
Port Isolation Function Configuration
76
6. Port Isolation Function Configuration
6.1
Introduction to Port Isolation Function
Port isolation is an independent port-based function working in an inter-port way,
which isolates flows of different ports from each other. With the help of port isolation, users
can isolate ports within a VLAN to save VLAN resources and enhance network security.
After this function is configured, the ports in a port isolation group will be isolated from
each other, while ports belonging to different isolation groups or no such group can
forward data to one another normally. No more than 16 port isolation groups can a switch
have.
6.2
Task Sequence of Port Isolation
1. Create an isolate port group
2. Add Ethernet ports into the group
3. Specify the flow to be isolated
4. Display the configuration of port isolation
1. Create an isolate port group
Command
Explanation
Global Mode
isolate-port group
<WORD>
no isolate-port group
<WORD>
Set a port isolation group; the no operation
of this command will delete the port
isolation group.
2. Add Ethernet ports into the group
Command
Explanation
Global Mode
isolate-port group <
WORD
> switchport
interface
[ethernet
|
port-channel]
<
IFNAME
>
no
isolate-port
group
<
WORD
>
switchport
interface
[ethernet
|
port-channel]
<IFNAME>
Add one port or a group of ports into a port
isolation group to isolate, which will become
isolated from the other ports in the group;
the no operation of this command will
remove one port or a group of ports out of a
port isolation group.