H3C Technologies H3C SecBlade IPS Cards - Manual (Page 59)

52
Figure 34 Connectivity test result
# Configure security zones.
After completing OAA configuration on the SecBlade IPS card and the S12500, you can add any
physical ports of the S12500 to a security zone except the internal interface.
In this example, create internal security zone Inside and add GigabitEthernet 4/0/1 and
GigabitEthernet 4/0/2 to the internal security zone, as shown in Figure 35 . Create external security
zone Outside and add GigabitEthernet 4/0/20 to the external security zone in the same way.
Figure 35 Create a security zone
# Configure a segment.
Figure 36 Create a segment
NOTE:
When creating a segment, you need to select the internal zone, external zone and the internal interface.