H3C Technologies H3C S5120 Series Switches - Manual (Page 117)

1-2
To do… Use the command… Remarks
Add the port/ports to an
isolation group as an
isolated port/isolated ports
port-isolate enable group
group-number
Required
No ports are added to an
isolation group by default.
Displaying and Maintaining Isolation Groups
To do… Use the command… Remarks
Display the isolation group information on a
multiple-isolation-group device display port-isolate group
[ group-number ]
Available in any view
Port Isolation Configuration Example
Networking requirements
z Users Host A, Host B, and Host C are connected to GigabitEthernet 1/0/1, GigabitEthernet 1/0/2,
and GigabitEthernet 1/0/3 of Device.
z Device provides access to the Internet through GigabitEthernet 1/0/4.
z GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, GigabitEthernet 1/0/3, and GigabitEthernet 1/0/4
belong to the same VLAN. It is desired that Host A, Host B, and Host C cannot communicate with
one another at Layer 2, but can access the Internet.
Figure 1-1 Networking diagram for port isolation configuration
Configuration procedure
# Create isolation group 2.
system-view
[Device] port-isolate group 2
# Assign GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 to isolation group 2 as
isolated ports.
[Device] interface gigabitethernet 1/0/1