H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 143)

128
[Switch] vlan 5
[Switch-vlan5] port ethernet 1/2
[Switch-vlan5] isolate-user-vlan enable
[Switch-vlan5] quit
[Switch] isolate-user-vlan 5 secondary 2 3
2. Configure the SecBlade.
# Specify the IP address of GigabitEthernet 0/2.
system-view
[SecBlade] interface gigabitethernet 0/2
[SecBlade-GigabitEthernet0/2] ip address 192.168.10.100 255.255.0.0
The ping operation from Host A to Host B is unsuccessful because they are isolated at Layer 2.
# Configure local proxy ARP to implement Layer 3 communication between Host A and Host B.
[SecBlade-GigabitEthernet0/2] local-proxy-arp enable
The ping operation from Host A to Host B is successful after the configuration.