HP VPN Firewall Appliances Network Management Configuration Guide

140
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure an inline Layer 2
forwarding entry.
inline-interfaces id [ blackhole |
reflect ]
N/A
3. Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
N/A
4. Assign an interface to the
inline Layer 2 forwarding
entry.
port inline-interfaces id
By default, an interface does not belong
to any inline Layer 2 forwarding entry.
Two interfaces must be assigned to a
forward type inline forwarding entry
while only one interface is required for a
reflect or blackhole type.
Displaying and maintaining inline Layer 2 forwarding
Task Command Remarks
Display inline Layer 2 forwarding
configuration.
display inline-interfaces [ | { begin |
exclude | include } regular-expression ]
Available in any view.
Forward-type inline Layer 2 forwarding configuration example
1. Network requirements
Configure forward-type inline Layer 2 forwarding between GigabitEthernet 0/1 and
GigabitEthernet 0/2. Then packets received on GigabitEthernet 0/1 can be forwarded through
GigabitEthernet 0/2 directly, and vice versa.
2. Configuration procedure
# Create forward-type inline Layer 2 forwarding entry 1.
<Sysname> system-view
[Sysname] inline-interfaces 1
# Assign GigabitEthernet 0/1 to forward-type inline Layer 2 forwarding entry 1.
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] port inline-interfaces 1
[Sysname-GigabitEthernet0/1] quit
# Assign GigabitEthernet 0/2 to forward-type inline Layer 2 forwarding entry 1.
[Sysname] interface gigabitethernet 0/2
[Sysname-GigabitEthernet0/2] port inline-interfaces 1
Blackhole-type inline Layer 2 forwarding configuration example
1. Network requirements
Configure blackhole-type inline Layer 2 forwarding on GigabitEthernet 0/1. Then packets
received on GigabitEthernet 0/1 are directly dropped.
2. Configuration procedure
# Create blackhole-type inline Layer 2 forwarding entry 1.
<Sysname> system-view
[Sysname] inline-interfaces 1 blackhole
# Assign GigabitEthernet 0/1 to blackhole-type inline Layer 2 forwarding entry 1.