Huawei Switch Hardening Guide [verified] Info

Remember: Hardening is a process, not a one-time script. Run display diagnosis monthly and audit your config against the Huawei Security Configuration Guide for your specific model. A hardened Huawei switch is as resilient as a dedicated firewall when configured correctly.

Network planning and site design must comply with reliability design principles and provide device- and solution-level protection. Huawei Technical Support Overview - S Series Switches Security Hardening Guide(V200) huawei switch hardening guide

Never use default usernames and passwords. Immediately set a strong password for the admin user or create a new super admin. Remember: Hardening is a process, not a one-time script

Separate traffic logically. Do not keep all ports in the default VLAN 1. Network planning and site design must comply with

Prevent MAC flooding attacks and unauthorized device connections by limiting the number of MAC addresses learned on a port.