F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

267
Ste
p
Command… Remarks
515. Add the interface and the
VLAN interface to a
security zone.
• Approach 1
a. Enter security zone view
from system view:
zone name zone-name [ id
zone-id ]
b. Add the subinterface to the
security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Approach 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
Ten-GigabitEthernet interface
and the VLAN interface to the
security zone.
Use either approach.
This zone is for incoming packets.
11. Create another VLAN
interface and enter its
view.
interface vlan-interface
vlan-interface-id
The vlan-interface-id must be the ID of
the other VLAN created on the
switch.
12. Assign an IP address to the
VLAN interface.
ip address ip-address { mask |
mask-length } [ sub ]
By default, the VLAN interface has no
IP address.
13. Add the interface and the
VLAN interface to a
security zone.
• Approach 1
a. Enter security zone view
from system view:
zone name zone-name [ id
zone-id ]
b. Add the subinterface to the
security zone:
import interface
interface-type
interface-number [ vlan
vlan-id ]
• Approach 2
Enter the Web page and select
System > Zone. On the modify
zone page, add the
Ten-GigabitEthernet interface
and the VLAN interface to the
security zone.
Use either approach.
This zone is for outgoing packets.