R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

32
VLAN configuration example
NOTE:
In this configuration example, either Device A or Device B is the firewall.
Network requirements
As shown in Figure 21, GigabitEthernet 0/1 is a hybrid port with VLAN 100 as its PVID.
Assign GigabitEthernet 0/1 to VLAN 2 and VLANs 6 through 50 as an untagged member, and to VLAN
100 as a tagged member.
Figure 21 Network diagram
Configuration procedure
1. Configure Device A:
NOTE:
Before making the following configurations, check whether GigabitEthernet 0/1 operates in router mode.
If yes, change its operating mode to bridge mode (to do that, select Device Management > Interface from
the navigation tree, and then find and select GigabitEthernet 0/1 to configure it accordin
g
ly); in addition,
specify the security zone to which GigabitEthernet 0/1 belongs when assigned to VLAN 2, VLANs 6 to
50, and VLAN 100.
# Create VLAN 2, VLANs 6 through 50, and VLAN 100.
• Select Network > VLAN > VLAN from the navigation tree. On the page that appears, click Add and
make the following configurations, as shown in Figure 22.
Figure 22 Creating VLANs
• Enter VLAN IDs 2, 6-50, and 100.
• Click Apply.
# Configure VLAN 100 as the PVID of GigabitEthernet 0/1. By default, all ports are access ports and
their PVIDs are all VLAN 1.
• Select Network > VLAN > Port from the navigation tree, click the icon for port GigabitEthernet
0/1 in the Operation column, and then make the following configurations, as shown in Figure 23.