H3C Technologies H3C SecBlade IPS Cards - Manual (Page 76)

8-3
Figure 8-3 Segment configuration on a card
Figure 8-4 Create a segment on a card
Table 8-3 describes the configuration items of creating a segment.
Table 8-3 Configuration items of creating a segment on a card
Item Description
Segment No Specifies the segment ID.
Internal Zone
Specifies the internal zone of the segment. You can select one of the existing security
zones only, and make sure that the security zone includes at least one interface.
External Zone
Specifies the external zone of the segment. You can select one of the existing security
zones only, and make sure that the security zone includes at least one interface.
Start VLAN
End VLAN
Specifies the start VLAN ID and the end VLAN ID of the segment. Note that the start
VLAN ID must be greater than the end VLAN ID.
Support for this configuration item depends on your device model.
Acfp Policy Priority
Priority of the ACFP policy applied to the segment.
On a host device implementing load balancing and stateful failover on multiple cards, the
host device distributes traffic to the card that has a higher ACFP policy priority.
If the host device does not use the ACFP policy priority of cards, you are recommended
to set the ACFP policy priority to 0.