H3C Technologies H3C SecBlade IPS Cards - Manual (Page 45)

38
To do… Use the command… Remarks
Create a VLAN and
enter VLAN view vlan { vlan-id1 [ to
vlan-id2 ] | all }
Required
Return to system
view
quit Required
Enter the specified
VLAN interface
view
interface Vlan-interface
vlan-interface-id
Required
Before creating the VLAN interface, you need
to create the corresponding VLAN. Otherwise,
the VLAN interface cannot be created.
Configure an IP
address and mask
for the VLAN
interface
ip address ip-address
{ mask | mask-length }
[ sub ]
Required
Not configured by default.
In general, you need to configure only one IP
address for a VLAN interface. To enable a
VLAN to connect multiple subnets, you can
configure multiple IP addresses for the VLAN
interface. One of them is the primary IP
address and others are secondary IP
addresses. On the S9500E series switches, a
VLAN interface can have up to 20 IP addresses
configured.
Return to system
view
quit Required
Enter the view of
the 10GE interface
connected to the
SecBlade IPS card
interface
Ten-GigabitEthernet
interface-number
Required
Configure the link
type of the interface port link-type { access |
hybrid | trunk }
Required
By default, the link type of an interface is
access.
Specify permitted
VLANs on the trunk
port
port trunk permit vlan
{ vlan-id-list | all }
Required
A trunk port can allow packets of multiple
VLANs to pass. If you use the command
repeatedly on the interface, all the specified
VLANs are permitted.
Specify the default
VLAN ID of the
trunk port
port trunk pvid vlan
vlan-id
Required
By default, the default VLAN of a trunk port is
VLAN 1.
If you execute the undo vlan command on a
trunk port to remove its default VLAN, the
default VLAN of the trunk port does not
change, that is, the trunk port uses a
non-existent VLAN as its default VLAN.
Configure the
extended port
connection mode
for the trunk port
port connection-mode
extend
Required
Configure
the internal
10GE
interface
Return to system
view
quit Required