Configuration procedure – H3C Technologies H3C SecBlade IPS Cards User Manual

Page 48

Figure 24 S9500E switch and the LSR1IPS1A1 card

Configuration procedure

Configure the switch

# Configure the H3C new MIB style. That is, the sysOID and private MIB are both under H3C enterprise

ID 25506. You need to reboot the switch to validate the configuration (You can reboot the switch after

completing all configurations).

system-view

[Sysname] mib-style new

# Configure SNMP parameters: configure SNMPv3 users and adopt non-authentication and
non-encryption.

[Sysname] snmp-agent

[Sysname] snmp-agent sys-info version all

[Sysname] snmp-agent group v3 v3group_no read-view iso write-view iso

[Sysname] snmp-agent mib-view included iso iso

[Sysname] snmp-agent usm-user v3 v3user_no v3group_no

# Enable the ACFP server and the ACSEI server.

[Sysname] acfp server enable

[Sysname] acsei server enable

# Configure the internal interface.

•

Create a VLAN, VLAN 100, for example, which must not conflict with any existing VLAN, and
configure the IP address of the VLAN interface.

[Sysname] vlan 100

[Sysname-vlan100] quit

[Sysname] interface Vlan-interface100

[Sysname-Vlan-interface100] ip address 100.100.100.1 255.255.255.0

[Sysname-Vlan-interface100] quit

•

Configure the internal interface as a trunk port, assign it to all VLANs, configure its
port-connect-mode as extended, and disable MAC address learning on it.

[Sysname] interface Ten-GigabitEthernet8/0/1

[Sysname-Ten-GigabitEthernet] port link-type trunk