beautypg.com

Configuring the secblade ips card – H3C Technologies H3C SecBlade IPS Cards User Manual

Page 54

background image

47

To do…

Use the command…

Remarks

Create a VLAN and
enter VLAN view

vlan { vlan-id1 [ to vlan-id2 ] |
all }

Required

Return to system view

quit

Required

Enter the specified
VLAN interface view

interface Vlan-interface
vlan-interface-id

Required
Before creating the VLAN interface,

you need to create the corresponding
VLAN. Otherwise, the VLAN

interface cannot be created.

Configure an IP address
and mask for the VLAN

interface

ip address ip-address { mask |
mask-length
} [ sub ]

Required
Not configured by default.

Enable the VLAN
interface

undo shutdown

Required
By default, the VLAN interfaces on an
S12500 switch are down.

Return to system view

quit

Required

Enter the view of the
10GE interface

connected to the
SecBlade IPS card

interface Ten-GigabitEthernet
interface-number

Required

Configure the link type
of the interface

port link-type { access |
hybrid | trunk }

Required
By default, the link type of an

interface is access.

Specify permitted
VLANs on the trunk port

port trunk permit vlan
{ vlan-id-list | all }

Required
A trunk port can allow packets of
multiple VLANs to pass. If you use the

command repeatedly on the
interface, all the specified VLANs are

permitted.

Configure the extended
port connection mode

for the trunk port

port connection-mode extend Required

Disable MAC address
learning on the 10GE

interface

mac-address max-mac-count
0

Required

Enable the Ethernet
interface

undo shutdown

Required
By default, Ethernet interfaces on an
S21500 switch are down.

Configure
the
internal

10GE

interface

Return to system view

quit

Required

Save all configurations

save [ file-name | [ safely ]

Required

Configuring the SecBlade IPS card

Configure the SecBlade IPS card as follows.

Configure the IP address of the management interface at the CLI and use the IP address to login to

the web interface of the SecBlade IPS card.