R3204P16-HP Load Balancing Module Typical Configuration Examples-6PW101

36
2.
Configure IP addresses for interfaces.
[Sysname] interface Ethernet0/0
[Sysname-Ethernet0/0] ip address 6.0.0.1 255.0.0.0
[Sysname-Ethernet0/0] quit
[Sysname] interface Ethernet0/1
[Sysname-Ethernet0/1] ip address 8.0.0.1 255.0.0.0
[Sysname-Ethernet0/1] quit
3. Add the interfaces to security zones.
[Sysname] firewall zone trust
[Sysname-zone-trust] add interface Ethernet0/0
[Sysname-zone-trust] quit
[Sysname] firewall zone untrust
[Sysname-zone-untrust] add interface Ethernet0/1
[Sysname-zone-untrust]quit
4. Add static routes.
[Sysname] ip route-static 11.0.0.0 255.0.0.0 6.0.0.2
[Sysname] ip route-static 192.168.10.0 255.255.255.0 8.0.0.2
Configuration file
#
firewall packet-filter enable
firewall packet-filter default permit
#
interface Ethernet0/0
ip address 6.0.0.1 255.0.0.0
#
interface Ethernet0/1
ip address 8.0.0.1 255.0.0.0
#
firewall zone local
set priority 100
#
firewall zone trust
add interface Ethernet0/0
set priority 85
#
firewall zone untrust
add interface Ethernet0/1
set priority 5
#
firewall zone DMZ
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local DMZ