F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

264
Ste
p
Command Remarks
489. Create a subinterface of the
Ten-GigabitEthernet interface
and enter subinterface view.
interface ten-gigabitethernet
interface-number.subnumber
N/A
490. Set the encapsulation type
and associate the
subinterface with a VLAN.
vlan-type dot1q vid vid
The subinterface receives packets
with the vid.
491. Assign an IP address to the
subinterface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IP address is
configured for the subinterface.
492. Add the subinterface to a
security zone.
• Approach 1
a. Enter security zone view
from system view:
zone name zone-name
[ id zone-id ]
b. Add the subinterface to
the security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Approach 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
subinterface to the zone.
Use either approach.
This security zone is for incoming
packets.
493. Create another subinterface
and enter subinterface view.
interface ten-gigabitethernet
interface-number.subnumber
N/A
494. Set the encapsulation type
and associate the
subinterface with a VLAN.
vlan-type dot1q vid vid
Optional.
The subinterface receives packets
with the vid.
495. Assign an IP address to the
subinterface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, no IP address is
configured for the subinterface.
496. Add the subinterface to a
security zone.
• Approach 1
a. Enter security zone view
from system view:
zone name zone-name
[ id zone-id ]
b. Add the subinterface to
the security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Approach 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
subinterface to the zone.
Use either approach.
This security zone is for outgoing
packets.