Freedom9 freeGuard Slim 100, Руководство пользователя

Страница: 141 / 170

. . . . .
S E C U R I T Y Z O N E S A N D I N T E R F A C E S
User Guide
9-7
Once the subinterface is created, use the set interface command to add the subinterface to a
zone:
set interface {interface name} zone {name_str}
Example: Configuring a Subinterface witH IP Address and Zone
Use the set interface command to create a subinterface for the VLAN with VLAN id 120 on the
physical interface eth0. Assign the subinterface to the trust zone with the IP address
1 92.168.100.1/24:
set interface eth0.120 ip 192.168.100.1/24
set interface eth0.120 zone trust
save
GUI Example: Configuring a Subinterface with IP Address and Zone
1.
Select Network > Interface > Edit (for eth0)
2.
Enter the following, then click Apply :
VLAN ID: 120
IP Address/Netmask: 192.168.100.1/24
Zone Name: Trust
Deleting Subinterfaces
You must remove all policies bound to a subinterface before you can delete a subinterface. After
you remove all policies, use the
unset interface command to delete the subinterface:
unset interface {interface name}
Example: Deleting the Subinterface eth0.120
unset interface eth0.120
save
GUI Example: Deleting the subinterface ETH0.120
1.
Network > Interface > Remove (for eth0.120)
2.
Select the following:
Are you sure you want to remove: Yes
Configuring Interface Modes
You can configure interfaces with one of the interface modes that determine whether the source
IP address of traffic is translated to the IP address of the egress interface. The three interface
modes are NAT-enabled, route and transparent mode. You can configure additional NAT policies,
such as one-to-one NAT, many-to-one NAT, many-to-many NAT and port address translation
(PAT), through security policies.