H3C Technologies H3C S10500 Series Switches - Manual (Page 70)

59
Port isolation configuration example
Network requirements
As shown in Figure 16 , Host A, Host B, and Host C are connected to GigabitEthernet 1/0/1,
GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 of Device, and Device is connected to the Internet
through GigabitEthernet 1/0/4. All these ports are in the same VLAN.
Configure Device to provide Internet access for all the hosts and isolate them from one another.
Figure 16 Networking diagram for port isolation configuration
Configuration procedure
# Add ports GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 to the
isolation group.
system-view
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] port-isolate enable
[Device-GigabitEthernet1/0/1] quit
[Device] interface gigabitethernet 1/0/2
[Device-GigabitEthernet1/0/2] port-isolate enable
[Device-GigabitEthernet1/0/2] quit
[Device] interface gigabitethernet 1/0/3
[Device-GigabitEthernet1/0/3] port-isolate enable
# Display information about the isolation group.
display port-isolate group
Port-isolate group information:
Uplink port support: NO
Group ID: 1
Group members:
GigabitEthernet 1/0/1 GigabitEthernet 1/0/2 GigabitEthernet 1/0/3