Method used to configure primary and secondary IP addresses of an interface on USG firewalls

70

The following commands are used to configure the primary and secondary IP addresses of an interface on the USG2000, USG5000, and USG6000:
system-view
[USG] interface GigabitEthernet 0/0/3
[USG-GigabitEthernet0/0/3] ip address 10.2.1.1 24 //Primary IP address
[USG-GigabitEthernet0/0/3] ip address 10.2.1.8 24 sub //Secondary IP address
Note: The primary and secondary IP address of the same interface can be in the same network segment. However, any of IP addresses of different interfaces, IP addresses of the main interface and the subinterface, and IP addresses of the main interface and different subinterfaces cannot be in the same network segment.

Other related questions:
Method used to configure two IP addresses for an interface on the USG firewall and set the primary IP address as the dynamic IP address allocated by the DHCP gateway
You can configure two IP addresses for an interface on the USG2000, USG5000, and USG6000 and set the primary IP address as the dynamic IP address allocated by the DHCP gateway as follows: Note: The SUB address can only be configured as a static IP address of the PC. [USG]interface GigabitEthernet0/0/1 [USG-GigabitEthernet0/0/1]ip address 192.168.2.1 255.255.255.0 [USG-GigabitEthernet0/0/1]ip address 192.168.1.1 255.255.255.0 sub [USG-GigabitEthernet0/0/1]quit [USG] dhcp server ip-pool 0 [USG-dhcp-0]network 192.168.2.0 mask 255.255.255.0 [USG-dhcp-0]dns-list 192.168.2.3 [USG-dhcp-0] quit IP addresses in network segment 192.168.2.0 can be dynamically allocated. IP addresses in network segment 192.168.1.0 are static IP addresses set on the PC.

Method used to view the IP address of an interface on USG firewalls
The commands used to view the IP address of an interface on the USG2000, USG5000, and USG6000 are as follows: 1. Run the display ip interface brief command to view configuration information of an interface IP address. 2. Run the following commands to view the interface configuration: [Huawei] interface g0/0/1 [Huawei-GigabitEthernet0/0/1] display this

Method used to configure the reserved IP address of DHCP on USG firewalls
On the USG2000, USG5000, and USG6000, you can configure the reserved IP address of DHCP as follows: 1. Run the system-view command to enter the system view. 2. Run the dhcp server forbidden-ip start-ip-address [ end-ip-address ] command to configure a reserved IP address. By default, except for the interface IP address of the DHCP server, all IP addresses in the DHCP address pool are used for automatic allocation. To reserve an IP address, set start-ip-address. For example, IP address 10.1.1.3 is used as the DNS server address and needs to be reserved. [USG] dhcp server forbidden-ip 10.1.1.3 To reserve an IP address segment, set start-ip-address and end-ip-address. Ensure that start-ip-address is not equal to or larger than end-ip-address and they are in the same network segment. For example, IP addresses from 10.1.1.4 to 10.1.1.9 are used as fixed IP addresses and need to be reserved. [USG] dhcp server forbidden-ip 10.1.1.4 10.1.1.9

Configure the primary and secondary IP addresses for a CE series switch
Configure the primary and secondary IP addresses for a CE series switch as follows: 1. Run the ip address ip-address { mask | mask-length } command in the interface view to configure the primary IP address for an interface. 2. Run the ip address ip-address { mask | mask-length } sub command in the interface view to configure the secondary IP address for an interface.

Method used to modify the interface address on USG firewalls
The method used to modify the interface address on the USG2000, USG5000, and USG6000 is as follows: Access an interface (a management interface or a VLANIF virtual interface). Enter the desired IP address again. Then, the IP address is modified. This command can overwrite the original IP address with the new IP address. The configuration commands are as follows: [USG]interface g0/0/1 [USG-GigabitEthernet0/0/1]ip address 192.168.1.1 24

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top