Creating A Zone; Adding An Interface To The Zone - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Pre-configuration Tasks
Before configuring a zone, complete the following task:
l
Data Preparation
To configure the zone, you need the following data.
No.
1
2
3

2.3.2 Creating a Zone

Before configuring a firewall, you need to create the related zones. Then you can deploy security
services according to the security priorities of the zones.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
firewall zone zone-name
A zone is created.
The SPU can be configured with up to 255 zones, and no default zone is provided.
Step 3 Run:
priority security-priority
The priority of the zone is set.
You must configure a priority for a zone before making other configurations. The priority cannot
be changed. The priority ranges from 0 to 254. The priorities of the zones cannot be the same.
A greater value indicates a higher priority.
----End

2.3.3 Adding an Interface to the Zone

You can add interfaces to the specified zone.
Prerequisite
The zone has been created through the firewall zone command.
Issue 01 (2011-07-15)
Configuring the interfaces that you want to add to the zone
Data
Name of the zone
Priority of the zone
Interfaces that you want to add to the zone
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
35