码迷,mamicode.com
首页 > 其他好文 > 详细

山石防火墙CLI创建VLAN

时间:2018-10-08 16:37:32      阅读:631      评论:0      收藏:0      [点我收藏+]

标签:one   防火   down   isa   mit   inpu   conda   山石防火墙   dns   

1、 新建VLAN
HS-E2860-A(config)# vlan 220
HS-E2860-A(config-vlan)# show vlan
create VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,0220
active VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219
HS-E2860-A(config-vlan)#exit
2、 将以太网接口加入到VLAN220
HS-E2860-A(config)# interface ethernet0/2
HS-E2860-A(config-if-eth0/2)# switchmode trunk vlan 220
HS-E2860-A(config-if-eth0/2)# exit
HS-E2860-A(config)#show vlan
create VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,0220
active VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,220
3、 配置vlan220 IP段
HS-E2860-A(config)# interface vlan220
HS-E2860-A(config-if-vla220)# ip address 10.122.190.254/27
错误:请先绑定域再配置接口的IP地址
HS-E2860-A(config-if-vla220)# zone 营业厅 //配置IP前要先绑定域
HS-E2860-A(config-if-vla220)# ip address 10.122.190.254/27
4、 配置改VLAN220管理服务(manager server)
HS-E2860-A(config-if-vla220)#manage ssh
HS-E2860-A(config-if-vla220)#manage ping
HS-E2860-A(config-if-vla220)#manage telnet
HS-E2860-A(config-if-vla220)#save //保存配置
5、 检查vlan220配置
HS-E2860-A(config-if-vla220)# show interface vlan220
Interface vlan220
Description:石湖山食堂
Physical up Admin up
Link up Protocol up
Interface ID:41
IP address:10.122.190.254
IP address mask:255.255.255.224
MAC address:001c.54a4.a537
IP MTU:1500
ARP learn:enable
ARP disable-dynamic-entry:disable
ARP timeout:1200
QoS input profile : 1st-level --
2nd-level --
QoS output profile: 1st-level --
2nd-level --
downstream bandwidth is 1000000000
upstream bandwidth is 1000000000
Bind to zone 营业厅
Belong to vsys root
Auth-arp disable
Dns proxy disable
Proximity detect off
Proximity route disable
manage service:SSH;TELNET;PING;
Secondary IP address0: 0.0.0.0 mask:0.0.0.0
Secondary IP address1: 0.0.0.0 mask:0.0.0.0
Secondary IP address2: 0.0.0.0 mask:0.0.0.0
Secondary IP address3: 0.0.0.0 mask:0.0.0.0
Secondary IP address4: 0.0.0.0 mask:0.0.0.0
Secondary IP address5: 0.0.0.0 mask:0.0.0.0

山石防火墙CLI创建VLAN

标签:one   防火   down   isa   mit   inpu   conda   山石防火墙   dns   

原文地址:http://blog.51cto.com/lisiyun/2295911

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!