Operation Manual – Port Isolation
H3C S5600 Series Ethernet Switches
Chapter 1 Port Isolation Configuration
1-2
Note:
z
When a member port of an aggregation group joins/leaves an isolation group, the
other ports in the same aggregation group on the local unit will join/leave the
isolation group at the same time.
z
For ports that belong to an aggregation group and an isolation group simultaneously,
removing a port from the aggregation group has no effect on the other ports. That is,
the rest ports remain in the aggregation group and the isolation group.
z
Ports that belong to an aggregation group and an isolation group simultaneously are
still isolated even when you remove the aggregation group in system view.
z
Adding a port of an isolation group to an aggregation group causes all the ports in
the aggregation group being added to the isolation group.
z
S5600 series Ethernet switches support cross-device port isolation if IRF fabric is
enabled.
z
For S5600 series Ethernet switches belonging to the same IRF Fabric, the port
isolation configuration performed on a port of a cross-device aggregation group
cannot be synchronized to the other ports of the aggregation group if the ports
reside on other units. That is, to add multiple ports in a cross-device aggregation
group to the same isolation group, you need to perform the configuration for each of
the ports individually.
1.3 Displaying and Maintaining Port Isolation Configuration
To do ...
Use the command ...
Remarks
Display information about
the Ethernet ports added
to the isolation group
display isolate port
Available in any view
1.4 Port Isolation Configuration Example
I. Network requirements
z
PC 2, PC 3 and PC 4 are connected to GigabitEthernet1/0/2, GigabitEthernet1/0/3,
and GigabitEthernet1/0/4 ports.
z
The switch connects to the Internet through GigabitEthernet1/0/1 port.
z
It is desired that PC 2, PC 3 and PC 4 cannot communicate with each other.