beautypg.com

H3C Technologies H3C SecBlade IPS Cards User Manual

Page 73

background image

66

[Sysname-Vlan-interface100] ip address 100.100.100.1 255.255.255.0

[Sysname-Vlan-interface100] undo shutdown

[Sysname-Vlan-interface100] quit

Configure the internal interface as a trunk port, assign it to all VLANs, configure its connection
mode as extended, and disable MAC address learning on it.

[Sysname] interface Ten-GigabitEthernet11/0/1

[Sysname-Ten-GigabitEthernet] port link-type trunk

[Sysname-Ten-GigabitEthernet] port trunk permit vlan all

[Sysname-Ten-GigabitEthernet] port connection-mode extend

[Sysname-Ten-GigabitEthernet] mac-address max-mac-count 0

[Sysname-Ten-GigabitEthernet] quit

# Save the configurations.

save

NOTE:

Make sure that the OAA card in slot n corresponds to the router’s internal interface Ten-GigabitEthernet
n/0/0. For example, the OAA card in slot 11 corresponds to the router’s internal interface

Ten-GigabitEthernet 11/0/0.

2.

Configure the SecBlade IPS card

# Configure an IP address for the management interface and enable the management interface. This

configuration is optional. By default, the IP address of the management interface is 192.168.1.1. You can

also change this IP address through the web interface.

system-view

[Sysname] interface meth0/2

[Sysname-if]ip address 192.168.0.11 255.255.255.0

[Sysname-if] undo shutdown

[Sysname-if] quit

# Log in to the web interface of the SecBlade IPS card. The username and password are both admin.

Figure 46 Log in to the SecBlade IPS card

# Configure OAA.