Networking Requirements
In an enterprise,
intranet users in departments A and B can communicate with each other
and access the Internet.
on a small-sized campus network, S2700 and S3700 switches are typically
deployed as access switches (such as ACC1) at the access layer, S5700
and S6700 switches as core switches (such as CORE) at the core layer,
and AR routers as egress routers (such as Router).
The access
switches are connected to the core switch through Eth-Trunks to ensure
reliability.
A VLAN is assigned to each department and services
are transmitted between departments at Layer 3 through VLANIF interfaces
of the switch CORE.
The core switch functions as a DHCP server
to allocate IP addresses to users in the campus.
The DHCP snooping
function is configured on access switches to prevent intranet users
from connecting to unauthorized routers to obtain IP addresses. The
IPSG function is configured to prevent intranet users from changing
their IP addresses.

Data Planning
Data planOperation | Item | Data | Description |
|---|
Configuring the management IP address | IP address of the management interface | 10.10.1.1/24 | This IP address is used for users to log in to the switch
through the management interface. |
Configuring interfaces and VLANs | Eth-Trunk working mode | Static Link Aggregation Control Protocol (LACP) mode | Eth-Trunks work in manual load balancing mode or static
LACP mode. |
Interface type | Interfaces connected to switches are configured as trunk
interfaces and interfaces connected to PCs are configured as access
interfaces. | A trunk interface is typically used to connect to a switch. An access interface is typically used to connect to a PC. A hybrid interface can connect to either a switch or a PC. |
VLAN ID | ACC1: VLAN 10 ACC2: VLAN 20 CORE: VLANs 100,
10, and 20 | The default VLAN of a switch is VLAN 1. To isolate
departments A and B at Layer 2, add department A to VLAN 10 and department
B to VLAN 20. The switch CORE connects to the egress router
through VLANIF 100. |
Configuring DHCP | DHCP server | CORE | The DHCP server is deployed on the core switch. |
Address pool | VLAN 10: VLANIF 10 VLAN 20: VLANIF 20 | Terminals in department A obtain IP addresses from the address
pool on VLANIF 10. Terminals in department B obtain IP addresses
from the address pool on VLANIF 20. |
Configuring routes on the core switch | IP routes | VLANIF 100: 10.10.100.1/24 VLANIF 10: 10.10.10.1/24 VLANIF 20: 10.10.20.1/24 | The IP address of VLANIF 100 is used for the switch CORE
to connect to the egress router and for the internal network to communicate
with the Internet. On the core switch, configure a default route
and set the next-hop IP address to the IP address of the egress router. After the IP addresses of VLANIF 10 and VLANIF 20 are configured
on the switch CORE, departments A and B can communicate through the
switch. |
Configuring the egress router | IP address of the public network interface | Ethernet0/0/1: 1.1.1.2/30 | Ethernet0/0/1 connects the egress router to the Internet. |
IP address of the public network gateway | 1.1.1.1/30 | It is the IP address of the carrier's device connected
to the egress router. On the egress router, configure a default route
to this IP address for forwarding network traffic to the Internet. |
DNS server address | 2.2.2.2 | The DNS server resolves a domain name into an IP address. |
IP address of an intranet interface | Ethernet0/0/2: 10.10.100.2/24 | Ethernet0/0/2 connects the egress router to the intranet. |
Configuring DHCP snooping and IPSG | Trusted port | Eth-Trunk 1 | N/A |
Configuration Roadmap
The configuration
roadmap is as follows:
Log in to switches.
Configure the interfaces and VLANs on access switches.
Configure the interfaces and VLAN on the core switch.
Configure the DHCP server on the core switch.
Configure routes on the core switch.
Configure the egress router.
Configure DHCP snooping and IPSG on access switches.
Save the configuration.
Procedure
Log in to a switch.
Connect the switch to a PC.
Connect the PC to any Ethernet interface (except the management
interface) of the switch.
Enter the initial configuration mode.
Press and hold down the MODE button
for 6 seconds or longer. When all indicators are steady green, the
switch enters the initial configuration mode.
In the initial
configuration mode, the system sets the switch's IP address to
192.168.1.253/24 and sets the level of the default user admin to 15 by default.
Configure an IP address for the PC.
To ensure that the switch and PC are reachable, configure
an IP address that is on the same network segment as the switch's
default IP address for the PC.
Log in to the switch through the web system.
Open a browser on the PC, enter https://192.168.1.253 in the address box, and press Enter. The web system login
page is displayed.
Enter the default
user name admin and password admin@huawei.com, and select
the system language. Click GO or press Enter. The web system configuration page is displayed.

Configure the switch.On the web configuration page, perform the following operations
in the Basic Setting area:
Set Management IP Address to 10.10.1.1 and Mask to 24(255.255.255.0).
Enter admin@huawei.com in the Old Password text box.
Enter a new password in WEB User Password and Confirm Password text boxes.
Select 15 from the WEB User Level drop-down list box.

Configure interfaces and VLANs on access switches (ACC1
is used as an example here, and the configuration on ACC2 is similar).Configure Eth-Trunk 1 that connects ACC1 to CORE to transparently
transmit packets from the VLAN of department A.
Choose , and click Connect to Switch in
the Select Task area.
Select GigabitEthernet0/0/1 and GigabitEthernet0/0/2 to be configured.
Select Enable link aggregation in the Configure Interface area, and set parameters,
Click Apply. In the dialog box that is displayed,
click OK.

Configure interfaces of ACC1 connected to users and add users
to a VLAN.
Choose , and click Connect to PC in the Select Task area.
Select Ethernet0/0/2 and Ethernet0/0/3 to be configured.
Set parameters in the Configure Interface area
Interface Status: ON
Default VLAN: 10
Port Isolation: OFF
Port Security: OFF
Loopback Detection: OFF
Trust Priority: None

Configure edge ports and the BPDU protection function.
Choose . The STP Summary tab
page is displayed.
Enable BPDU protection in the STP
Global Setting area,

Select Ethernet0/0/2 and Ethernet0/0/3 to be configured in the Interface Status area,
and click Enable Edge Port,

Configure the interfaces and VLAN on the core switch.Configure downlink interfaces of the core switch. (The following
uses the configuration of Eth-Trunk 1 that connects CORE to ACC1 as
an example, and the configuration for connecting to ACC2 is similar.)
Choose , and
click Connect to Switch in the Select Task area.
Select GigabitEthernet0/0/1 and GigabitEthernet0/0/2 to be configured.
Select Enable link aggregation in the Configure Interface area, and set parameters,

Click Apply. In the dialog box that is displayed,
click OK.
Configure VLANIF interfaces for departments A and B to communicate
with each other.
Choose to access the VLAN configuration page.
Click 10 in the VLAN ID column. The Modify VLAN dialog box is displayed.
Click Create VLANIF, set IPv4 address to 10.10.10.1, and set Mask to 24. Use the same method to configure VLANIF
20,

please for more details follow the below link:
https://support.huawei.com/enterprise/en/doc/EDOC1000169679/9ecf2b10/example-for-configuring-a-small-sized-campus-network