H3C Technologies H3C SecBlade FW Cards - Manual (Page 9)

8
# Configure the link type of ten-GigabitEthernet 2/0/1 as trunk and assign the trunk port to VLAN 102
and VLAN 103.
[Sysname] interface Ten-GigabitEthernet 2/0/1
[Sysname-Ten-GigabitEthernet2/0/1] port link-type trunk
[Sysname-Ten-GigabitEthernet2/0/1] port trunk permit vlan 102 103
2. Configure the firewall card.
# Configure the operating mode of ten-GigabitEthernet 0/0 as Layer 3.
[Sysname] interface Ten-GigabitEthernet 0/0
[Sysname-Ten-GigabitEthernet0/0] port link-mode route
# Configure two subinterfaces for ten-GigabitEthernet 0/0. Set their encapsulation type to dot1q and
associate them to with VLANs created on the switch. Assign IP addresses for the subinterfaces.
[Sysname-Ten-GigabitEthernet0/0] interface Ten-GigabitEthernet0/0.1
[Sysname-Ten-GigabitEthernet0/0.1] vlan-type dot1q vid 102
[Sysname-Ten-GigabitEthernet0/0.1] ip address 102.0.0.3 24
[Sysname-Ten-GigabitEthernet0/0.1] interface Ten-GigabitEthernet0/0.2
[Sysname-Ten-GigabitEthernet0/0.2] vlan-type dot1q vid 103
[Sysname-Ten-GigabitEthernet0/0.2] ip address 103.0.0.3 24
# Add ten-GigabitEthernet 0/0.1 to security zone Trust.
# Add ten-GigabitEthernet 0/0.2 to security zone Untrust.