H3C Technologies H3C S7500E Series Switches - Manual (Page 150)

12-1
12
Port Isolation Configuration
When configuring port isolation, go to these sections for information you are interested in:
Introduction to Port Isolation
Configuring the Isolation Group
Displaying and Maintaining Isolation Groups
Port Isolation Configuration Example
Introduction to Port Isolation
Usually, Layer 2 traffic isolation is achieved by assigning ports to different VLANs. To save VLAN
resources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility and
security.
To use the feature, you assign ports to a port isolation group. Ports in an isolation group are called
isolated ports. An isolated port does not forward any Layer 2 traffic to any other isolated port on the
same switch, even if they are in the same VLAN. Still, an isolated port can communicate with any other
port outside the isolation group, provided that they are in the same VLAN
S7500E series Ethernet switches support only one isolation group that is created automatically by the
system as isolation group 1. You can neither remove the isolation group nor create other isolation
groups on such devices. There is no restriction on the number of ports assigned to an isolation group.
Configuring the Isolation Group
Assigning a Port to the Isolation Group
Follow these steps to add a port to the isolation group:
To do… Use the command… Remarks
Enter system view system-view —
Enter
Ethernet
port or OLT
port view
interface interface-type
interface-number
Enter port
view or, port
group view
Enter
Layer-2
aggregate
interface
view
interface bridge-aggregation
interface-number
Required
Use one of the commands.
In Ethernet port or OLT port view, the
subsequent configurations apply to the
current port.
In Layer-2 aggregate interface view, the
subsequent configurations apply to the
Layer-2 aggregate interface and all its
member ports.