H3C Technologies H3C SR8800 - Manual (Page 19)

13
• When ACFP server is enabled on an IM-IPS or IM-ACG card, the connection mode for the internal
interface must be set to extend, the internal interface must be configured as a trunk port, and the
PVID of the internal interface cannot be the VLAN ID of the management VLAN.
• When the connection mode of the internal interface on an IM-IPS or IM-ACG card is set to extend,
you cannot specify a VLAN as both the user service VLAN and the management VLAN.
ACFP configuration task list
Complete the following tasks to configure ACFP:
Task Remarks
Enabling the ACFP server Required
Configuring the connection mode for an internal interface on an OAP module Required
Enabling the ACFP trap function Optional
Enabling the ACFP server
To configure to enable the ACFP server:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable the ACFP server. acfp server enable Disabled by default.
Configuring the connection mode for an internal
interface on an OAP module
The OAP module integrates a front card and a rear card. The front card provides value-added security
services, such as firewall, intrusion prevention, and application control. The rear card is responsible for
the data exchange between the front card and the router.
An internal interface is a virtual interface that is used for the data communication between the front and
rear cards, as shown in
Figure 2 .