HP VPN Firewall Appliances Access Control Command Reference

31
[Sysname-zone-Trust] import interface gigabitethernet 0/1
[Sysname-zone- Trust] quit
# Add Layer 2 Ethernet interface Gigabitethernet 0/1 and VLAN 10 to security zone Untrust.
<Sysname> system-view
[Sysname] zone name Untrust
[Sysname-zone-Untrust] import interface gigabitethernet 0/1 vlan 10
[Sysname-zone-Untrust] quit
Related commands
zone
interzone
Use interzone to create an interzone instance and enter interzone instance view.
Use undo interzone to remove an interzone instance.
Syntax
interzone source source-zone-name destination destination-zone-name
undo interzone source source-zone-name destination destination-zone-name
Default
No interzone instance exists.
Views
System view, VD system view
Default command level
2: System level
Parameters
source-zone-name: Specifies the source security zone name, a case-insensitive string of 1 to 20
characters.
destination-zone-name: Specifies the destination security zone name, a case-insensitive string of 1 to 41
characters.
Usage guidelines
An interzone instance indicates the source zone and destination zone of a data flow to be monitored or
controlled by a security policy, such as an ASPF policy, interzone policy, or session logging policy. After
you apply a security policy to an interzone instance, the first packet of a data flow traveling from the
source zone to the destination zone will be checked and processed according to the security policy.
The specified source and destination security zones must already exist.
The destination zone must belong to the same VD as the source zone, or have its share attribute enabled.
If the destination zone belongs to another security zone, specify the destination zone in this format:
vd-name-zone-id. For example, to use security zone named 2 on VD test as the destination zone, you must
enter test-2.
Removing an interzone instance removes security policies applied to the instance at the same time.