Huawei quidway s7700 Configuration Manual page 340

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Issue 01 (2011-07-15)
[SPUA] ip route-static 3.3.3.0 255.255.255.0 Eth-Trunk0.6 11.11.61.2
[SPUA] ip route-static 20.20.20.0 255.255.255.0 Eth-Trunk0.5 7.7.61.1
(4) Add inbound and outbound interfaces to the VLAN on SPUB and configure static
routes to import traffic to the SPU of SwitchC.
<Quidway> system-view
[Quidway] sysname SPUB
[SPUB] interface Eth-Trunk 0
[SPUB-Eth-Trunk0] quit
[SPUB] interface Eth-Trunk 0.5
[SPUB-Eth-Trunk0.5] control-vid 700 dot1q-termination
[SPUB-Eth-Trunk0.5] dot1q termination vid 700
[SPUB-Eth-Trunk0.5] ip address 10.10.61.2 255.255.255.0
[SPUB-Eth-Trunk0.5] arp broadcast enable
[SPUB-Eth-Trunk0.5] quit
[SPUB] interface Eth-Trunk 0.6
[SPUB-Eth-Trunk0.6] control-vid 900 dot1q-termination
[SPUB-Eth-Trunk0.6] dot1q termination vid 900
[SPUB-Eth-Trunk0.6] ip address 12.12.61.1 255.255.255.0
[SPUB-Eth-Trunk0.6] arp broadcast enable
[SPUB-Eth-Trunk0.6] quit
[SPUB] interface XGigabitEthernet0/0/1
[SPUB-XGigabitEthernet0/0/1] eth-Trunk 0
[SPUB-XGigabitEthernet0/0/1] quit
[SPUB] interface XGigabitEthernet0/0/2
[SPUB-XGigabitEthernet0/0/2] eth-Trunk 0
[SPUB-XGigabitEthernet0/0/2] quit
[SPUB] ip route-static 3.3.3.0 255.255.255.0 Eth-Trunk 0.6 12.12.61.2
[SPUB] ip route-static 20.20.20.0 255.255.255.0 Eth-Trunk 0.5
10.10.61.1
2. Configure firewalls on SPUA and SPUB on SwitchB.
# Configure the security zone and the interzone on SPUA.
[SPUA] firewall zone a
[SPUA-zone-a] priority 20
[SPUA-zone-a] quit
[SPUA] firewall zone b
[SPUA-zone-b] priority 50
[SPUA-zone-b] quit
[SPUA] firewall interzone b a
[SPUA-interzone-b-a] firewall enable
[SPUA-interzone-b-a] packet-filter default permit inbound
[SPUA-interzone-b-a] quit
# Configure the security zone and the interzone on SPUB.
[SPUB] firewall zone a
[SPUB-zone-a] priority 20
[SPUB-zone-a] quit
[SPUB] firewall zone b
[SPUB-zone-b] priority 50
[SPUB-zone-b] quit
[SPUB] firewall interzone b a
[SPUB-interzone-a-b] firewall enable
[SPUB-interzone-a-b] packet-filter default permit inbound
[SPUB-interzone-a-b] quit
3. Apply security zones to sub-interfaces of SPUA and SPUB on SwitchB.
# Apply security zones to sub-interfaces of SPUA.
[SPUA] interface Eth-Trunk 0.5
[SPUA-Eth-Trunk0.5] zone a
[SPUA-Eth-Trunk0.5] quit
[SPUA] interface Eth-Trunk 0.6
[SPUA-Eth-Trunk0.6] zone b
[SPUA-Eth-Trunk0.6] quit
# Apply security zones to sub-interfaces of SPUB.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Load Balancing Configuration
329