H3C Technologies H3C SecBlade IPS Cards - Manual (Page 43)

36
2. The switch redirects the packets to the SecBlade IPS card.
3. After processing the packets, the SecBlade IPS card forwards them back to the switch.
4. The switch forwards the packets out its internal network interface.
Configuration Procedure
Configuring the switch
Configure the switch as follows.
• Configure the MIB style of the switch.
• Configure SNMP parameters. Configure SNMPv3 users and adopt non-authentication and
non-encryption.
• Enable the ACFP server and the ACSEI server.
• Configure a VLAN, VLAN 100, for example, which must not conflict with any existing VLANs on the
switch, and configure an IP address for the VLAN interface.
• Configure the internal 10GE interface as a trunk interface, assign it to all VLANs, and configure its
port-connect-mode as extended.
• Disable MAC address learning on the internal interface.
• Save the configuration and reboot the switch.
Follow these steps to configure the switch:
To do… Use the command… Remarks
Enter system view system-view —
Configure the MIB style of the
switch mib-style [ new |
compatible ]
Required
• new: Specifies the MIB style H3C new.
With this style, both the sysOID and private
MIB of the switch are located under the
H3C enterprise ID 25506.
• compatible: Specifies the MIB style H3C
compatible. With this style, the sysOID of
the switch is located under the H3C
enterprise ID 25506, and the private MIB is
located under the enterprise ID 2011.
By default, the MIB style of the switch is new.
You need to reboot the switch to validate the
configuration (you can reboot the switch after
completing all configurations).
CAUTION:
Make sure that the switch’s the MIB style is new.
If you specify compatible for the switch, the
switch cannot work normally.
Enable SNMP agent snmp-agent
Required
Disabled by default.