HP VPN Firewall Appliances Access Control Command Reference

30
Security zone commands
import interface
Use import interface to add an interface to a security zone.
Use undo import interface to remove an interface from a security zone.
Syntax
import interface interface-type interface-number [ vlan vlan-list ]
undo import interface interface-type interface-number [ vlan vlan-list ]
Default
A security zone contains no interface.
Views
Security zone view
Default command level
2: System level
Parameters
interface-type interface-number: Specifies an interface by its type and number.
vlan-list: Specifies the VLANs to which the interface belongs. The vlan-list argument must be in the form
{ vlan-id1 [ to vlan-id2 ] }&<1-10>, where vlan-id1 and vlan-id2 are the IDs of two existing VLANs in the
range 1 to 4094 and vlan-id2 must be greater than vlan-id1. &<1-10> indicates that you can enter up to
ten VLANs or VLAN ranges.
Usage guidelines
To add a Layer 3 Ethernet interface to a security zone, specify only the interface type and number. You
can perform the import interface command multiple times to add multiple Layer 3 interfaces to a security
zone. Make sure the Layer 3 interfaces to be added and the security zone belong to the same VD. For
more information about assigning an interface to a VD, see System Management and Maintenance
Configuration Guide.
To add a Layer 2 Ethernet interface to a security zone, specify both the interface type and number and
the VLANs to which the interface belongs. You can perform the import interface command multiple times
to add the same Layer 2 interface with different native VLANs to the same security zone. Make sure the
VLANs and the security zone belong to the same VD. For more information about assigning a VLAN to
a VD, see System Management and Maintenance Configuration Guide.
To move an interface from a security zone to another security zone, remove the interface from the current
security zone by using the undo import interface command and then add it to the target security zone by
using the import interface command.
Examples
# Add Layer 3 Ethernet interface GigabitEthernet 0/1 to security zone Trust.
<Sysname> system-view
[Sysname] zone name Trust