F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100
260
[Switch-vlan2] port gigabitethernet 0/1
[Switch-vlan2] port gigabitethernet 0/2
[Switch-vlan2] quit
[Switch] interface gigabitethernet 0/3
[Switch-GigabitEthernet0/3] port-isolate enable group 2
[Switch-GigabitEthernet0/3] interface gigabitethernet 0/1
[Switch-GigabitEthernet0/1] port-isolate enable group 2
[Switch-GigabitEthernet0/1] interface gigabitethernet 0/2
[Switch-GigabitEthernet0/2] port-isolate uplink-port group 2
2. Configure the firewall:
# Specify the IP address of GigabitEthernet 0/2.
<Firewall> system-view
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] ip address 192.168.10.100 255.255.0.0
The ping operation from Host A to Host B is unsuccessful because they are isolated at Layer 2 and
Layer 3.
# Configure local proxy ARP to allow communication between Host A and Host B at Layer 3.
[Firewall-GigabitEthernet0/2] local-proxy-arp enable
The ping operation from Host A to Host B is successful after the configuration.