H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 48)

39
Port isolation configuration
This chapter includes these sections:
• Introduction to port isolation
• Configuring an isolation group
• Displaying and maintaining isolation groups
• Port isolation configuration example
NOTE:
•
The term "switch" or "device" in this chapter refers to the switching engine on a WX3000E wireless
switch.
• The WX3000E series comprises WX3024E and WX3010E wireless switches.
• The port numbers in this chapter are for illustration only.
Introduction to port isolation
Assigning ports to different VLANs is a typical way to isolate Layer 2 traffic for data privacy and security,
but this way is VLAN resource demanding. To save VLAN resources, you can use the port isolation
feature, which can isolate ports without using VLANs and allows for great flexibility and security.
The switching engine on the WX3000E series wireless switches supports multiple isolation groups which
can be configured manually.
The number of ports assigned to an isolation group is not limited.
Within the same VLAN, traffic can be forwarded bidirectionally between isolated ports and ports
outside isolation groups.
Configuring an isolation group
Adding a port to an isolation group
Follow these steps to configure an isolation group for a multiple-isolation-group device:
To do… Use the command… Remarks
Enter system view system-view —
Create an isolation group
port-isolate group
group-number
Required