Huawei

This guide covers Huawei routers and switches running VRP and SmartAX access platforms (OLTs and MSANs such as the MA5600T and MA5800 series).

VRP

VRP runs on Huawei enterprise and carrier routers and switches (for example the S-series campus switches, AR routers, and NE routers).

Create a backup account. Displaying the current configuration requires privilege level 3 with the default command levels:

system-view
aaa
 local-user netwatch-backup password irreversible-cipher <password>
 local-user netwatch-backup privilege level 3
 local-user netwatch-backup service-type ssh
 quit

On older VRP releases, use password cipher <password> instead of irreversible-cipher.

Enable SSH.

stelnet server enable
ssh user netwatch-backup authentication-type password
ssh user netwatch-backup service-type stelnet
user-interface vty 0 4
 authentication-mode aaa
 protocol inbound ssh

To restrict management access, define a basic ACL that permits the Netwatch collector's IP and apply it inbound on the VTY user interfaces.

Notes. QUARK only issues display commands. If your organization re-maps command levels, ensure the account's level can run the command that displays the current configuration.

SmartAX series

SmartAX covers Huawei access platforms such as the MA5600T/MA5603T and MA5800 OLTs.

Create a backup account. Create a dedicated netwatch-backup terminal user through the platform's interactive user-creation dialog in privileged mode. SmartAX grades users by level; assign at least the level your release requires to display the complete configuration (administrator level on most releases — the lower operator levels cannot show everything).

Enable SSH. Enable the SSH (STelnet) service on the management interface and confirm reachability from the Netwatch collector. If your release supports management ACLs or a login source restriction, permit only the collector's IP and your management stations. Where a legacy deployment allows only Telnet, keep it on an isolated management VLAN.

Notes. Configuration retrieval on SmartAX can take noticeably longer than on routers or switches because of the size of service provisioning data; this is normal and does not affect subscribers, since QUARK performs read operations only.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.