H3C Technologies H3C S3100 Series Switches - Manual (Page 151)

Operation Manual – Port Isolation
H3C S3100-52P Ethernet Switch Chapter 1 Port Isolation Configuration
1-1
Chapter 1 Port Isolation Configuration
1.1 Port Isolation Overview
Through the port isolation feature, you can add the ports to be controlled into an
isolation group to isolate the Layer 2 and Layer 3 data between each port in the
isolation group. Thus, you can construct your network in a more flexible way and
improve your network security.
Currently, an S3100-52P Ethernet Switch supports only one isolation group, but does
not limit the number of Ethernet ports in the unique isolation group.
Note:
Port isolation is independent of VLAN configuration.
1.2 Port Isolation Configuration
You can perform the following operations to add individual Ethernet ports to the
isolation group, thus isolating Layer 2 and Layer 3 data between each port in the
isolation group.
Table 1-1
Configure port isolation
Operation Command Description
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—
Add the Ethernet port to
the isolation group
port isolate
Required
By default, an isolation
group contains no port.
Note:
When the port isolate command or the undo port isolate command is executed on a
member port of an aggregation group, the other ports in the same aggregation group on
the local device will be added to or removed from the isolation group together at the
same time.