HP VPN Firewall Appliances Network Management Configuration Guide

144
Displaying and maintaining inter-VLAN Layer 2 forwarding
Task Command Remarks
Display VLAN
information.
display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic |
interface interface-type interface-number.subnumber |
reserved | static ] [ | { begin | exclude | include }
regular-expression ]
Available in any view.
Display brief
interface/subinterface
information.
display interface [ interface-type [ interface-number |
interface-number.subnumber ] ] [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display
interface/subinterface
state and related
information.
display interface [ interface-type [ interface-number |
interface-number.subnumber ] ] brief [ | { begin |
exclude | include } regular-expression ]
Available in any view.
Clear the
interface/subinterface
statistics.
reset counters interface [ interface-type
[ interface-number | interface-number.subnumber ] ]
Available in any view.
Inter-VLAN Layer 2 forwarding configuration example
Network requirements
As shown in Figure 78, traffic between GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2 is filtered by
a firewall card, and inter-VLAN Layer 2 forwarding needs to be configured.
• Ten-GigabitEthernet 2/0/1 of the switch connects to Ten-GigabitEthernet 0/0 of the firewall card.
Configure the link type of the two interfaces as trunk.
• Configure the operating mode of Ten-GigabitEthernet 2/0/1 as Layer 2. Assign the port to VLAN
102 and VLAN 103. Set the default VLAN of the port as VLAN 100.
• Configure the operating mode of GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2 of the switch
as access. Assign them to VLAN 102 and VLAN 103, respectively.
• Configure the operating mode of Ten-GigabitEthernet 0/0 as Layer 2. Assign the port to VLAN 102,
VLAN 103, and VLAN 1000 (the VLAN where the firewall card resides).
• Create two subinterfaces Ten-GigabitEthernet 0/0.102 and Ten-GigabitEthernet 0/0.103 for
Ten-GigabitEthernet 0/0. Configure their operating mode as Layer 2 and the link type as access.
Assign them to VLAN 1000.
Figure 78 Network diagram