Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
7.
8.
Procedure
Step 1 Import flows from the S9700 to the SPU.
1.
2.
Step 2 Configure zones and the interzone on the SPU.
[SPU] firewall zone trust
[SPU-zone-trust] priority 100
[SPU-zone-trust] quit
[SPU] firewall zone untrust
[SPU-zone-untrust] priority 1
[SPU-zone-untrust] quit
[SPU] firewall interzone trust untrust
Issue 01 (2012-03-15)
Import flows from the S9700 to the SPU.
Configure zones and the interzone.
Add interfaces to the zones.
Add interfaces to VLANs.
Configure the VLAN bridge instance.
Bind the VLAN bridge instance to sub-interfaces.
Configure an ACL.
Configure packet filtering.
Import flows from the S9700 to the SPU.
<Quidway> system-view
[Quidway] vlan batch 101 to 102
[Quidway] interface GigabitEthernet2/0/1
[Quidway-GigabitEthernet2/0/1] port link-type trunk
[Quidway-GigabitEthernet2/0/1] port trunk allow-pass vlan 101
[Quidway-GigabitEthernet2/0/1] quit
[Quidway] interface GigabitEthernet2/0/2
[Quidway-GigabitEthernet2/0/2] port link-type trunk
[Quidway-GigabitEthernet2/0/2] port trunk allow-pass vlan 102
[Quidway-GigabitEthernet2/0/2] quit
[Quidway] interface Eth-Trunk 1
[Quidway-Eth-Trunk1] port link-type trunk
[Quidway-Eth-Trunk1] port trunk allow-pass vlan 101 to 102
[Quidway-Eth-Trunk1] trunkport XGigabitEthernet 5/0/0
[Quidway-Eth-Trunk1] trunkport XGigabitEthernet 5/0/1
[Quidway-Eth-Trunk1] quit
Configure the SPU as follows:
<SPU> system-view
[SPU] interface Eth-Trunk 1
[SPU-Eth-Trunk1] trunkport XGigabitEthernet 0/0/1
[SPU-Eth-Trunk1] trunkport XGigabitEthernet 0/0/2
[SPU-Eth-Trunk1] quit
[SPU] interface Eth-Trunk 1.1
[SPU-Eth-Trunk1.1] control-vid 101 dot1q-termination
[SPU-Eth-Trunk1.1] dot1q termination vid 101
[SPU-Eth-Trunk1.1] arp broadcast enable
[SPU-Eth-Trunk1.1] quit
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] control-vid 102 dot1q-termination
[SPU-Eth-Trunk1.2] dot1q termination vid 102
[SPU-Eth-Trunk1.2] arp broadcast enable
[SPU-Eth-Trunk1.2] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
80
Advertisement
Table of Contents
