Add the layer-2 interface (service interface) to the VLAN and log in to the device through interface VLANIF. For example, the two service interfaces are GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2. The configurations are as follows:
# Create a VLAN and add the interfaces to the VLAN. By default, the interfaces belong to VLAN1.
<FW> system-view
[FW] vlan 2
[FW-vlan-2] quit
[FW] interface GigabitEthernet 1/0/1
[FW-GigabitEthernet1/0/1] portswitch
[FW-GigabitEthernet1/0/1] port access vlan 2
[FW-GigabitEthernet1/0/1] quit
[FW] interface GigabitEthernet 1/0/2
[FW-GigabitEthernet1/0/2] portswitch
[FW-GigabitEthernet1/0/2] port access vlan 2
[FW-GigabitEthernet1/0/2] quit
# Configure the VLANIF interfaces.
[FW] interface vlanif 2
[FW-Vlanif2] ip address 10.1.3.1 24
[FW-Vlanif2] service-manage enable
[FW-Vlanif2] service-manage ssh permit
[FW-Vlanif2] service-manage https permit
[FW-Vlanif2] quit
[FW] firewall zone trust
[FW-zone-trust] add interface vlanif 2
[FW-zone-trust] quit
# Configure a security policy from the Trust zone, where the VLANIF interfaces reside, to the Local zone.
[FW] security-policy
[FW-policy-security] rule name policy_sec
[FW-policy-security-rule-policy_sec] source-zone trust
[FW-policy-security-rule-policy_sec] destination-zone local
[FW-policy-security-rule-policy_sec] action permit
[FW-policy-security-rule-policy_sec] quit
[FW-policy-security] quit
Log in to the device using 10.1.3.1 after the configurations are complete.