H3C Technologies H3C SecPath F5020 - Manual (Page 76)

67
Assigning interfaces to a context
By default, all interfaces belong to the default context. A non-default context cannot use any interfaces.
To enable a non-default context to communicate, you must assign it interfaces.
You can assign interfaces to contexts in exclusive or shared mode:
• Exclusive mode—You assign an interface exclusively to a context, and only the context can use the
interface. The administrator of the context can see the interface and use all commands supported
on the interface.
• Shared mode—You assign an interface to multiple contexts in shared mode, and the system creates
a virtual interface for each context. The virtual interfaces use the same name as the physical
interface but have different MAC addresses and IP addresses. They forward and receive packets
through the physical interface. The shared mode improves interface utilization.
You can see the physical interface and perform all commands supported on the interface from the
default context. The administrator of a context can only see the context's virtual interface and use
the shutdown, description, and network- and security-related commands.
To assign interfaces to a context:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter context view. context context-name N/A
3. Assign interfaces to the
context.
• allocate interface { interface-type
interface-number }&<1-24> [ share ]
• allocate interface interface-type
interface-number1 to interface-type
interface-number2 [ share ]
Use either or both of the
commands.
By default, all interfaces belong to
the default context. A non-default
context cannot use any interfaces.
Assigning VLANs to a context
For contexts without the VLAN-unshared attribute, you can only assign VLANs to them and cannot use
the vlan command to create VLANs for them. Before doing so, you must create the VLANs on the default
context. A VLAN can be assigned only to one context.
To assign VLANs to a context:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter context view. context context-name N/A
3. Assign VLANs to the
context. • allocate vlan vlan-id&<1-24>
• allocate vlan vlan-id1 to vlan-id2
By default, no VLAN is assigned to a
context.
Configuring resource limits for contexts
The following matrix shows the feature and hardware compatibility: