beautypg.com

Configure the firewall card – H3C Technologies H3C SecPath F1000-E User Manual

Page 293

background image

268

To do…

Use the command

Remarks

Enter the view of the
ten-GigabitEthernet interface that
connects to the firewall card

interface ten-gigabitethernet
interface-number

Required

Configure the link type of the
interface as trunk

port link-type trunk

Required

Assign the trunk port to the two
VLANs

port trunk permit vlan { vlan-id-list |
all }

Required

Configure the default VLAN for the
trunk port

port trunk pvid vlan vlan-id

Optional
The default VLAN cannot be one of

the previously configured two
VLANs.

Configure the firewall card

Follow these steps to configure the firewall card:

To do…

Use the command…

Remarks

Enter system view

system-view

Create two VLANs and enter VLAN
view.

vlan vlan-id

Required

Exit to system view

quit

Enter the view of the
ten-GigabitEthernet interface that

connects to the switch

interface ten-gigabitethernet
interface-number

Required

Configure the operating mode of
the interface as Layer 2

port link-mode bridge

Required
The default operating mode is
Layer 3.

Configure the link type of the
ten-GigabitEthernet interface as

trunk

port link-type trunk

Required

Assign the trunk port to the
specified VLANs

port trunk permit vlan { vlan-id-list
| all }

Required
The VLANs of the firewall card and

the VLANs on the switch must be

included.

Create a VLAN interface and enter
its view

interface vlan-interface
vlan-interface-id

Required
The vlan-interface-id must be one of

the VLAN IDs created on the
switch.

Assign an IP address to the VLAN
interface

ip address ip-address { mask |
mask-length } [ sub ]

Required
By default, the VLAN interface has
no IP address.