Huawei Switch Optical Port Authentication

Huawei switches authenticate inserted optical modules by default, generating alarms for non-Huawei modules, but allow monitoring and configuration to manage these alerts.

Optical Module Authentication

Huawei switches perform automatic authentication on optical modules inserted into their ports. By default, if a non-Huawei (third-party) module is used, the switch will link up normally, but it will generate alarm messages indicating the module is uncertified. These alarms appear in port logs and module identification information, which can include details such as transceiver type, connector type, wavelength, transfer distance, and vendor information . To manage these alarms, Huawei provides commands to suppress notifications for third-party modules, particularly on data center switches like the CE6860. Administrators can refer to the CloudEngine 6800 Configuration Guide to check alarm policies for different module rates and configure the switch accordingly .

Viewing Optical Port Information

To monitor optical port status and module details, Huawei switches support the following commands:

• display transceiver – Shows information for all optical ports, including type, wavelength, transfer distance, and vendor.
• display transceiver interface interface-type interface-number – Displays detailed information for a specific port.
• Adding the verbose parameter provides receive and transmit power levels, voltage, bias current, and temperature, which is useful for troubleshooting link issues .

Troubleshooting and Compatibility

When using optical ports, ensure:

• Fiber and module compatibility: Single-mode and multi-mode fibers/modules should not be mixed.
• Module rate matches port capability: For example, do not use a 10G module on a 1G interface.
• Port status: Use display interface xgigabitethernet0/0/2 to check if the port is administratively down or up.
• Optical power levels: Verify that received and transmitted optical power is within normal range using display transceiver interface ... verbose .

Network Access Control

Huawei switches also support network access authentication on interfaces, including 802.1X, MAC address authentication, and Portal authentication. Multiple authentication modes can be enabled concurrently, and users are authenticated according to the configured sequence. This ensures that only authorized devices, including those connected via optical ports, can access the network .

Summary

• Huawei switches authenticate optical modules and generate alarms for uncertified modules.
• Administrators can suppress alarms for third-party modules using dedicated commands.
• Use display transceiver commands to monitor module status and optical power.
• Ensure compatibility of fiber type, module rate, and port configuration to avoid link issues.
• Network access can be controlled via 802.1X, MAC, or Portal authentication to secure optical connections.