HP VPN Firewall Appliances Network Management Configuration Guide

145
Configuration procedure
1. Configure the switch:
# Create VLAN 102 and VLAN 103. Assign GigabitEthernet 3/0/1 to VLAN 102 and
GigabitEthernet 3/0/2 to VLAN 103.
<Sysname> system-view
[Sysname] vlan 102
[Sysname-vlan102] port gigabitethernet 3/0/1
[Sysname-vlan102] quit
[Sysname] vlan 103
[Sysname-vlan103] port gigabitethernet 3/0/2
[Sysname-vlan103] quit
# Configure the link type of Ten-GigabitEthernet 2/0/1 as trunk, assign the trunk port to VLAN
102 and VLAN 103, and set VLAN 100 as the default VLAN.
[Sysname] interface ten-gigabitethernet 2/0/1
[Sysname-Ten-GigabitEthernet2/0/1] port link-type trunk
[Sysname-Ten-GigabitEthernet2/0/1] port trunk permit vlan 102 103
[Sysname-Ten-GigabitEthernet2/0/1] port trunk pvid vlan 100
2. Configure the firewall card:
# Create VLAN 1000.
<Firewall> system-view
[Firewall] vlan 1000
[Firewall-vlan1000] quit
# Configure the link type of Ten-GigabitEthernet 0/0 as trunk and operating mode as Layer 2.
Assign the trunk port to VLAN 102, VLAN 103, and VLAN 1000.
[Firewall] interface ten-gigabitethernet 0/0
[Firewall-Ten-GigabitEthernet0/0] port link-mode bridge
[Firewall-Ten-GigabitEthernet0/0] port link-type trunk
[Firewall-Ten-GigabitEthernet0/0] port trunk permit vlan 102 103 1000
[Firewall-Ten-GigabitEthernet0/0] quit
# Configure two subinterfaces Ten-GigabitEthernet 0/0.102 and Ten-GigabitEthernet 0/0.103.
Configure them as access ports and set the operating mode to Layer 2. Assign the two interfaces
to VLAN 1000.
[Firewall] interface ten-gigabitethernet 0/0.102
[Firewall-Ten-GigabitEthernet0/0.102] port link-mode bridge
[Firewall-Ten-GigabitEthernet0/0.102] port link-type access
[Firewall-Ten-GigabitEthernet0/0.102] port access vlan 1000
[Firewall-Ten-GigabitEthernet0/0.102] quit
[Firewall] interface ten-gigabitethernet 0/0.103
[Firewall-Ten-GigabitEthernet0/0.103] port link-mode bridge
[Firewall-Ten-GigabitEthernet0/0.103] port link-type access
[Firewall-Ten-GigabitEthernet0/0.103] port access vlan 1000