HP VPN Firewall Appliances Network Management Configuration Guide

265
Ste
p
Command Remarks
6. Assign an IP address to the
subinterface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IP address is
configured for the subinterface.
7. Add the subinterface to a
security zone.
• Method 1
a. Enter security zone view
from system view:
zone name zone-name
[ id zone-id ]
b. Add the subinterface to
the security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Method 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
subinterface to the zone.
Use either method.
This security zone is for incoming
packets.
8. Create another subinterface
and enter subinterface view.
interface ten-gigabitEthernet
interface-number.subnumber
N/A
9. Set the encapsulation type
and associate the
subinterface with a VLAN.
vlan-type dot1q vid vid
Optional.
The subinterface receives packets
with the vid.
10. Assign an IP address to the
subinterface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IP address is
configured for the subinterface.
11. Add the subinterface to a
security zone.
• Method 1
a. Enter security zone view
from system view:
zone name zone-name
[ id zone-id ]
b. Add the subinterface to
the security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Method 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
subinterface to the zone.
Use either method.
This security zone is for outgoing
packets.
Displaying and maintaining Layer 3 subinterface forwarding
Task Command Remarks
Display brief interface
information.
display brief interface [ interface-type
[ interface-number | interface-number.subnumber ] ]
[ | { begin | include | exclude } text ]
Available in any view.