H3C 防火墙接口作为二层并配置互通

需求 H3C 防火墙的2个接口配置为二层模式并互通

PC_2 IP: 192.168.10.10/24
PC_3 IP: 192.168.10.11/24

配置 H3C 防火墙

system-view

# 1. 创建 VLAN 10
vlan 10
 quit

# 2. 配置物理接口为二层模式并加入 VLAN 10
interface GigabitEthernet1/0/2
 port link-mode bridge
 port access vlan 10
 quit

interface GigabitEthernet1/0/3
 port link-mode bridge
 port access vlan 10
 quit

# 3. 将物理接口的 VLAN 10 流量关联到安全域 Trust
security-zone name Trust
 import interface GigabitEthernet 1/0/2 vlan 10
 import interface GigabitEthernet 1/0/3 vlan 10
 quit

# 4. 配置安全策略允许域内通信
security-policy ip
 rule name Trust_Intra_Allow
  source-zone Trust
  destination-zone Trust
  action pass
 quit

测试

成功