H3C Technologies H3C SecBlade LB Cards - Manual (Page 17)

6
Figure 1 Network diagram
Configuring a security zone in the Web interface
Recommended configuration procedure
Step Remarks
1. Creating a security zone
Optional.
By default, the default VD Root has the following security zones:
Management, Local, Trust, DMZ, and Untrust, and no security zone exists
on user-defined VDs.
2. Adding members to the
security zone
Required.
Add Layer 3 interfaces and Layer 2 interfaces with their VLANs to the
security zone.
The interfaces and VLANs must belong to the same VD as the security
zone. For how to assign interfaces and VLANs to a VD, see System
Management Configuration Guide.
Interfaces must be added to a security zone to operate properly.
The security zone Local represents the device itself, and no interface can be added to the zone as a
member.
Creating a security zone
1. Select Security > Zone from the navigation tree to enter the security zone management page.