R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

30
[Firewall-Vlan-interface5] ip address 192.168.0.10 24
[Firewall-Vlan-interface5] quit
# Create VLAN-interface 10 and configure its IP address as 192.168.1.20/24.
[Firewall] interface vlan-interface 10
[Firewall-Vlan-interface10] ip address 192.168.1.20 24
[Firewall-Vlan-interface10] return
b. Configure PC A
Configure the default gateway of the PC as 192.168.0.10.
c. Configure PC B
Configure the default gateway of the PC as 192.168.1.20.
3. Verification
a. The PCs can ping each other.
b. Display brief information about Layer 3 interfaces on Firewall to verify the configuration.
<Firewall> display ip interface brief
*down: administratively down
(s): spoofing
Interface Physical Protocol IP Address Description
Vlan-interface5 up up 192.168.0.10 Vlan-inte...
Vlan-interface10 up up 192.168.1.20 Vlan-inte...
Port-based VLAN configuration
Assigning an access port to a VLAN
You can assign an access port to a VLAN in VLAN view, interface view (including Ethernet interface view
andLayer 2 aggregate interface view), or port group view.
Follow these steps to assign one or multiple access ports to a VLAN in VLAN view:
To do… Use the command…
Remarks
Enter system view system-view —
Enter VLAN view vlan vlan-id
Required
If the specified VLAN does not exist,
this command creates the VLAN first.
Assign one or a group of
access ports to the VLAN
port interface-list
Required
By default, all ports belong to VLAN 1.
Follow these steps to assign an access port (in interface view) to a VLAN:
To do… Use the command…
Remarks
Enter system view system-view —