3Com 3CR17660-91, Configuration Manual

Page: 99 / 422

16
P
ORT
I
SOLATION
C
ONFIGURATION
Port Isolation
Overview
Introduction to Port
Isolation
The port isolation function enables you to isolate the ports to be controlled on Layer 2
by adding the ports to an isolation group, through which you can improve network
security and network in a more flexible way.
Currently, you can configure only one isolation group on a switch. The number of
Ethernet ports an isolation group can accommodate is not limited.
The port isolation function is independent of VLAN configuration.
Port Isolation and Port
Aggregation
When a member port of an aggregation group is added to an isolation group, the
other ports in the same aggregation group are added to the isolation group
automatically.
Port Isolation
Configuration
Table 63 lists the operations to add an Ethernet ports to an isolation group.
Displaying Port
Isolation
After the above configuration, you can execute the display command in any view to
display the information about the Ethernet ports added to the isolation group.
Port Isolation
Configuration
Example
Network requirements
■
PC 2, PC 3 and PC 4 are connected to GigabitEthernet1/0/2, GigabitEthernet1/0/3,
and GigabitEthernet1/0/4 ports.
■
The switch connects to the Internet through GigabitEthernet1/0/1 port.
■
It is desired that PC 2, PC 3 and PC 4 cannot communicate with each other.
Table 63 Configure port isolation
Operation Command Description
Enter system view system-view —
Enter Ethernet port
view interface interface-type
interface-num
—
Add the Ethernet port
to the isolation group port isolate Required
By default, an isolation group
contains no port.
Table 64 Display port isolation
Operation Command
Display the information about the Ethernet
ports added to the isolation group. display isolate port