Got it

CE6855 MEth

Created: Jun 21, 2021 15:00:27Latest reply: Jul 12, 2021 16:04:37 355 7 1 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi Everyone,


I have a CE 6851 Switch. When I connect switch and pc via Meth interface. I configure  ip address of switch and pc. I'am pingging between two of them. But when I connect to meth interface office network. I can't ping any devices on network. 


Could you please help me ?

Featured Answers

Recommended answer

DDSN
Admin Created Jun 21, 2021 15:06:37

Hi Murat87,
A Meth interface is a management interface. Generally, a Meth interface is not used as a service interface. By default, traffic isolation between the service plane and management plane is enabled. That is, IP packets received from the service interface are not forwarded through the management interface, and IP packets whose destination address is the management interface address cannot access the device. Therefore, the IP address cannot be pinged. You can run the management-plane isolate disable command to disable the isolation function.

I hope it helps!

View more
  • x
  • convention:

All Answers
DDSN
DDSN Admin Created Jun 21, 2021 15:01:44

Hi Murat87,
Please wait patiently. Our engineers are looking for answers to your questions.
View more
  • x
  • convention:

DDSN
DDSN Admin Created Jun 21, 2021 15:06:37

Hi Murat87,
A Meth interface is a management interface. Generally, a Meth interface is not used as a service interface. By default, traffic isolation between the service plane and management plane is enabled. That is, IP packets received from the service interface are not forwarded through the management interface, and IP packets whose destination address is the management interface address cannot access the device. Therefore, the IP address cannot be pinged. You can run the management-plane isolate disable command to disable the isolation function.

I hope it helps!

View more
  • x
  • convention:

OK but I can't pinging, I want to manage switch with ssh on my office network. Can I do it with management interface ?
View more
  • x
  • convention:

hemin88
hemin88 Moderator Author Created Jun 22, 2021 12:22:58

Dear @Murat87


Please use the following steps "Change the red highlighted text as per your requirement":

Configure the management interface.

 

<HUAWEI> system-view
[~HUAWEI] user-interface maximum-vty 21
[~HUAWEI] user-interface vty 0 20
[*HUAWEI-hi-vty0-20] idle-timeout 0
[*HUAWEI-ui-vty0-20] authentication-mode aaa
[*HUAWEI-ui-vty0-20] protocol inbound all
[*HUAWEI-ui-vty0-20] commit
[~HUAWEI-ui-vty0-20] quit

[~HUAWEI] interface meth 0/0/0
[*HUAWEI-MEth0/0/0] ip address 192.168.100.254 24
[*HUAWEI-MEth0/0/0] commit
[~HUAWEI-MEth0/0/0] quit

 

Configure SSH for login.

 

[~HUAWEI] aaa
[~HUAWEI-aaa] local
[~HUAWEI-aaa] undo local-user policy security-enhance
[*HUAWEI-aaa] commit
[~HUAWEI-aaa] local-user Murat87 password irreversible-cipher 
[*HUAWEI-aaa] local-user Murat87 service-type telnet ssh
[*HUAWEI-aaa] local-user Murat87 level 3
[*HUAWEI-aaa] local-user  Murat87 user-group manage-ug
[*HUAWEI-aaa] commit
[*HUAWEI-aaa] quit


[~HUAWEI] ssh user Murat87
[*HUAWEI] ssh user Murat87 authentication-type password
[*HUAWEI] ssh user Murat87 service-type all
[*HUAWEI] ssh authorization-type default aaa
[*HUAWEI] commit
[~HUAWEI] stelnet server enable
[*HUAWEI] snetconf server enbale
[*HUAWEI] commit


[~HUAWEI] rsa local-key-pair create
The key name will be:HUAWEI_Host
% RSA keys defined for HUAWEI_Host already exist.
Confirm to replace them Please select [Y/N]: y
The rangge of public key size is (2048 ~ 2048).
NOTE: Key pair generation will take a short while.
[*HUAWEI] commit
[~HUAWEI] undo telnet server disable
[*HUAWEI] commit




Link source:
https://support.huawei.com/enterprise/en/doc/EDOC1100072312/d11c2d32/configuring-ssh

 


View more
  • x
  • convention:

andersoncf1
andersoncf1 MVE Author Created Jul 12, 2021 14:08:44

Posted by hemin88 at 2021-06-22 12:22 Dear @Murat87 Please use the following steps "Change the red highlighted text as per your requiremen ...
Good answer friend
View more
  • x
  • convention:

hemin88
hemin88 Created Jul 12, 2021 14:12:31 (0) (0)
Thanks friend  
CE6855 MEth-4030215-1
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.