Example for configuring NAC on S series switches

2

S series switches (except the S1700) support NAC. For switches running V200R003C10 and earlier versions, NAC can be configured only in common mode. For switches running V200R005C00 and later versions, NAC can be configured in common or unified mode. By default, NAC is configured in unified mode. For switches running V200R009C00, the configuration model of NAC unified mode changes. Query the appropriate product manual based on the switch model and version.
For details about NAC configuration:
- S1720, S2700, S3700, S5700, S6700, S7700, and S9700: See "Typical User Access and Authentication Configuration" in S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples.
- S12700: See "Typical User Access and Authentication Configuration" in S12700 Typical Configuration Examples.
- Sx300: See "Typical User Access and Authentication Configuration" in Sx300 Typical Configuration Examples.
- S600-E: See "Typical User Access and Authentication Configuration" in S600-E Typical Configuration Examples.

Other related questions:
DNS configuration on S series switch
S series switches (except S1700 switches) support only configuration of the DNS client. There are two DNS resolution modes: static and dynamic. The two modes can be used together. The switch first uses static DNS resolution (by searching the local static domain name resolution table). If static DNS resolution fails, the switch uses dynamic DNS resolution (by sending a DNS resolution request to the DNS server). Dynamic DNS resolution takes a period of time and requires cooperation from the DNS server. You can add common domain names to the static domain name resolution table to improve the efficiency of resolving domain names. To enable static and dynamic DNS resolution on S series switches, perform the following configuration: 1. Configuration of static DNS resolution [Huawei] ip host hostB 10.4.1.1 //Configure a static DNS entry. 2. Configuration of dynamic DNS resolution [Huawei] dns resolve //Enable dynamic DNS resolution. [Huawei] dns server 10.3.1.2 //Set the IP address of the DNS server. [Huawei] dns domain net //Configure the DNS domain name.

VPN instance configuration on S series switch
For the configuration of BGP/MPLS IP VPN: On the S12700, see Example for Configuring BGP/MPLS IP VPN in the S12700 Typical Configuration Examples. On the S1720&S2700&S3700&S5700&S6700&S7700&S9700, see Example for Configuring BGP/MPLS IP VPN in the S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples. On the S9300, see Example for Configuring BGP/MPLS IP VPN in the Sx300 Series Switches Typical Configuration Examples.

SNMP configuration on S series switch
S series switches (except S1700 switches) support three SNMP versions: SNMPv1, SNMPv2c, and SNMPv3. SNMPv1 and SNMPv2c use community names for authentication, resulting in low security, whereas SNMPv3 uses authentication and encryption technologies to enhance security. The following uses SNMPv2c configuration as an example: [HUAWEI] snmp-agent //Enable SNMP. [HUAWEI] snmp-agent sys-info version v2c //Set the SNMP version to SNMPv2c. [HUAWEI] snmp-agent community write adminnms01 //Set the SNMP write community name. For common SNMP configuration information, see "Common SNMP Operations" in S1720&S2700&S3700&S5700&S6700&S7700&S9700 Series Switches Common Operation Guide. For typical SNMP configuration examples, see "Typical SNMP Configuration" in "Typical Network Management and Monitoring Configuration" of S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples. Common configuration and typical configuration examples for S9300 and S12700 series switches are the same as those for Sx700 series switches. The Sx700 series switches are used as an example here.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top