H3C Technologies H3C SecBlade FW Cards - Manual (Page 7)

6
To do… Use the command… Remarks
Configure the link type of
the ten-GigabitEthernet
interface as trunk
port link-type trunk Required
Assign the trunk port to the
specified VLANs port trunk permit vlan { vlan-id-list |
all }
Required
The VLANs of the firewall card and the
VLANs on the switch must be included.
Create a VLAN interface
and enter its view interface vlan-interface
vlan-interface-id
Required
The vlan-interface-id must be one of the
VLAN IDs created on the switch.
Assign an IP address to the
VLAN interface ip address ip-address { mask |
mask-length } [ sub ]
Required
By default, the VLAN interface has no
IP address.
Add the interface and the
VLAN interface to a security
zone.
Enter the Web page and select Device
Management > Zone. On the modify
zone page, add the
ten-GigabitEthernet interface and the
VLAN interface to the security zone.
Required
This zone is for incoming packets.
Create another VLAN
interface and enter its view interface vlan-interface
vlan-interface-id
Required
The vlan-interface-id must be the ID of
the other VLAN created on the switch.
Assign an IP address to the
VLAN interface ip address ip-address { mask |
mask-length } [ sub ]
Required
By default, the VLAN interface has no
IP address.
Add the interface and the
VLAN interface to a security
zone
Enter the Web page and select Device
Management > Zone. On the modify
zone page, add the
ten-GigabitEthernet interface and the
VLAN interface to the security zone.
Required
This zone is for outgoing packets.
Displaying and maintaining inter-VLAN Layer 3 forwarding
To do… Use the command… Remarks
Display brief interface
information (available on
the R3166 version)
display brief interface [ interface-type
[ interface-number |
interface-number.subnumber ] ] [ | { begin |
include | exclude } text ]
Available in any view
Display brief interface
information (available on
the R3169 version)
display interface [ interface-type [ interface-number
| interface-number.subnumber ] ] [ brief [ | { begin
| include | exclude } text ] ]
Available in any view
Display
interface/subinterface state
and related information
display interface [ interface-type [interface-number
| interface-number.subnumber ] ]
Available in any view
Clear
interface/subinterface
statistics
reset counters interface [ interface-type
[
interface-number |
interface-number.subnumber ] ]
Available in user view