How can I secure an Ethernet switch in a cabinet?

4

You can secure an Ethernet switch in the cabinet by securing the accompanying mounting ears of the Ethernet switch to the channels.

Other related questions:
Method used to secure Ethernet switches in the cabinet
Method used to secure Ethernet switches in the cabinet: Install mounting ears matching Ethernet switches and secure Ethernet switches by securing the mounting ears in the mounting bar on the cabinet.

How Can I Configure Security Group Rules?

Security group rules consist of inbound and outbound rules.

When adding an inbound rule, you can set the source address to a security group or CIDR block. If you want to set the source address to a security group, you can only select security groups from the same VPC as the destination security group.

When adding an outbound rule, you can set the destination address to a security group or CIDR block. If you want to set the destination address to a security group, you can only select security groups from the same VPC as the source security group.

ECSs in security groups in different VPCs cannot communicate with one another. To allow them to communicate, bind EIPs to them and configure security group rules.


A WLAN device enters the AP# mode
AP# mode: An AP may enter this mode in the following scenarios: - When a Fat AP is switched to a Fit AP, the AP enters the AP# mode if upgrade assistant package operations are implemented (applicable to versions earlier than V200R003C00SPC200). - Fit APs enter the AP# mode after login. - Fat APs enter the AP# mode after the startup fails multiple times. If an AP enters the AP# mode, a startup exception occurs. Run the quit upgrade-assistant-package command to exit the AP# mode. Re-upload a system version file.

How to configure Ethernet link aggregation on WLAN devices
Eth-Trunk is a link aggregation technology that bundles multiple physical Ethernet links into one logical link to increase link bandwidth. The Ethernet physical links implement redundancy and improve link reliability. Link aggregation is also called Ethernet link aggregation, port aggregation, link bundling, port bundling, Eth-Trunk, Eth-Trunk link aggregation, and interface aggregation. Currently, all Huawei ACs and only APs with dual network ports (such as the AP5030DN) support Ethernet link aggregation. Currently, Ethernet link aggregation can be configured only on the CLI of WLAN devices. Link aggregation can work in manual load balancing mode or LACP mode. Link aggregation implement load balancing. WLAN devices support flow-based load balancing. You can configure link aggregation in manual load balancing mode or LACP mode. The following example describes how to configure link aggregation on an AC and an S series switch in manual load balancing mode. The right figure shows the networking diagram. 1. Create an Eth-Trunk on the AC and switch respectively, and add member interfaces to each Eth-Trunk. [AC6605] sysname AC [AC] interface eth-trunk 1 //Create Eth-Trunk 1 on the AC. [AC-Eth-Trunk1] trunkport gigabitethernet 0/0/1 to 0/0/3 //Add GE0/0/1, GE0/0/2, and GE0/0/3 to Eth-Trunk 1. [AC-Eth-Trunk1] quit [HUAWEI] sysname Switch [Switch] interface eth-trunk 1 //Create Eth-Trunk 1 on the switch. [Switch-Eth-Trunk1] trunkport gigabitethernet 1/0/1 to 1/0/3 //Add GE0/0/1, GE0/0/2, and GE0/0/3 to Eth-Trunk 1. [Switch-Eth-Trunk1] quit 2. Create VLANs and add interfaces to the VLANs. # Create VLAN 10 and VLAN 20, and add interfaces to the VLANs. The configuration on the switch is similar to that on the AC, and is not described here. [AC] vlan batch 10 20 [AC] interface gigabitethernet 0/0/4 [AC-GigabitEthernet0/0/4] port link-type trunk //Set the link type of the interface to trunk, which is not the default type. [AC-GigabitEthernet0/0/4] port trunk allow-pass vlan 10 [AC-GigabitEthernet0/0/4] quit [AC] interface gigabitethernet 0/0/5 [AC-GigabitEthernet0/0/5] port link-type trunk //Set the link type of the interface to trunk, which is not the default type. [AC-GigabitEthernet0/0/5] port trunk allow-pass vlan 20 [AC-GigabitEthernet0/0/5] quit # Configure Eth-Trunk 1 to allow packets from VLAN 10 and VLAN 20 to pass through. The configuration on the switch is similar to that on the AC, and is not described here. [AC] interface eth-trunk 1 [AC-Eth-Trunk1] port link-type trunk //Set the link type of the interface to trunk, which is not the default type. [AC-Eth-Trunk1] port trunk allow-pass vlan 10 20 [AC-Eth-Trunk1] quit 3. Set the load balancing mode of Eth-Trunk 1. The configuration on the switch is similar to that on the AC, and is not described here. [AC] interface eth-trunk 1 [AC-Eth-Trunk1] load-balance src-dst-mac //Configure load balancing of Eth-Trunk 1 based on source and destination MAC addresses. [AC-Eth-Trunk1] quit

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top