H3C SecPath Series Operation Manual page 40

Operation Manual – User Access
H3C SecPath Series Security Products
II. Network diagram
1.1.1.1/8
Figure 4-2 VLAN network diagram of L3 switching mode
III. Configuration procedure
Configure the firewall.
# Create Ethernet subinterfaces (Ethernet 3/0/0.1, Ethernet 3/0/0.2, Ethernet 4/0/0.1,
and Ethernet 4/0/0.2 as shown in the figure) and enter their views to configure their IP
addresses. Set the encapsulation type of each subinterface (The encapsulation type of
the Ethernet subinterface must keep consistent with what configured on the switch port)
and the associated VLAN ID.
Note: After configuring the encapsulation type of the Ethernet subinterface, the
subinterface is set as permitted trunk.
<H3C> system-view
[H3C] interface ethernet 3/0/0.1
[H3C-Ethernet3/0/0.1] ip address 1.0.0.1 255.0.0.0
[H3C-Ethernet3/0/0.1] vlan-type dot1q vid 10
[H3C] interface ethernet 3/0/0.2
[H3C-Ethernet3/0/0.2] ip address 2.0.0.1 255.0.0.0
[H3C-Ethernet3/0/0.2] vlan-type dot1q vid 20
[H3C] interface ethernet 4/0/0.1
[H3C-Ethernet4/0/0.1] ip address 3.0.0.1 255.0.0.0
[H3C-Ethernet4/0/0.1] vlan-type dot1q vid 10
[H3C] interface ethernet 4/0/0.2
[H3C-Ethernet4/0/0.2] ip address 4.0.0.1 255.0.0.0
[H3C-Ethernet4/0/0.2] vlan-type dot1q vid 20
Internet
eth 4/0/0.2
4.0.0.1/8
SecPath
VLAN 20
eth3/0/0.1
eth3/0/0.2
1.0.0.1/8
2.0.0.1/8
VLAN 10
VLAN 20
LAN Sw itch
B
A
VLAN10 VLAN 20
2.2.2.2/8
LAN Sw itch
eth 4/0/0.1
3.0.0.1/8
VLAN 10
C
VLAN10
3.3.3.3/8
4-5
Chapter 4 VLAN Configuration
D
VLAN 20
4.4.4.4/8