Labnario Huawei From Scratch

A new box for fun 🙂

Thanks to my colleagues I have opportunity to test Huawei Secospace USG6300.

A rental period is not long, so let’s start from the beginning.

Telnet and SSH

Configure IP address of firewall’s interface and assign it to trust zone:

[USG6300]interface GigabitEthernet 0/0/7
[USG6300-GigabitEthernet0/0/7]ip address 172.16.1.1 24

[USG6300]firewall zone trust
[USG6300-zone-trust]add interface GigabitEthernet 0/0/7

Huawei AR routers have easy and effective CPU usage monitoring tool. They generate alarm, when CPU usage reaches 80%. When CPU usage falls to 75%, recovery usage alarm is generated again (clear alarm). This is a default behaviour, but these values can be easily changed in order to help optimize system performance and ensure system stability.

Let’s configure CPU usage alarm threshold as 85% and recovery usage alarm threshold as 80%. The following command can be used for that:

<labnario>system-view [labnario]set cpu-usage threshold 85 restore 80 Info: Succeeding in setting task cpu usage threshold 85 restore 80.

Useful training for beginners. If you want to start your adventure with Huawei VRP just click on the link and enjoy!

A new Huawei eNSP has been released.

Instead of transmitting learned AS external routes, area border router, in a stub area, generates a default route and advertises the route to non-ABRs in the stub area. In short, stub area reduces entries in the routing table of ABR and the amount of routing information to be transmitted.

We have to remember that:

• The backbone area cannot be a stub area
• All routers in a stub area need to be configured using stub attributes
• The ASBR cannot exist in a stub area
• Virtual links cannot be configured in stub area.

Let’s try to configure a simple lab. We would like to see what happens if AREA1 becomes a stub area.

1. Based on the topology, configure IP address of each interface.
2. Enable OSPF on each router and configure basic OSPF functions
3. Configure AREA1 as stub and and check routing information on router Gdansk.
4. Check routing information on router Gdansk, previously stopping advertising type 3 LSA into the stub area.