H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 153)

138
# Configure Ten-GigabitEthernet 2/0/1 as a trunk port, and configure the port to deny all VLANs to pass
through.
[Device] interface ten-gigabitethernet2/0/1
[Device-Ten-GigabitEthernet2/0/1] port link-type trunk
[Device-Ten-GigabitEthernet2/0/1] undo port trunk permit vlan all
[Device-Ten-GigabitEthernet2/0/1] quit
2. Configure the SecBlade NetStream card
# Configure Ten-GigabitEthernet 0/0 as a trunk port, and assign the port to all VLANs. Enable the IPv4
packet filtering logging function on the port.
system-view
[SecBlade] interface ten-gigabitethernet 0/0
[SecBlade-Ten-GigabitEthernet0/0] port link-type trunk
[SecBlade-Ten-GigabitEthernet0/0] port trunk permit vlan all
[SecBlade-Ten-GigabitEthernet0/0] packet-filter logging enable
[SecBlade-Ten-GigabitEthernet0/0] quit
# Configure the card to generate and output IPv4 packet filtering logs at 30-second intervals.
[SecBlade] packet-filter logging-interval 30