H3C Technologies H3C SecPath F1000-E User Manual

Page 296

Advertising
background image

271

2.

Configure the firewall card.

# Configure the operating mode of ten-GigabitEthernet 0/0 as Layer 3.

[Sysname] interface Ten-GigabitEthernet 0/0

[Sysname-Ten-GigabitEthernet0/0] port link-mode route

# Configure two subinterfaces for ten-GigabitEthernet 0/0. Set their encapsulation type to dot1q and
associate them to with VLANs created on the switch. Assign IP addresses for the subinterfaces.

[Sysname-Ten-GigabitEthernet0/0] interface Ten-GigabitEthernet0/0.1

[Sysname-Ten-GigabitEthernet0/0.1] vlan-type dot1q vid 102

[Sysname-Ten-GigabitEthernet0/0.1] ip address 102.0.0.3 24

[Sysname-Ten-GigabitEthernet0/0.1] interface Ten-GigabitEthernet0/0.2

[Sysname-Ten-GigabitEthernet0/0.2] vlan-type dot1q vid 103

[Sysname-Ten-GigabitEthernet0/0.2] ip address 103.0.0.3 24

# Add ten-GigabitEthernet 0/0.1 to security zone Trust.

# Add ten-GigabitEthernet 0/0.2 to security zone Untrust.

Advertising