H3C Technologies H3C SecBlade FW Cards - Manual (Page 4)

3
Configure the ports of the switch
Follow these steps to configure the ports of the switch:
To do… Use the command… Remarks
Enter system view system-view —
Create a VLAN and enter VLAN
view
vlan vlan-id Required
Assign the access port(s) to the
VLAN
port interface-list
Required
By default, all ports belong to VLAN 1.
Create another VLAN and enter
VLAN view
vlan vlan-id Required
Assign the access port(s) to the
VLAN
port interface-list
Required
By default, all ports belong to VLAN 1.
Enter the view of the
ten-GigabitEthernet interface that
connects to the firewall card
interface
Ten-GigabitEthernet
interface-number
Required
Configure the link type of the
interface as trunk
port link-type trunk Required
Assign the trunk port to the two
VLANs port trunk permit vlan
{ vlan-id-list | all }
Required
Configure the default VLAN for the
trunk port
port trunk pvid vlan vlan-id
Optional
The default VLAN cannot be one of the
previously configured two VLANs.
Configure the firewall card
Follow these steps to configure the firewall card:
To do… Use the command Remarks
Enter system view system-view —
Enter the view of the
ten-GigabitEthernet
interface that connects to
the switch
interface ten-gigabitethernet
interface-number
Required
Configure the operating
mode of the interface as
Layer 3
port link-mode route
Optional
The default operating mode is
Layer 3.
Create a subinterface of the
ten-GigabitEthernet
interface and enter
subinterface view
interface ten-gigabitethernet
interface-number.subnumber
Required
Set the encapsulation type
and associate the
subinterface with a VLAN
vlan-type dot1q vid vid
Required
The subinterface receives packets
with the vid.