山石防火墻CLI創建VLAN
阿新 • • 發佈：2018-10-08
esc wid serve run ive learn eve time 以太網 1、 新建VLAN
HS-E2860-A(config)# vlan 220
HS-E2860-A(config-vlan)# show vlan
create VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,0220
active VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219
HS-E2860-A(config-vlan)#exit
2、 將以太網接口加入到VLAN220
HS-E2860-A(config)# interface ethernet0/2
HS-E2860-A(config-if-eth0/2)# exit
HS-E2860-A(config)#show vlan
create VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,0220
active VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,220
3、 配置vlan220 IP段
HS-E2860-A(config)# interface vlan220
錯誤：請先綁定域再配置接口的IP地址
HS-E2860-A(config-if-vla220)# zone 營業廳 //配置IP前要先綁定域
HS-E2860-A(config-if-vla220)# ip address 10.122.190.254/27
4、 配置改VLAN220管理服務（manager server）
HS-E2860-A(config-if-vla220)#manage ssh
HS-E2860-A(config-if-vla220)#manage ping
HS-E2860-A(config-if-vla220)#manage telnet
5、 檢查vlan220配置
HS-E2860-A(config-if-vla220)# show interface vlan220
Interface vlan220
Description:石湖山食堂
Physical up Admin up
Link up Protocol up
Interface ID:41
IP address:10.122.190.254
IP address mask:255.255.255.224
MAC address:001c.54a4.a537
IP MTU:1500
ARP learn:enable
ARP disable-dynamic-entry:disable
ARP timeout:1200
QoS input profile : 1st-level --
2nd-level --
QoS output profile: 1st-level --
2nd-level --
downstream bandwidth is 1000000000
upstream bandwidth is 1000000000
Bind to zone 營業廳
Belong to vsys root
Auth-arp disable
Dns proxy disable
Proximity detect off
Proximity route disable
manage service:SSH;TELNET;PING;
Secondary IP address0: 0.0.0.0 mask:0.0.0.0
Secondary IP address1: 0.0.0.0 mask:0.0.0.0
Secondary IP address2: 0.0.0.0 mask:0.0.0.0
Secondary IP address3: 0.0.0.0 mask:0.0.0.0
Secondary IP address4: 0.0.0.0 mask:0.0.0.0
Secondary IP address5: 0.0.0.0 mask:0.0.0.0
HS-E2860-A(config)# vlan 220
HS-E2860-A(config-vlan)# show vlan
create VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,0220
active VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219
HS-E2860-A(config-vlan)#exit
2、 將以太網接口加入到VLAN220
HS-E2860-A(config)# interface ethernet0/2
HS-E2860-A(config-if-eth0/2)# exit
HS-E2860-A(config)#show vlan
create VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,0220
active VLAN:
0001,0201,0202,0203,0204,0205,0206,0207,0208,0209,0210,0211,0212,0213,0215
0216,0217,0218,0219,220
3、 配置vlan220 IP段
HS-E2860-A(config)# interface vlan220
錯誤：請先綁定域再配置接口的IP地址
HS-E2860-A(config-if-vla220)# zone 營業廳 //配置IP前要先綁定域
HS-E2860-A(config-if-vla220)# ip address 10.122.190.254/27
4、 配置改VLAN220管理服務（manager server）
HS-E2860-A(config-if-vla220)#manage ssh
HS-E2860-A(config-if-vla220)#manage ping
HS-E2860-A(config-if-vla220)#manage telnet
5、 檢查vlan220配置
HS-E2860-A(config-if-vla220)# show interface vlan220
Interface vlan220
Description:石湖山食堂
Physical up Admin up
Link up Protocol up
Interface ID:41
IP address:10.122.190.254
IP address mask:255.255.255.224
MAC address:001c.54a4.a537
IP MTU:1500
ARP learn:enable
ARP disable-dynamic-entry:disable
ARP timeout:1200
QoS input profile : 1st-level --
2nd-level --
QoS output profile: 1st-level --
2nd-level --
downstream bandwidth is 1000000000
upstream bandwidth is 1000000000
Bind to zone 營業廳
Belong to vsys root
Auth-arp disable
Dns proxy disable
Proximity detect off
Proximity route disable
manage service:SSH;TELNET;PING;
Secondary IP address0: 0.0.0.0 mask:0.0.0.0
Secondary IP address1: 0.0.0.0 mask:0.0.0.0
Secondary IP address2: 0.0.0.0 mask:0.0.0.0
Secondary IP address3: 0.0.0.0 mask:0.0.0.0
Secondary IP address4: 0.0.0.0 mask:0.0.0.0
Secondary IP address5: 0.0.0.0 mask:0.0.0.0
山石防火墻CLI創建VLAN