How to manage Huawei firewall device

console initialization

 Huawei firewall default username and password admin Admin @ 123 password can be changed to @ 123 Huawei
 routers: ADMIN Admin @ HUAWEI
 switch: ADMIN [email protected]
 AC controller: ADMIN [email protected]
 notebook how to console debugging network equipment

Early cable CONSOLE

 early console RJ45 to the DB9 cable (serial communication interface RS232) serial line (typically a network device which comes out of the box with cables which will)
 Console as crystal head end of the cable, the other end of the serial port RJ45 connector. Console port RJ45 connector RJ45 connector for the device, the serial cable connects the other end of the desktop the PC
 the RS-232 standard interface (also known as EIA RS-232) is one of the common serial communication interface standard, which is by the electronic industries Association (EIA) joint Bell systems, modem manufacturers and computer terminal manufacturers in 1970 to formulate
 RS-232 specified in the standard transfer rate has 50b / s, 75b / s, 110b / s, 150b / s , 300b / s, 600b / s , 1200b / s, 2400b / s, 4800b / s, 9600b / s, 19200b / s, it can be flexibly adapted to different rates of devices. For slow peripherals may select a lower transmission rate: Conversely, a higher transfer rate may be selected
 RJ45 plug yet RJ45 crystal head (RJ45 Modular Plug), for terminating the data cable to achieve equipment, with and change connection between the wire rack module. There are two types of common RJ45 interface: for Ethernet card, Ethernet router interface
that is a serial communication port  COM port (cluster communication port), referred to the serial port

Mid-CONSOLE cable

 is to be converted into a USB port and then connect to a console line to debug (due to the laptop no serial port, so we need an additional cable to the adapter is USB-RS232-RS232 cable need to install USB drivers)

Cable late CONSOLE

 most popular console line, the serial chip is built in so that the inside male USB A entire line as a whole, convenient to use (generally without loading drive can be used directly)

How do I know the USB to serial COM port number it?

This property --- --- PC Manager --- --- Universal Serial Bus Controller appears COM3

Connecting a network device on a computer with the tool

1) HyperTerminal like windows XP system comes with this functionality
2) puTTY terminal software
3) Xshell terminal software
4) SecureCRT terminal software

web login

WEB login process:
Step one: there is a route (whether oral or management service interface)
Step two: Open the interface HTTP / HTTPS management functions
Third step: login user name and password (AAA)
Step four: Test log in

By WEB management interface login

 device by default GigabitEthernet0 / 0/0 interface to log in to the Web interface
to access http://192.168.0.1 in the PC browser , enter the login page of the Web interface

premise: You must reach the general network management interfaces for network management interface G0 / 0/0

interface GigabitEthernet0/0/0
 alias GE0/MGMT
 service-manage http permit
 service-manage https permit 

Browser and enter:

http://    192.168.0.1  ----------利用HTTP重定向到HTTPS的功能
https://   192.168.0.1:8443  ------默认的端口

Graphical not amend, modify only CLI

[FW1]web-manager  security enable port 6666

Note: It is recommended not to modify, if modifications to undo out, and then modify the configuration of the port

undo web-manager security  enable  port  8443

Direct modification

web-manager security  enable  port  8448 

Login via service interface WEB

The first step: there is a route (whether oral or management service interface)
Step two: Open the interface HTTP / HTTPS management function


service interfaces

interface GigabitEthernet0/0/1
 ip address 10.1.1.10 255.255.255.0 
 service-manage http permit
 service-manage https permit

The third step: login user name and password (AAA)

aaa
 manager-user key 
  password cipher Admin@123
  service-type web 
  level 15 

Step four: Test Log

telnet

telnet login process
The first step: the route up to
the second step: turn on the device telnet function
Step three: Open telnet interface management functions
Step four: Manage user opens a telnet service
Step five: Call AAA
Step Six: Login test
 NGFW is not allowed by default telnet login, you need to configure the telnet service, you need to log in to the device through other means telnet service configuration

configuration considerations:
Step one: open Telnet.

telnet server enable 

Step two: Open the telnet service management user (AAA)

 manager-user key
  password cipher Huawei@123
  service-type  telnet 
  level 15 

Step three: Open Telent interface management functions

interface GigabitEthernet0/0/1
 ip address 10.1.1.10 255.255.255.0 
 service-manage telnet permit

Step four: Call AAA

user-interface vty 0 4
 authentication-mode aaa

Step Five: Sign test

SSH

STelnet login process
The first step: the route up to
the second step: turn on the device's SSH function
Step three: Open SSH interface management functions
Step four: Manage user opens the SSH service
Step five: Call AAA
Step Six: Login test
configuration roadmap
Step one: open STelnet function

stelnet server enable 

Step two: Open the telnet service management user (AAA)

 manager-user key
  password cipher Huawei@123
  service-type  ssh
  level 15 

Step three: Open Telent interface management functions

interface GigabitEthernet0/0/1
 ip address 10.1.1.10 255.255.255.0 
 service-manage ssh permit

Step four: Call AAA

user-interface vty 0 4
 authentication-mode aaa

Step Five: Sign test