H3c-technologies H3C SecPath F5020 Manual de usuario descargar pdf (Pagina 80)

Configuration procedure

1. Configure security engine group test:

# Create security engine group test.

<Sysname> system-view

[Sysname] blade-controller-team test

# Add the security engine on CPU 1 in slot 3 to the security engine group.

[Sysname-blade-controller-team-2-test] location blade-controller slot 3 cpu 1

This operation will also reboot the blade controller. Continue? [Y/N]:y

[Sysname-blade-controller-team-2-test] quit

2. Configure context cnt1:

# Create context cnt1 and configure a description for it.

[Sysname] context cnt1

[Sysname-context-2-cnt1] description context-1

# Assign context cnt1 to security engine group test. (The ID of the group is 2.)

[Sysname-context-2-cnt1] location blade-controller-team 2

# Configure the context to use up to 60% of the total disk spaces on the security engine.

[Sysname-context-2-cnt1] limit-resource disk slot 3 cpu 1 ratio 60

# Configure the context to use up to 60% of the total memory spaces on the security engine.

[Sysname-context-2-cnt1] limit-resource memory slot 3 cpu 1 ratio 60

# Set the CPU weight to 8 for the context.

[Sysname-context-2-cnt1] limit-resource cpu weight 8

# Set the throughput threshold to 100000 kbps for the context.

[Sysname-context-2-cnt1] capability throughput kbps 100000

# Set the maximum number of object policy rules to 1000 for the context.

[Sysname-context-2-cnt1] capability object-policy rule maximum 1000

# Start the context.

[Sysname-context-2-cnt1] context start

It will take some time to start the context...

Context started successfully.

# Assign interfaces GigabitEthernet 1/0/1 and GigabitEthernet 1/0/11 to the context.

[Sysname-context-2-cnt1] allocate interface gigabitethernet 1/0/1 gigabitethernet

1/0/11

[Sysname-context-2-cnt1] quit

3. Configure context cnt2:

# Create context cnt2 and configure a description for it.

[Sysname] context cnt2

[Sysname-context-3-cnt2] description context-2

# Assign context cnt2 to security engine group test. (The ID of the group is 2.)

[Sysname-context-3-cnt2] location blade-controller-team 2

# Start the context.

[Sysname-context-3-cnt2] context start

It will take some time to start the context...

Context started successfully.

# Assign interfaces GigabitEthernet 1/0/2 and GigabitEthernet 1/0/12 to the context.

1 2 ... 75 76 77 78 79 80 81 82

Comentarios a estos manuales

Sin comentarios

H3c-technologies H3C SecPath F5020 Manual de usuario Pagina 80

Comentarios a estos manuales

Relacionado con productos y manuales para La Seguridad H3c-technologies H3C SecPath F5020