1.1 Overview of SPU Pre-Configuration..................................................................................................................2

1.2 Configuring a Service Type................................................................................................................................3

1.2.1 Establishing the Configuration Task.........................................................................................................3

1.2.2 Configuring a Service Type.......................................................................................................................3

1.2.3 Checking the Configuration.......................................................................................................................4

1.3 Configuring Layer 2 Flow Import......................................................................................................................4

1.3.1 Establishing the Configuration Task.........................................................................................................4

1.3.2 Configuring Layer 2 Flow Import with Interfaces Aggregated.................................................................6

1.3.3 Configuring Layer 2 Flow Import without Interface Aggregation..........................................................10

1.4 Configuring Layer 3 Flow Import....................................................................................................................14

1.4.1 Establishing the Configuration Task.......................................................................................................14

1.4.2 Configuring Layer 3 Flow Import with Interfaces Aggregated...............................................................16

1.4.3 Configuring Layer 3 Flow Import Without Interface Aggregation.........................................................21

2 Firewall Configuration...............................................................................................................26

2.1 Firewall Overview............................................................................................................................................28

2.2 Firewall Features Supported by the SPU..........................................................................................................28

2.3 Configuring Zones............................................................................................................................................34

2.3.1 Establishing the Configuration Task.......................................................................................................34

2.3.2 Creating a Zone.......................................................................................................................................35

2.3.3 Adding an Interface to the Zone..............................................................................................................35

2.3.4 Creating an Interzone...............................................................................................................................36

2.3.5 Enabling Firewall in the Interzone..........................................................................................................36

2.3.6 Checking the Configuration.....................................................................................................................37

2.4 Configuring the Packet Filtering Firewall........................................................................................................37

2.4.1 Establishing the Configuration Task.......................................................................................................37

2.4.2 Configuring ACL-based Packet Filtering in an Interzone.......................................................................38

2.4.3 Checking the Configuration.....................................................................................................................38

2.5 Configuring the Blacklist..................................................................................................................................39

2.5.1 Establishing the Configuration Task.......................................................................................................39

2.5.2 Enabling the Blacklist Function..............................................................................................................40

Issue 01 (2012-03-15)

Huawei Proprietary and Confidential

Contents