H3C Technologies H3C SecPath F1000-E - Manual (Page 296)

271
2. Configure the firewall card.
# Configure the operating mode of ten-GigabitEthernet 0/0 as Layer 3.
[Sysname] interface Ten-GigabitEthernet 0/0
[Sysname-Ten-GigabitEthernet0/0] port link-mode route
# Configure two subinterfaces for ten-GigabitEthernet 0/0. Set their encapsulation type to dot1q and
associate them to with VLANs created on the switch. Assign IP addresses for the subinterfaces.
[Sysname-Ten-GigabitEthernet0/0] interface Ten-GigabitEthernet0/0.1
[Sysname-Ten-GigabitEthernet0/0.1] vlan-type dot1q vid 102
[Sysname-Ten-GigabitEthernet0/0.1] ip address 102.0.0.3 24
[Sysname-Ten-GigabitEthernet0/0.1] interface Ten-GigabitEthernet0/0.2
[Sysname-Ten-GigabitEthernet0/0.2] vlan-type dot1q vid 103
[Sysname-Ten-GigabitEthernet0/0.2] ip address 103.0.0.3 24
# Add ten-GigabitEthernet 0/0.1 to security zone Trust.
# Add ten-GigabitEthernet 0/0.2 to security zone Untrust.