R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

42
Ste
p
Command Remarks
2. Enter interface view.
• Enter Ethernet interface
view:
interface interface-type
interface-number
• Enter Layer 2 aggregate
interface view:
interface
bridge-aggregation
interface-number
Use either command.
• The configuration made in Ethernet
interface view applies only to the
port.
• The configuration made in Layer 2
aggregate interface view applies to
the aggregate interface and its
aggregation member ports. If the
system fails to apply the
configuration to the aggregate
interface, it stops applying the
configuration to aggregation
member ports. If the system fails to
apply the configuration to an
aggregation member port, it skips
the port and moves to the next
member port.
3. Configure the link type of the
ports as hybrid.
port link-type hybrid By default, all ports are access ports.
4. Assign the hybrid ports to the
specified VLANs.
port hybrid vlan vlan-id-list
{ tagged | untagged }
By default, a hybrid port allows only
packets of VLAN 1 to pass through
untagged.
5. Configure the PVID of the
hybrid ports.
port hybrid pvid vlan vlan-id
Optional.
By default, the PVID is VLAN 1.
NOTE:
• To chan
g
e the link type of a port from trunk to hybrid or vice versa, you must set the link type to access
first.
• Before assigning a hybrid port to a VLAN, create the VLAN first.
• After configuring the PVID for a hybrid port, you must use the port hybrid vlan command to confi
g
ure
the hybrid port to allow packets from the PVID to pass through, so that the egress port can forward
packets from the PVID.
VLAN configuration examples at the CLI
VLAN interface configuration example
Network requirements
As shown in Figure 29, PC A is assigned to VLAN 5. PC B is assigned to VLAN 10. The PCs belong to
different IP subnets and cannot communicate with each other.
Configure VLAN interfaces on Firewall and configure the PCs to enable Layer 3 communication between
the PCs.