HP VPN Firewall Appliances Network Management Configuration Guide

268
Ste
p
Command… Remarks
10. Add the interface and the
VLAN interface to a
security zone.
• Method 1
a. Enter security zone view
from system view:
zone name zone-name [ id
zone-id ]
b. Add the subinterface to the
security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Method 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
ten-GigabitEthernet interface
and the VLAN interface to the
security zone.
Use either method.
This zone is for incoming packets.
11. Create another VLAN
interface and enter its
view.
interface vlan-interface
vlan-interface-id
The vlan-interface-id must be the ID of
the other VLAN created on the
switch.
12. Assign an IP address to the
VLAN interface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, the VLAN interface has no
IP address.
13. Add the interface and the
VLAN interface to a
security zone.
• Method 1
a. Enter security zone view
from system view:
zone name zone-name [ id
zone-id ]
b. Add the subinterface to the
security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Method 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
ten-GigabitEthernet interface
and the VLAN interface to the
security zone.
Use either method.
This zone is for outgoing packets.
Displaying and maintaining inter-VLAN Layer 3 forwarding
Task Command Remarks
Display brief interface
information.
display brief interface [ interface-type
[ interface-number |
interface-number.subnumber ] ] [ | { begin |
include | exclude } text ]
Available in any view.