Huawei quidway s7700 Configuration Manual page 91

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
2.
3.
4.
5.
6.
7.
8.
Procedure
Step 1 Import flows from the S7700 to the SPU.
1.
2.
Step 2 Configure zones and the interzone on the SPU.
[SPU] firewall zone trust
[SPU-zone-trust] priority 100
[SPU-zone-trust] quit
[SPU] firewall zone untrust
[SPU-zone-untrust] priority 1
[SPU-zone-untrust] quit
[SPU] firewall interzone trust untrust
[SPU-interzone-trust-untrust] firewall enable
[SPU-interzone-trust-untrust] quit
Step 3 Add the interfaces of the SPU to zones.
[SPU] interface Eth-Trunk1.1
[SPU-Eth-Trunk1.1] zone trust
[SPU-Eth-Trunk1.1] quit
[SPU] interface Eth-Trunk1.2
Issue 01 (2011-07-15)
Configure zones and the interzone.
Add interfaces to the zones.
Add interfaces to VLANs.
Configure the VLAN bridge instance.
Bind the VLAN bridge instance to sub-interfaces.
Configure an ACL.
Configure packet filtering.
Import flows from the S7700 to the SPU.
<Quidway> system-view
[Quidway] vlan batch 101 to 102
[Quidway] interface GigabitEthernet2/0/1
[Quidway-GigabitEthernet2/0/1] port link-type trunk
[Quidway-GigabitEthernet2/0/1] port trunk allow-pass vlan 101
[Quidway-GigabitEthernet2/0/1] quit
[Quidway] interface GigabitEthernet2/0/2
[Quidway-GigabitEthernet2/0/2] port link-type trunk
[Quidway-GigabitEthernet2/0/2] port trunk allow-pass vlan 102
[Quidway-GigabitEthernet2/0/2] quit
[Quidway] interface Eth-Trunk 1
[Quidway-Eth-Trunk1] port link-type trunk
[Quidway-Eth-Trunk1] port trunk allow-pass vlan 101 to 102
[Quidway-Eth-Trunk1] trunkport XGigabitEthernet 5/0/0
[Quidway-Eth-Trunk1] trunkport XGigabitEthernet 5/0/1
[Quidway-Eth-Trunk1] quit
Configure the SPU as follows:
<SPU> system-view
[SPU] interface Eth-Trunk 1
[SPU-Eth-Trunk1] trunkport XGigabitEthernet 0/0/1
[SPU-Eth-Trunk1] trunkport XGigabitEthernet 0/0/2
[SPU-Eth-Trunk1] quit
[SPU] interface Eth-Trunk 1.1
[SPU-Eth-Trunk1.1] control-vid 101 dot1q-termination
[SPU-Eth-Trunk1.1] dot1q termination vid 101
[SPU-Eth-Trunk1.1] arp broadcast enable
[SPU-Eth-Trunk1.1] quit
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] control-vid 102 dot1q-termination
[SPU-Eth-Trunk1.2] dot1q termination vid 102
[SPU-Eth-Trunk1.2] arp broadcast enable
[SPU-Eth-Trunk1.2] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
80