Huawei quidway s7700 Configuration Manual page 337

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Issue 01 (2011-07-15)
[SwitchA-GigabitEthernet1/0/25] quit
[SwitchA] interface GigabitEthernet1/0/26
[SwitchA-GigabitEthernet1/0/26] port link-type trunk
[SwitchA-GigabitEthernet1/0/26] undo port trunk allow-pass vlan 1
[SwitchA-GigabitEthernet1/0/26] port trunk allow-pass vlan 600
[SwitchA-GigabitEthernet1/0/26] quit
[SwitchA] interface GigabitEthernet1/0/27
[SwitchA-GigabitEthernet1/0/27] port link-type trunk
[SwitchA-GigabitEthernet1/0/27] undo port trunk allow-pass vlan 1
[SwitchA-GigabitEthernet1/0/27] port trunk allow-pass vlan 700
[SwitchA-GigabitEthernet1/0/27] quit
[SwitchA] interface XGigabitEthernet5/0/0
[SwitchA-XGigabitEthernet5/0/0] eth-Trunk 0
[SwitchA-XGigabitEthernet5/0/0] quit
[SwitchA] interface XGigabitEthernet5/0/1
[SwitchA-XGigabitEthernet5/0/1] eth-Trunk 0
[SwitchA-XGigabitEthernet5/0/1] quit
(2) Add inbound and outbound interfaces to a VLAN on the SPU.
<Quidway> system-view
[Quidway] sysname SPU
[SPU] interface Eth-Trunk 0
[SPU-Eth-Trunk0] quit
[SPU] interface Eth-Trunk0.5
[SPU-Eth-Trunk0.5] control-vid 400 dot1q-termination
[SPU-Eth-Trunk0.5] dot1q termination vid 400
[SPU-Eth-Trunk0.5] ip address 20.20.20.1 255.255.255.0
[SPU-Eth-Trunk0.5] arp broadcast enable
[SPU-Eth-Trunk0.5] quit
[SPU] interface Eth-Trunk0.6
[SPU-Eth-Trunk0.6] control-vid 600 dot1q-termination
[SPU-Eth-Trunk0.6] dot1q termination vid 600
[SPU-Eth-Trunk0.6] ip address 7.7.61.1 255.255.255.0
[SPU-Eth-Trunk0.6] arp broadcast enable
[SPU-Eth-Trunk0.6] quit
[SPU] interface Eth-Trunk0.7
[SPU-Eth-Trunk0.7] control-vid 700 dot1q-termination
[SPU-Eth-Trunk0.7] dot1q termination vid 700
[SPU-Eth-Trunk0.7] ip address 10.10.61.1 255.255.255.0
[SPU-Eth-Trunk0.7] arp broadcast enable
[SPU-Eth-Trunk0.7] quit
[SPU] interface XGigabitEthernet0/0/1
[SPU-XGigabitEthernet0/0/1] eth-Trunk 0
[SPU-XGigabitEthernet0/0/1] quit
[SPU] interface XGigabitEthernet0/0/2
[SPU-XGigabitEthernet0/0/2] eth-Trunk 0
[SPU-XGigabitEthernet0/0/2] quit
2. Configure the firewall on the SPU of SwitchA.
# Create firewalls s11 and s21 and configure them to communicate with real firewalls
s11 and s21.
[SPU] load-balance member s11
[SPU] load-balance member s11
[SPU-lb-member-s11] ip address 7.7.61.2
[SPU-lb-member-s11] weight 15
[SPU-lb-member-s11] priority 15
[SPU-lb-member-s11] quit
[SPU] load-balance member s21
[SPU-lb-member-s21] ip address 10.10.61.2
[SPU-lb-member-s21] weight 30
[SPU-lb-member-s21] priority 15
[SPU-lb-member-s21] quit
3. Configure a firewall group on the SPU of SwitchA.
# Create the firewall group sg11, bind sg11 to firewalls s11 and s21, and set the
forwarding mode to DMAC.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Load Balancing Configuration
326