H3C Technologies H3C SecBlade IPS Cards - Manual (Page 27)

20
To do… Use the command… Remarks
Create a
VLAN and
enter VLAN
view
vlan { vlan-id1 [ to vlan-id2 ]
| all }
Required
Return to
system view
quit Required
Enter the
specified
VLAN
interface view
interface Vlan-interface
vlan-interface-id
Required
Before creating the VLAN interface, you
need to create the corresponding VLAN.
Otherwise, the VLAN interface cannot be
created.
Configure an
IP address and
mask for the
VLAN
interface
ip address ip-address { mask
| mask-length } [ sub ]
Required
Not configured by default.
In general, you need to configure only one IP
address for a VLAN interface. To enable a
VLAN to connect multiple subnets, you can
configure multiple IP addresses for the VLAN
interface. One of them is the primary IP
address and others are secondary IP
addresses. On the S7500 series switches, a
VLAN interface can have up to five IP
addresses configured.
Return to
system view
quit Required
Enter the view
of the 10GE
interface
connected to
the SecBlade
IPS card
interface Ten-GigabitEthernet
interface-number
Required
Configure the
link type of the
interface
port link-type { access |
hybrid | trunk }
Required
By default, the link type of an interface is
access.
Specify
permitted
VLANs on the
trunk port
port trunk permit vlan
{ vlan-id-list | all }
Required
A trunk port can allow packets of multiple
VLANs to pass. If you use the command
repeatedly on the interface, all the specified
VLANs are permitted.
Configure
the internal
10GE
interface
Specify the
default VLAN
ID of the trunk
port
port trunk pvid vlan vlan-id
Required
By default, the default VLAN of a trunk port is
VLAN 1.
If you execute the undo vlan command on a
trunk port to remove its default VLAN, the
default VLAN of the trunk port does not
change, that is, the trunk port uses a
non-existent VLAN as its default VLAN.