HP VPN Firewall Appliances Network Management Configuration Guide

49
[FirewallA] vlan 200
[FirewallA-vlan200] port gigabitethernet 0/2
[FirewallA-vlan200] quit
# Configure port GigabitEthernet 0/3 as a trunk port, and assign it to VLANs 100 and 200, to
enable GigabitEthernet 0/3 to forward traffic of VLANs 100 and 200 to Firewall B.
[FirewallA] interface gigabitethernet 0/3
[FirewallA] port link-mode bridge
[FirewallA-GigabitEthernet0/3] port link-type trunk
[FirewallA-GigabitEthernet0/3] port trunk permit vlan 100 200
Please wait... Done.
2. Configure Firewall B in the same way Firewall A is configured.
3. Configure Host A and Host C to be on the same IP subnet, 192.168.100.0/24, for example.
Configure Host B and Host D to be on the same IP subnet, 192.168.200.0/24, for example.
Verifying the configuration
1. Host A and Host C can ping each other successfully, but they both fail to ping Host B. Host B and
Host D can ping each other successfully, but they both fail to ping Host A.
2. Determine whether the configuration is successful by displaying relevant VLAN information.
# Display information about VLANs 100 and 200 on Firewall A.
[FirewallA-GigabitEthernet0/3] display vlan 100
VLAN ID: 100
VLAN Type: static
Route Interface: not configured
Description: VLAN 0100
Name: VLAN 0100
Tagged Ports:
GigabitEthernet0/3
Untagged Ports:
GigabitEthernet0/1
[FirewallA-GigabitEthernet0/3] display vlan 200
VLAN ID: 200
VLAN Type: static
Route Interface: not configured
Description: VLAN 0200
Name: VLAN 0200
Tagged Ports:
GigabitEthernet0/3
Untagged Ports:
GigabitEthernet0/2