R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

IP addressing configuration example

Network requirements

As shown in Figure 8, Ten-GigabitEthernet 0/0.1 on the Firewall is connected to a LAN comprising two

s e g m e n t s : 172.16.1.0/ 24 and 172.16.2.0/24 .

To enable the hosts on the two network segments to communicate with the external network through the

Firewall, and to enable the hosts on the LAN can communicate with each other, perform the following

configurations:

• Assign a primary IP address and a secondary IP address to Ten-GigabitEthernet 0/0.1 on the

Firewall.

• Set the primary IP address of the Firewall as the gateway address of the PCs on subnet

172.16.1.0/24, and the secondary IP address of the Firewall as the gateway address of the PCs on

s u b n e t 172.16.2.0 / 24.

Figure 8 Network diagram for IP address configuration

Configuration procedure

# Assign a primary IP address and a secondary IP address to Ten-GigabitEthernet 0/0.1.

<Firewall> system-view

[Firewall] interface ten-gigabitethernet 0/0.1

[Firewall-Ten-GigabitEthernet0/0.1] ip address 172.16.1.1 255.255.255.0

[Firewall-Ten-GigabitEthernet0/0.1] ip address 172.16.2.1 255.255.255.0 sub

# Set the gateway address to 172.16.1.1 on the PCs attached to subnet 172.16.1.0/24, and to 172.16.2.1

on the PCs attached to subnet 172.16.2.0/24.

# Ping a host on subnet 172.16.1.0/24 from the Firewall to check the connectivity.

<Firewall> ping 172.16.1.2

PING 172.16.1.2: 56 data bytes, press CTRL_C to break

Reply from 172.16.1.2: bytes=56 Sequence=1 ttl=255 time=25 ms

Reply from 172.16.1.2: bytes=56 Sequence=2 ttl=255 time=27 ms

Reply from 172.16.1.2: bytes=56 Sequence=3 ttl=255 time=26 ms

Reply from 172.16.1.2: bytes=56 Sequence=4 ttl=255 time=26 ms