Configuring HTTPS/HTTP and SFTP Access on a Huawei Switch via Web Management

Configuration approach: upload and load a web package, enable HTTPS/HTTP services, create HTTP users, and log in to the web management interface.

Operational steps include generating a local RSA key pair and enabling the SFTP server on the device.

<HUAWEI> system-view

[HUAWEI] sysname HTTP-Server

[HTTP-Server] rsa local-key-pair create The key name will be: HTTP-Server_Host

The key size range is 512‑2048 bits; the default modulus is 2048.

[HTTP-Server] sftp server enable

Configure VTY user interface:

[HTTP-Server] user-interface vty 0 4

[HTTP-Server-ui-vty0-4] authentication-mode aaa

[HTTP-Server-ui-vty0-4] protocol inbound all

[HTTP-Server-ui-vty0-4] quit

Set up SSH user with password authentication, SFTP service type, and directory:

[HTTP-Server] ssh user client001 authentication-type password

[HTTP-Server] ssh user client001 service-type sftp

[HTTP-Server] ssh user client001 sftp-directory flash:

Create a local user for SSH access:

[HTTP-Server] aaa

[HTTP-Server-aaa] local-user client001 password irreversible-cipher Helloworld

[HTTP-Server-aaa] local-user client001 privilege level 15

[HTTP-Server-aaa] local-user client001 service-type ssh

[HTTP-Server-aaa] quit

From a terminal, use OpenSSH to connect to the SFTP server:

C:\Documents and Settings\Administrator> sftp [email protected]

After confirming the host key, log in with the password.

Upload the web package to the switch:

sftp> put webtest.7z

Verify the file exists on the device using the dir command.

Load the web package into the HTTP server:

[HTTP-Server] http server load webtest.7z

Enable HTTPS and HTTP services and create an HTTP user:

[HTTP-Server] http secure-server enable

[HTTP-Server] http server enable

[HTTP-Server] aaa

[HTTP-Server-aaa] local-user admin password irreversible-cipher Helloworld@6789

[HTTP-Server-aaa] local-user admin privilege level 15

[HTTP-Server-aaa] local-user admin service-type http

[HTTP-Server-aaa] quit

Finally, access the web management interface by opening a browser and navigating to http://192.168.0.1 , where the login dialog appears.