave By following these steps, the Huawei core layer switch will be properly configured for inter-VLAN routing, secure VPN separation, and dynamic routing, ensuring reliable connectivity across the enterprise network .