HP VPN Firewall Appliances Network Management Configuration Guide

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

Ste

Command

Remarks

8. Cancel the action of

manually shutting down the

VLAN interface.

undo shutdown

Optional.

By default, a VLAN interface is not manually

shut down. The VLAN interface is up if one or

more ports in the VLAN is up, and goes down

if all ports in the VLAN go down.

VLAN interface configuration example

1. Network requirements

As shown in Figure 29, PC A is assigned to VLAN 5. PC B is assigned to VLAN 10. The PCs belong

to different IP subnets and cannot communicate with each other.

Configure VLAN interface

s on Firewall and configure PC A and PC B to enable Layer 3

communication between them.

Figure 29 Network diagram

2. Configuration procedure

a. Configure Firewall:

# Create VLAN 5 and assign GigabitEthernet 0/1 to it.

<Firewall> system-view

[Firewall] vlan 5

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] port link-mode bridge

[Firewall-GigabitEthernet0/1] quit

[Firewall-vlan5] port gigabitethernet 0/1

# Create VLAN 10 and assign GigabitEthernet 0/2 to it.

[Firewall] interface gigabitethernet 0/2

[Firewall-GigabitEthernet0/2] port link-mode bridge

[Firewall-GigabitEthernet0/2] quit

[Firewall-vlan5] vlan 10

[Firewall-vlan10] port gigabitethernet 0/2

[Firewall-vlan10] quit

# Create VLAN-interface 5 and configure its IP address as 192.168.0.10/24.

[Firewall] interface vlan-interface 5

[Firewall-Vlan-interface5] ip address 192.168.0.10 24

[Firewall-Vlan-interface5] quit

# Create VLAN-interface 10 and configure its IP address as 192.168.1.20/24.

[Firewall] interface vlan-interface 10

Firewall

PC A

PC B

Vlan-Int5 Vlan-Int10

GE0/1

192.168.0.10/24 192.168.1.20/24

VLAN 5 VLAN 10

192. 168.0.1/24 192. 168.1.1/24

GE0/2