H3C Technologies H3C SecBlade IPS Cards - Manual (Page 74)

8-1
8
Segment Configuration
Overview
A segment refers to the combination of two security zones in specific directions. You can apply different
security policies to a segment to monitor and regulate network behaviors.
Configuring a Segment
Configuration Task List
Perform the tasks in Table 8-1 to complete segment management.
Table 8-1 Segment configuration task list
Task Description
Creating a Segment
Required
Create a segment and add security zones to it.
By default, no segment is created.
Applying a Policy to the
Segment
Optional
Apply a security policy to a security zone in the segment or specific IP addresses
of the security zone. The security policy can be related to IPS, anti-virus, URL
filtering, DDoS, and bandwidth management. For details, refer to corresponding
Web configuration manuals.
Applying a Segment
Bandwidth Control
Scheme to the Segment
Optional
Apply a segment bandwidth control scheme to the segment.
Activating Configurations
Required
Activate all Class B configurations, including the configured segments, policy
applications, segment bandwidth control schemes.
z There are two categories of configurations in the system: Class A and Class
B. Class A configurations take effect immediately, while Class B
configurations must be activated to take effect.
z The Activate button is present on all pages with Class B configurations.
Clicking the button on any page will activate all Class B configurations. You
are recommended to complete all Class B configurations before clicking the
Activate button.
Creating a Segment
On a chassis
Select System Management > Network Management > Segment Configuration from the navigation
tree to enter the page as shown in Figure 8-1 . Then click Add Segment to enter the page as shown in
Figure 8-2 .