Import Interface - HPE D6020 Maintenance And Service Manual

Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display all zone pairs.
<Sysname> display zone-pair security
Source zone
DMZ
Trust

import interface

Use import interface to add Layer 3 interfaces to a security zone, including Layer 3 Ethernet
interfaces, Layer 3 Ethernet subinterfaces, and other types of Layer 3 logical interfaces.
Use undo import interface to remove Layer 3 interfaces from a security zone.
Syntax
import interface layer3-interface-type layer3-interface-number
undo import interface layer3-interface-type layer3-interface-number
Default
A security zone does not have any Layer 3 interface members.
Views
Security zone view
Predefined user roles
network-admin
Parameters
interface layer3-interface-type layer3-interface-number: Specifies a Layer 3 interface by its type and
number.
Usage guidelines
You cannot add any members to the system-defined security zone Local. You can add members to
the other system-defined security zones.
To add multiple Layer 3 interfaces to a security zone, execute this command multiple times.
A Layer 3 interface can belong to only one security zone. To move a Layer 3 interface from one
security zone to another security zone, perform the following tasks:
•
Use the undo import interface command to remove the interface from the current security
zone.
•
Use the import interface command to add the interface to the new security zone.
Examples
# Add Layer 3 Ethernet interface GigabitEthernet 1/0/1 to the security zone Trust.
<Sysname> system-view
[Sysname] security-zone name trust
[Sysname-security-zone-trust] import interface gigabitethernet 1/0/1
Destination zone
Local
Local
273