防火墙F100-C-G2

1、创建vlan，vlan虚接口配置地址

vlan 91

#
vlan 92

interface Vlan-interface91

ip address 192.168.1.1 255.255.255.0

 interface Vlan-interface92 

ip address 192.168.2.1 255.255.255.0

2、接口将路由模式改成交换模式，并将接口加入vlan

interface GigabitEthernet1/0/5 

 port link-mode bridge

 port access vlan 92

3、接口和vlan加入安全域

security-zone name Trust 

 import interface Vlan-interface91 

 import interface Vlan-interface92 

 import interface GigabitEthernet1/0/5 vlan 92

4、安全域放通

security-policy ip 

 rule 0 name pass 

 action pass 

 source-zone management

 source-zone local 

 source-zone trust 

 source-zone untrust 

 destination-zone trust 

 destination-zone untrust

 destination-zone management

 destination-zone local

5、保存

save f