Huawei quidway s7700 Configuration Manual page 93

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
l
Issue 01 (2011-07-15)
#
interface Eth-Trunk 1
#
interface XGigabitEthernet0/0/1
eth-trunk 1
#
interface XGigabitEthernet0/0/2
eth-trunk 1
#
firewall zone trust
priority 100
#
firewall zone untrust
priority 1
#
acl 3000
rule 5 permit ospf
#
acl number 4100
rule 5 permit destination-mac ffff-ffff-ffff
rule 10 permit destination-mac 0100-5e00-0000 ffff-ff01-0000
rule 15 permit l2-protocol arp
rule 20 permit source-mac 000f-1f7e-fec5 l2-protocol ip
#
firewall interzone trust untrust
firewall enable
packet-filter 3000 inbound
packet-filter 4100 inbound
#
inter-vlan-bridge instance 127
#
interface Eth-Trunk1.1
control-vid 101 dot1q-termination
dot1q termination vid 101
arp broadcast enable
l2 binding inter-vlan-bridge instance 127
zone trust
#
interface Eth-Trunk1.2
control-vid 102 dot1q-termination
dot1q termination vid 102
arp broadcast enable
l2 binding inter-vlan-bridge instance 127
zone untrust
#
return
Configuration file of the S7700
#
vlan batch 101 to 102
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 101 to 102
#
interface GigabitEthernet2/0/1
port link-type trunk
port trunk allow-pass vlan 101
#
interface GigabitEthernet2/0/2
port link-type trunk
port trunk allow-pass vlan 102
#
interface XGigabitEthernet5/0/0
eth-trunk 1
#
interface XGigabitEthernet5/0/1
eth-trunk 1
#
return
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
82