![\"\"](\"https:\/\/www.fibermall.com\/blog\/wp-content\/uploads\/2023\/05\/A-switch.png\")
<\/p>\nTo build a network, routers and switches are indispensable, but many network workers are so immersed at work that they are limited. Now imagine a scenario where you are having an interviewing, and the interviewer asks you a question: “What configurations do routers and switches need in a complete project?”\u00a0It’s most likely that you can’t blurt it out for you need some time to figure it out. The reason may be that you always execute the process without thinking about the logic behind it.<\/p>\n
<\/p>\n
A switch<\/span><\/strong><\/p>\n 1. Configure management address<\/strong><\/span><\/p>\n Each switch needs to be configured with a management address to facilitate later remote maintenance.<\/p>\n All switches and other network devices in the network can use a management VLAN, such as VLAN 400. The IP addresses of the devices are planned uniformly throughout the network and are isolated from the office network and service network.<\/p>\n Let’s take Ruijie switch configuration for example:<\/strong><\/p>\n How to configue\uff1a<\/p>\n Remotely manage the device through the web management function. For Ruijie switch, there are generally four key points to configure web login:<\/p>\n (1) First select the Console method to log in to the switch<\/p>\n Login switch<\/strong><\/span><\/p>\n (2) The web function needs to be enabled<\/p>\n (3) The default password for web login is the enable password, and the user name can be arbitrary or configured to log in with a specific user name and password.<\/p>\n (4) If the PC and the switch are not in the same network segment, you need to configure the default gateway of the switch.<\/p>\n 01. Configuration steps\uff1a<\/p>\n (1) Enable the web service function of the switch<\/p>\n Ruijie#configure terminal<\/p>\n Ruijie(config)#enable service web-server<\/p>\n (2) Configure the management IP address of the switch<\/p>\n Ruijie(config)#interface vlan 1 \/\/Enter vlan 1 interface<\/p>\n Ruijie(config-if) # ip address 192.168.1.1 255.255.255.0 \/\/<\/p>\n Set management ip 192.168.1.1 for vlan 1 interface<\/p>\n Ruijie(config-if) #exit \/\/exit<\/p>\n (3) Use the local user name and password to log in when configuring the web interface<\/p>\n Ruijie(config-if)#exit<\/p>\n Ruijie(config)#username admin password ruijie \/\/Configure the user name and password for web interface login<\/p>\n Ruijie(config)#username admin privilege 15 \/\/The level of authority for configuring the user name logged in on the web interface is 15, and the level of authority for the default user name and password is 1, and the level of authority for web management needs to be 15.<\/p>\n Ruijie (config)#ip http authentication local \/\/Configure web login to use local user name and password.<\/p>\n Ruijie(config)#end<\/p>\n Ruijie#write<\/p>\n Log in to the switch with WEB, open the browser of the computer, enter http:\/\/192.168.1.1, and press Enter to log in.<\/p>\n 2. Configure remote login\uff1a<\/span><\/strong><\/p>\n In many cases, the switch is located in the computer room, and it is necessary to manage the switch by configuring remote login to monitor the working status of the switch.<\/p>\n Commonly used remote login methods include telnet and SSH. Compared with the plaintext method of telnent, SSH is more secure;<\/p>\n After logging in to the switch, there are two authentication methods: password authentication and aaa authentication. The aaa authentication can carefully manage the authority and choose the appropriate method according to the environment of the intranet.<\/p>\n 3. Configure VLAN data<\/span><\/strong><\/p>\n For an enterprise network, it is usually necessary to divide different VLANs according to parts to isolate broadcast domains and networks.<\/p>\n First configure the global VLAN of the switch, assign different VLANs to the port according to the terminal connected to the port, and configure the port type as access mode;<\/p>\n Configure the interconnection port between the switches as trunk mode, and allow all VLANs to pass through to realize the interconnection within the LAN.<\/p>\n Interconnection within the LAN<\/span><\/strong><\/p>\n Taking Huawei switches as an example to configure basic vlan data:<\/p>\n 01. Create vlan<\/p>\n <Quidway> \/\/User view, that is, run commands in Quidway mode.<\/p>\n <Quidway>system-view \/\/Enter configuration view<\/p>\n [Quidway] vlan 10 \/\/Create vlan 10 and enter vlan10 configuration view, if vlan10 exists, directly enter vlan10 configuration view<\/p>\n [Quidway-vlan10] quit \/\/Return to configuration view<\/p>\n [ Quidway] vlan 100 \/\/Create vlan 100 and enter vlan100 configuration view, if vlan10 exists, directly enter vlan100 configuration view.<\/p>\n [Quidway-vlan100] quit \/\/Back to configuration view.<\/p>\n <\/p>\n 02. Add port to vlan<\/p>\n![\"\"](\"https:\/\/www.fibermall.com\/blog\/wp-content\/uploads\/2023\/05\/Login-switch.png\")
<\/p>\n![\"Interconnection](\"https:\/\/www.fibermall.com\/blog\/wp-content\/uploads\/2023\/05\/Interconnection-within-the-LAN.png\")
<\/p>\n
![\"switch](\"https:\/\/www.fibermall.com\/blog\/wp-content\/uploads\/2023\/05\/switch-configuration.png\")
<\/p>\n![\"An](\"https:\/\/www.fibermall.com\/blog\/wp-content\/uploads\/2023\/05\/An-example-of-Topology.png\")
<\/p>\n