HP VPN Firewall Appliances Network Management Configuration Guide

270
# Create VLAN 102 and VLAN 103. Assign GigabitEthernet 3/0/1 to VLAN 102 and GigabitEthernet
3/0/2 to VLAN 103.
<Sysname> system-view
[Sysname] vlan 102
[Sysname-vlan102] port GigabitEthernet 3/0/1
[Sysname-vlan102] vlan 103
[Sysname-vlan103] port GigabitEthernet 3/0/2
[Sysname-vlan103] quit
# Configure the link type of ten-GigabitEthernet 2/0/1 as trunk and assign the trunk port to VLAN 102
and VLAN 103.
[Sysname] interface Ten-GigabitEthernet 2/0/1
[Sysname-Ten-GigabitEthernet2/0/1] port link-type trunk
[Sysname-Ten-GigabitEthernet2/0/1] port trunk permit vlan 102 103
2. Configure the firewall card.
# Configure the operating mode of ten-GigabitEthernet 0/0 as Layer 3.
[Sysname] interface Ten-GigabitEthernet 0/0
[Sysname-Ten-GigabitEthernet0/0] port link-mode route
# Configure two subinterfaces for ten-GigabitEthernet 0/0. Set their encapsulation type to dot1q and
associate them with VLANs created on the switch. Assign IP addresses for the subinterfaces.
[Sysname-Ten-GigabitEthernet0/0] interface Ten-GigabitEthernet0/0.1
[Sysname-Ten-GigabitEthernet0/0.1] vlan-type dot1q vid 102
[Sysname-Ten-GigabitEthernet0/0.1] ip address 102.0.0.3 24
[Sysname-Ten-GigabitEthernet0/0.1] interface Ten-GigabitEthernet0/0.2
[Sysname-Ten-GigabitEthernet0/0.2] vlan-type dot1q vid 103
[Sysname-Ten-GigabitEthernet0/0.2] ip address 103.0.0.3 24
# Add ten-GigabitEthernet 0/0.1 to security zone Trust.