h3c 防火墙irf端口加入什么安全域

不用加入

irf不需要加入安全域，正常配就行，不属于任何域

1、配置IRF堆叠

1号设备关键配置如下：

[H3C]irf member 1 renumber 1 //将1号设备设定为成员1

[H3C]irf member 1 priority 32 //配置优先级32，值大优先，范围（1-32）

[H3C]int range Ten-GigabitEthernet 1/0/50 to Ten-GigabitEthernet 1/0/51

[H3C-if-range]shutdown

[H3C-if-range]quit


[H3C]irf-port 1/2 //将物理端口绑定到IRF端口

[H3C-irf-port1/2]port group interface Ten-GigabitEthernet 1/0/50

[H3C-irf-port1/2]port group interface Ten-GigabitEthernet 1/0/51

[H3C-irf-port1/2]quit


[H3C]int range Ten-GigabitEthernet 1/0/50 to Ten-GigabitEthernet 1/0/51

[H3C-if-range]undo shutdown

[H3C-if-range]quit

[H3C]irf-port-configuration active //激活IRF

[H3C]save


2号设备关键配置点如下：


[H3C]irf member 1 renumber 2 //将2号设备设定为成员2

[H3C]irf member 1 priority 1 //配置优先级1

[H3C]int range Ten-GigabitEthernet 2/0/50 to Ten-GigabitEthernet 2/0/51

[H3C-if-range]shutdown

[H3C-if-range]quit

[H3C]irf-port 2/1 //将物理端口绑定到IRF端口

[H3C-irf-port2/1]port group interface Ten-GigabitEthernet 2/0/50

[H3C-irf-port2/1]port group interface Ten-GigabitEthernet 2/0/51

[H3C-irf-port2/1]quit


[H3C]int range Ten-GigabitEthernet 2/0/50 to Ten-GigabitEthernet 2/0/51

[H3C-if-range]undo shutdown

[H3C-if-range]quit

[H3C]save

[H3C]irf-port-configuration active //激活IRF

不需要配

不过要注意跨框流量问题

如果下连设备是聚合的话

irf不需要加入任何安全域

您好，不需要加入安全域